Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oinuScY6Dr8vH5FP54k9nw0CwHM.roa
File: oinuScY6Dr8vH5FP54k9nw0CwHM.roa (raw, json)
Hash identifier: I917+MLSUwZzcEMH/PS5c6z1qjajzqHjRWyUoaIPC8U=
Subject key identifier: A2:29:EE:49:C6:3A:0E:BF:2F:1F:91:4F:E7:89:3D:9F:0D:02:C0:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D135DFA47737B6AC9B9C08480B2E83F7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oinuScY6Dr8vH5FP54k9nw0CwHM.roa
Signing time: Sun 30 Apr 2023 08:09:41 +0000
ROA not before: Sun 30 Apr 2023 08:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d1:35:df:a4:77:37:b6:ac:9b:9c:08:48:0b:2e:83:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 08:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a229ee49c63a0ebf2f1f914fe7893d9f0d02c073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:99:96:ee:9d:2f:e5:50:fe:ba:89:a8:cf:
49:55:fb:98:fc:7e:df:9b:76:6c:d8:d2:a3:6f:cd:
3e:36:1a:a4:a2:17:1b:1c:61:04:69:db:7a:99:fa:
8a:76:59:a5:ca:93:59:08:b4:9b:4d:81:af:d6:07:
82:57:d2:09:dd:47:3e:f9:a2:ab:b5:ea:1a:62:d5:
3c:62:a2:c2:fd:f3:40:53:bf:6b:1b:7b:59:db:3b:
cc:05:a9:21:07:aa:f9:a0:b6:79:a5:bc:e1:a8:65:
78:87:62:95:1f:dc:39:f9:51:6f:d4:e3:c9:77:4a:
55:88:58:6a:12:13:14:98:ac:e9:16:63:95:fa:49:
27:24:ef:73:b0:35:e9:85:96:f5:7c:9b:45:6e:4f:
09:4e:08:d3:3e:5b:fb:de:cc:4a:f3:e1:54:68:51:
74:c6:b5:c4:d9:0c:56:62:ea:57:4e:67:ba:99:84:
75:44:e7:39:c0:b5:a0:7f:7d:ca:07:45:d9:09:cc:
87:c3:cb:d3:7a:42:3e:3e:30:bf:3b:0b:fd:c5:14:
35:6f:5d:0a:4a:1f:23:08:a8:79:d1:65:38:41:eb:
1a:d0:e5:c5:c1:86:f5:2a:b4:b1:00:09:41:df:4d:
66:9a:1b:31:0c:c1:18:96:67:b1:28:07:cf:8f:7f:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:EE:49:C6:3A:0E:BF:2F:1F:91:4F:E7:89:3D:9F:0D:02:C0:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oinuScY6Dr8vH5FP54k9nw0CwHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:17:6c:e8:f2:4d:10:4e:31:ca:b6:ce:44:91:96:2c:0a:d7:
cb:0b:da:0a:32:f6:5c:34:f1:d1:4a:38:cb:0c:54:70:aa:4a:
c5:df:bc:dc:f5:45:32:18:8b:6d:01:5b:31:3f:92:09:7e:c9:
3c:86:54:2e:24:2f:9a:61:96:04:e0:18:a0:a4:81:23:63:ed:
37:0a:29:b4:78:52:5b:96:cd:d4:cf:99:06:d3:a1:48:03:0b:
c6:7e:96:de:12:a1:86:ba:fe:f1:68:97:bc:98:d2:95:9b:4e:
6b:10:0e:28:c9:f2:b6:71:d9:f7:d7:0c:e7:09:0c:e9:93:ed:
90:e1:99:10:56:6c:8e:f7:fe:42:a7:39:18:f4:a4:01:01:e3:
56:5f:0e:a0:a1:b5:09:51:dd:b1:af:eb:6a:44:3f:dd:05:48:
5c:67:51:e9:0e:c1:24:ff:68:8c:5e:aa:11:62:c9:38:96:5f:
41:e8:5b:5e:1c:fb:82:6f:1f:0d:65:44:3d:dc:78:a7:e8:68:
36:a9:ba:e8:74:be:78:b0:de:9d:3e:be:fe:89:ad:9d:4f:2c:
48:2a:e4:55:10:16:5c:cf:b2:f1:11:87:a6:40:7a:b7:05:73:
80:32:8e:67:0b:95:e6:b3:0f:3e:8d:80:7b:bc:6e:5c:8a:13:
c1:45:61:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfRNd+kdze2rJucCEgLLoP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDMwMDgwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjI5ZWU0OWM2M2EwZWJmMmYxZjkxNGZlNzg5M2Q5ZjBkMDJjMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj+Zlu6dL+VQ/rqJqM9JVfuY/H7f
m3Zs2NKjb80+NhqkohcbHGEEadt6mfqKdlmlypNZCLSbTYGv1geCV9IJ3Uc++aKr
teoaYtU8YqLC/fNAU79rG3tZ2zvMBakhB6r5oLZ5pbzhqGV4h2KVH9w5+VFv1OPJ
d0pViFhqEhMUmKzpFmOV+kknJO9zsDXphZb1fJtFbk8JTgjTPlv73sxK8+FUaFF0
xrXE2QxWYupXTme6mYR1ROc5wLWgf33KB0XZCcyHw8vTekI+PjC/Owv9xRQ1b10K
Sh8jCKh50WU4Qesa0OXFwYb1KrSxAAlB301mmhsxDMEYlmexKAfPj38duwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKIp7knGOg6/Lx+RT+eJPZ8NAsBzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvb2ludVNjWTZEcjh2SDVGUDU0azludzBDd0hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHYXbOjyTRBOMcq2zkSR
liwK18sL2goy9lw08dFKOMsMVHCqSsXfvNz1RTIYi20BWzE/kgl+yTyGVC4kL5ph
lgTgGKCkgSNj7TcKKbR4UluWzdTPmQbToUgDC8Z+lt4SoYa6/vFol7yY0pWbTmsQ
DijJ8rZx2ffXDOcJDOmT7ZDhmRBWbI73/kKnORj0pAEB41ZfDqChtQlR3bGv62pE
P90FSFxnUekOwST/aIxeqhFiyTiWX0HoW14c+4JvHw1lRD3ceKfoaDapuuh0vniw
3p0+vv6JrZ1PLEgq5FUQFlzPsvERh6ZAercFc4AyjmcLleazDz6NgHu8blyKE8FF
YZY=
-----END CERTIFICATE-----
Generated at Thu May 1 02:22:40 2025 by rpki-client