Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oixL08Yb-5L9hIEWv3aisnlyQ8k.roa
File: oixL08Yb-5L9hIEWv3aisnlyQ8k.roa (raw, json)
Hash identifier: js7NaJQjB/dDNx1mJ7cXz+skj0NUar3hDTDj7bH50a8=
Subject key identifier: A2:2C:4B:D3:C6:1B:FB:92:FD:84:81:16:BF:76:A2:B2:79:72:43:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CA95F6D457C5141E616F19CCB1B2627C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oixL08Yb-5L9hIEWv3aisnlyQ8k.roa
Signing time: Thu 19 Jan 2023 15:11:43 +0000
ROA not before: Thu 19 Jan 2023 15:11:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:95:f6:d4:57:c5:14:1e:61:6f:19:cc:b1:b2:62:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 15:11:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a22c4bd3c61bfb92fd848116bf76a2b2797243c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:0c:d1:76:97:de:fa:e5:87:c9:de:f8:b0:
7a:91:4f:b4:c7:f5:fa:0a:e0:30:b7:41:ed:4b:bb:
aa:91:1c:6f:78:b1:88:2d:35:e9:71:7a:6e:55:b5:
ee:07:d4:71:c7:5a:f0:f5:6e:d3:72:1a:a6:ee:13:
28:39:db:49:87:1a:f8:5e:61:ea:24:3b:71:8c:77:
27:e2:c9:6a:32:16:c6:1e:ff:49:c9:8e:06:45:93:
df:37:fc:af:57:82:98:b3:03:d9:84:e5:e8:00:c3:
2f:45:19:f8:a2:c7:ef:e6:d0:69:47:06:6a:e2:a3:
b5:d8:6c:ea:0e:16:1a:d7:25:a5:54:01:de:3f:21:
0e:2a:e7:ee:43:f4:7d:ac:6a:8d:a0:f9:7a:52:e7:
d9:47:36:05:af:1c:57:70:57:db:bc:63:a3:04:1a:
87:94:c5:8d:05:f7:37:90:92:02:6a:d2:75:8d:10:
2e:62:65:35:6d:40:60:45:25:42:5d:39:a7:60:57:
45:18:86:37:6b:de:4f:6e:86:68:32:86:3d:59:de:
89:62:1f:d7:c4:85:30:7a:5c:80:68:29:24:ab:de:
ae:b4:c7:4f:b5:ac:52:a6:d8:6e:c0:84:90:cf:9a:
f5:92:0a:34:b0:dd:eb:32:15:f9:50:ee:36:14:85:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:4B:D3:C6:1B:FB:92:FD:84:81:16:BF:76:A2:B2:79:72:43:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oixL08Yb-5L9hIEWv3aisnlyQ8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:71:c3:f5:90:ac:98:a0:0e:8d:91:86:69:12:2d:cc:9f:be:
7e:6f:c8:3a:21:78:7e:55:6e:77:fe:de:8a:8b:0e:71:c0:01:
dd:fc:be:47:27:ce:8c:1c:47:ac:a5:b7:06:33:53:07:c3:3e:
8c:77:66:84:67:45:f5:46:38:f2:8f:3b:4c:70:91:6c:62:8f:
71:cb:f6:d1:7a:8b:ff:38:41:e5:97:f8:d4:c9:18:c3:d9:28:
76:0b:4c:9b:7a:71:0c:58:a5:a0:95:f6:01:1a:59:77:2b:0f:
c6:d3:c3:d0:95:37:62:cc:f1:09:c6:22:52:87:fc:d7:b5:9b:
24:bc:87:41:19:a8:79:08:f6:c5:76:b1:20:3f:ff:98:45:4d:
fc:aa:77:a6:c9:09:b2:2e:01:cd:81:6b:40:ae:11:25:37:1c:
de:63:43:25:38:0e:21:60:93:f7:da:ca:f7:fe:cb:3a:33:52:
0e:b2:03:2f:94:8f:22:e0:2b:86:89:06:ff:ae:8e:78:59:51:
3d:29:ab:8c:61:e2:ca:5e:4a:e6:5e:66:8b:fe:c5:f2:d5:6b:
30:83:ca:7f:00:6a:8c:8a:3d:69:db:ca:b0:ca:54:ca:1e:40:
40:c0:83:60:fb:25:10:62:82:52:ba:d0:5e:cd:e6:c4:d2:fd:
fd:4d:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:52:42 2025 by rpki-client