Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ojRm5rTLGwFoN8HSVDrGlm53Oz8.roa
File: ojRm5rTLGwFoN8HSVDrGlm53Oz8.roa (raw, json)
Hash identifier: iwy1QpGaJu1WfS2CrL/V4izlRrgdbZpdroJo4N0RRSg=
Subject key identifier: A2:34:66:E6:B4:CB:1B:01:68:37:C1:D2:54:3A:C6:96:6E:77:3B:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899EFB770E9196E571318EE9AF5A03B487
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ojRm5rTLGwFoN8HSVDrGlm53Oz8.roa
Signing time: Sat 29 Jul 2023 00:10:27 +0000
ROA not before: Sat 29 Jul 2023 00:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9e:fb:77:0e:91:96:e5:71:31:8e:e9:af:5a:03:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 00:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a23466e6b4cb1b016837c1d2543ac6966e773b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:b6:cf:a7:79:a9:a0:7c:86:82:ae:1e:d3:
74:c0:ab:6e:e9:fa:6c:d3:da:83:c4:ed:ab:1e:99:
1a:69:07:ca:46:d5:e3:aa:da:a2:69:89:9e:9e:96:
76:60:38:c7:e2:d9:c3:0c:b9:ff:53:ce:84:35:80:
12:8e:9f:11:c5:a4:3c:11:44:b7:f0:df:3d:13:eb:
28:fd:87:43:d7:fb:d8:4f:18:a6:5f:be:72:d9:c6:
a4:c4:04:dc:d3:88:20:ff:48:6a:78:63:93:cf:2a:
af:e6:6f:9c:04:1a:c4:d9:c3:62:63:b6:f2:a2:03:
ca:7b:6b:69:dd:07:96:ee:46:50:b7:84:d3:e0:ac:
f8:e6:2d:49:42:7e:d8:0c:53:e3:b1:6b:86:6a:0f:
7a:29:31:0d:8a:09:86:36:30:e0:7e:42:60:70:af:
61:f3:d9:c9:1a:5d:41:96:2d:0d:b6:3f:5e:4c:34:
36:e4:6d:9a:14:58:e9:94:66:26:23:03:ff:17:36:
56:b6:8f:3d:6c:26:94:0b:06:8a:fa:1a:bc:0c:34:
fb:92:aa:79:3d:e1:c0:ae:c1:da:ef:3f:ef:81:8d:
12:2f:a1:6c:0a:07:47:0a:7e:f9:32:c7:1b:44:df:
f2:e5:be:20:17:45:71:73:82:bd:ea:55:03:60:50:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:66:E6:B4:CB:1B:01:68:37:C1:D2:54:3A:C6:96:6E:77:3B:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ojRm5rTLGwFoN8HSVDrGlm53Oz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:bf:bd:a5:89:e1:1b:82:e0:07:4d:f6:7e:9b:fc:d6:82:c7:
b6:c1:08:01:62:a4:8e:3e:19:40:1d:c1:4c:27:c5:0e:62:06:
8b:43:c6:fb:22:e6:36:a0:6c:7e:b5:da:6b:56:04:e3:3d:ea:
07:db:aa:cc:63:03:7a:37:ee:da:18:c9:ae:63:81:e1:4c:28:
3b:0e:6e:d4:19:bc:41:32:d5:d9:8c:93:8f:e1:9e:03:38:92:
a6:ae:3f:67:80:62:8c:ef:cd:14:32:ba:8e:1b:61:93:f0:ef:
8d:bb:7b:e2:79:2b:34:65:f0:12:9d:cf:49:9d:e7:aa:6f:ef:
ff:72:91:bd:3a:13:15:0b:c8:ad:9b:b1:fa:42:bd:5c:22:bf:
df:b8:78:4a:09:d6:e0:e7:f5:6e:51:a0:e1:a3:e6:4e:0c:ad:
77:7f:f2:ec:05:58:cc:85:5d:39:89:46:a8:df:20:a4:a7:38:
ed:59:38:b7:26:73:06:84:74:6d:42:34:f6:b6:ad:88:f2:e1:
28:f1:76:fc:f4:fe:46:ff:da:47:c5:ca:02:a8:53:f4:8c:b5:
2d:b2:7c:94:71:d6:c0:18:24:7d:82:2e:16:b4:f7:d6:9c:07:
14:14:c0:fe:2a:98:49:bd:55:4c:51:83:d6:58:8b:fb:80:eb:
33:9f:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:57:48 2025 by rpki-client