Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/olIg_q3HJjEs6CGlr1a13b8fnG0.roa
File: olIg_q3HJjEs6CGlr1a13b8fnG0.roa (raw, json)
Hash identifier: Liz+nihLt+C5qFz7r4E2KIO3mdn82BJR9gwdS5a9OkM=
Subject key identifier: A2:52:20:FE:AD:C7:26:31:2C:E8:21:A5:AF:56:B5:DD:BF:1F:9C:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C14B83C121916FD59D0CDFDC138D29E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/olIg_q3HJjEs6CGlr1a13b8fnG0.roa
Signing time: Fri 04 Aug 2023 16:04:58 +0000
ROA not before: Fri 04 Aug 2023 16:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:c14a:f8fa/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:4b:83:c1:21:91:6f:d5:9d:0c:df:dc:13:8d:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 16:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a25220feadc726312ce821a5af56b5ddbf1f9c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:57:98:61:3e:9f:4c:ef:99:b1:d4:97:71:
fb:8c:f9:87:f1:73:73:9f:5a:72:5a:20:a4:08:89:
48:c6:4a:28:19:17:20:3e:40:ba:b4:bb:04:10:a0:
99:fc:f4:e4:82:d4:ec:a9:8d:59:ca:8b:5f:e3:61:
15:92:1d:bb:4f:d3:b5:9f:83:31:6a:dc:88:a6:63:
0a:86:9a:8f:fb:b5:93:3b:29:e9:49:76:3f:74:b1:
55:b3:3b:5c:39:83:cd:6d:f1:56:d8:f8:65:f9:1f:
c7:20:21:6b:f7:87:c4:70:09:53:7e:f5:62:0f:35:
ff:63:59:ba:1f:6e:22:8a:d5:67:23:e6:f8:4a:47:
7a:27:4c:66:e1:84:3d:40:6d:14:cc:44:16:88:d9:
8f:aa:81:a4:17:22:43:4e:15:87:16:4a:43:da:12:
70:2d:dc:9d:8e:67:3a:96:04:bb:13:a5:48:ad:76:
45:de:6e:a6:2b:e8:c5:51:a7:71:af:a9:17:06:72:
97:4e:38:b1:c6:66:87:a4:0c:98:b4:33:7d:fd:b9:
40:23:83:f6:ad:62:a4:53:00:10:85:47:2f:8c:79:
c9:6f:25:fb:91:16:54:e5:e4:d2:cb:dd:61:80:ac:
4e:5c:01:b4:3d:5e:27:db:86:4f:3c:c4:a6:5c:e8:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:20:FE:AD:C7:26:31:2C:E8:21:A5:AF:56:B5:DD:BF:1F:9C:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/olIg_q3HJjEs6CGlr1a13b8fnG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:38:8e:b3:4c:fc:7c:ba:e0:dc:e2:70:f3:98:ef:fe:bf:7e:
37:27:28:7c:95:38:f8:e3:8a:a0:a8:22:cd:4b:53:69:1d:e6:
9a:31:48:08:4e:4d:0a:e1:e1:33:a8:96:9e:d3:fc:e0:d5:fa:
ca:bc:75:bb:03:49:f5:e9:c5:df:34:1f:b5:44:0e:77:8a:ef:
f9:e4:44:a2:f3:93:02:0a:48:4c:a8:43:7b:ff:2c:86:36:f6:
a0:02:e5:34:57:9b:d3:fb:a1:c5:f9:c4:49:d2:93:59:11:ed:
1f:0c:f6:f0:81:24:d8:3d:40:3c:99:83:46:43:3d:35:3d:cc:
e7:76:67:32:fb:69:83:45:b7:31:fa:ab:e0:09:6c:7f:ed:28:
6e:5b:74:55:31:3f:11:b8:97:63:5c:57:87:8e:36:32:17:f0:
c2:07:5f:62:f6:f8:af:24:e1:2c:67:84:d0:0f:f2:5f:8d:fa:
d3:60:83:7e:97:bd:d0:76:0b:ec:8f:b1:0a:fa:2e:7b:87:67:
ef:7b:e1:ec:83:71:7a:77:a7:ad:cb:6b:a4:a6:5a:fc:5f:50:
a3:b2:0e:5c:a7:7b:40:63:38:01:12:0d:f6:b7:f5:44:e7:52:
36:ef:1b:ac:a1:3c:d1:96:24:86:0e:5c:af:9a:08:78:f5:0b:
4a:6e:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:49 2025 by rpki-client