Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oluxm1tFyv8w78AnLDce9DasTEk.roa
File: oluxm1tFyv8w78AnLDce9DasTEk.roa (raw, json)
Hash identifier: CffbjDlBY4uGCjeTtrZiXfIJBMjmvmZyovR4jR3+lTo=
Subject key identifier: A2:5B:B1:9B:5B:45:CA:FF:30:EF:C0:27:2C:37:1E:F4:36:AC:4C:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188AD94388A33028657B8B1A30759065703
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oluxm1tFyv8w78AnLDce9DasTEk.roa
Signing time: Mon 12 Jun 2023 03:09:12 +0000
ROA not before: Mon 12 Jun 2023 03:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ad:94:38:8a:33:02:86:57:b8:b1:a3:07:59:06:57:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 03:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a25bb19b5b45caff30efc0272c371ef436ac4c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:e8:bd:60:d9:a9:d9:bd:d9:fd:df:c1:49:
c4:de:a4:06:b1:ca:e5:ee:77:2a:55:02:ac:c6:c5:
6a:8f:dd:a2:50:60:ce:fd:87:a2:84:85:60:94:59:
5c:d6:71:b8:1f:cc:75:e4:07:50:95:41:31:7a:5b:
5d:38:9c:5b:67:4f:bb:af:bc:d3:23:6d:32:ba:0d:
6e:74:da:18:9b:45:f3:11:a6:58:b1:91:6b:64:90:
0b:28:2c:44:88:a6:cd:d1:5e:72:c1:e0:d2:38:6b:
e5:e3:34:e6:1e:9e:51:aa:22:25:55:cc:7e:69:53:
98:7c:1f:75:9a:9c:00:be:7a:ef:a6:5f:72:ae:15:
b5:f2:3a:79:55:68:d3:eb:96:eb:42:dd:27:87:e2:
10:53:6b:86:15:f5:c0:db:ca:80:e8:67:cb:6c:a6:
ca:fd:84:a0:32:82:15:ef:cd:2f:7a:cd:e3:59:00:
3f:73:c5:80:5d:cd:38:ea:06:d9:c8:d0:69:e9:99:
07:90:c5:f5:87:72:71:12:25:7a:6d:a1:bf:dc:ab:
dc:50:b3:a6:19:ba:d4:9c:27:bf:22:99:b2:90:be:
00:a8:28:34:8e:d5:aa:69:02:fd:64:0b:20:2c:a1:
5f:b8:dd:60:1c:93:c5:ee:fd:25:ae:98:74:af:4a:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:B1:9B:5B:45:CA:FF:30:EF:C0:27:2C:37:1E:F4:36:AC:4C:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oluxm1tFyv8w78AnLDce9DasTEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:42:b5:60:98:97:58:d5:6d:8b:51:0e:ac:14:f1:bb:b9:09:
17:9f:07:b7:19:9a:22:b0:61:38:36:61:ca:fb:f9:45:0e:8e:
1b:74:a7:0a:10:58:8d:e2:83:84:06:e7:85:e5:7f:9f:3e:9b:
3f:69:49:45:e0:68:84:1b:23:e7:aa:b8:eb:9e:56:1e:d9:4f:
9c:af:a2:00:ba:f1:93:72:8e:ef:76:fe:12:25:5b:3a:d6:f6:
86:08:5f:25:ff:05:f9:c2:b3:00:36:69:8f:62:2f:aa:ae:33:
42:9e:89:f5:87:a1:7f:b2:a1:a9:03:60:83:3a:b0:f3:03:d3:
24:2b:72:c2:85:4c:e5:e4:24:23:09:81:c4:90:31:bd:67:24:
c1:83:91:0c:ef:4d:fc:5d:7c:4a:64:e0:c5:db:4c:a9:3d:59:
db:0c:be:b1:62:ee:f9:cf:8c:09:4d:b4:1b:8f:45:1d:ed:70:
af:6d:8b:0a:51:43:00:af:02:62:74:c1:b6:7f:f8:b4:54:26:
34:1d:07:1e:8b:1b:37:19:b0:7a:5c:5f:85:13:00:67:65:2c:
90:82:9c:4e:2a:e8:dc:e0:8e:34:18:16:27:10:bb:d7:16:57:
77:b8:b0:0a:09:3f:70:9a:73:2b:9b:98:cc:6b:d8:fe:da:42:
f3:ce:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:07:19 2025 by rpki-client