Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oo-DgSnrTk9VFQQmYeZy-CaNu9M.roa
File: oo-DgSnrTk9VFQQmYeZy-CaNu9M.roa (raw, json)
Hash identifier: q6HiI1NbiAZI3UZgi0edL3OLwZQGWIWUtxZBSSyV+bc=
Subject key identifier: A2:8F:83:81:29:EB:4E:4F:55:15:04:26:61:E6:72:F8:26:8D:BB:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850375A87E8BA7316177A7C705A49AABB6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oo-DgSnrTk9VFQQmYeZy-CaNu9M.roa
Signing time: Sun 11 Dec 2022 23:12:00 +0000
ROA not before: Sun 11 Dec 2022 23:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:03:75:a8:7e:8b:a7:31:61:77:a7:c7:05:a4:9a:ab:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 11 23:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a28f838129eb4e4f5515042661e672f8268dbbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:e7:3e:c0:f6:b8:18:af:3b:da:8f:fe:e5:
6c:c5:1a:c5:7b:92:f6:6d:a4:34:da:c6:65:7d:65:
e7:b5:00:89:19:2e:0c:e1:dc:cd:f0:1e:54:13:50:
e0:d5:7d:7b:c7:8a:e8:5e:94:e6:e8:2c:82:b2:1a:
57:77:20:ec:1d:29:7e:ba:3d:59:d9:58:b1:93:a9:
57:a2:42:bb:39:2a:55:31:26:8d:60:1a:3c:1d:c0:
f8:01:dd:97:7d:a3:e0:06:f8:e6:ae:8a:d6:68:26:
73:98:62:42:5b:6c:4d:d7:70:93:fe:ef:03:a1:db:
cc:98:b4:de:22:82:b4:ab:c9:27:29:3e:d3:0d:c4:
4f:61:72:6c:47:5a:3a:6c:f3:6d:21:9f:34:82:30:
2c:4a:f5:b5:ee:75:c3:dd:9c:ea:ed:0c:8d:fa:21:
a3:12:b2:e4:38:65:a2:e8:af:1f:a2:ca:be:47:8e:
9b:45:f2:a4:1c:0e:57:3b:ea:86:e0:9a:13:5c:b4:
57:48:eb:c8:53:3d:44:3e:9d:2b:97:fd:69:ac:a9:
b7:74:3d:93:04:b6:12:f7:16:35:07:e2:6b:9b:18:
77:6f:9e:d9:67:89:3c:ab:34:5f:f4:6a:41:a3:fa:
6a:66:32:9b:f6:71:1c:e0:be:f0:b3:01:d1:2e:71:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:83:81:29:EB:4E:4F:55:15:04:26:61:E6:72:F8:26:8D:BB:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oo-DgSnrTk9VFQQmYeZy-CaNu9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:6b:f6:a4:5e:fd:82:7f:37:d6:23:14:ad:5b:60:e0:29:eb:
33:24:2e:8a:4b:e1:6a:5d:07:0b:02:92:f1:21:55:56:38:d4:
46:11:8c:ec:97:19:b3:5f:aa:01:af:d8:de:c9:ee:04:02:81:
88:00:01:fa:d5:6e:9b:97:38:63:69:e6:8c:f8:29:d6:c4:d7:
03:b2:52:02:2e:e8:65:d9:28:9e:16:1e:4c:be:96:18:b0:67:
9f:b8:40:2d:ef:e7:87:09:95:a5:93:ae:f2:a5:e1:fe:af:e0:
7c:e6:56:24:37:05:57:be:bc:de:cb:d3:6f:d4:2c:ba:c1:eb:
1d:9c:7a:3d:b2:be:60:b6:7a:ae:49:9f:2c:4b:7e:25:d5:41:
ef:2c:ae:f8:93:eb:57:6c:4e:23:9d:cf:44:77:8a:b6:6f:56:
72:77:2d:30:56:fa:b5:7d:8b:9c:e4:5d:77:77:3a:86:18:38:
a5:ae:7d:01:11:34:bc:61:73:5b:8d:d3:38:a3:18:4e:ab:47:
58:52:77:55:d4:92:5d:b7:da:43:bc:67:94:c9:93:83:7d:06:
2a:10:ad:5b:8e:5f:89:75:88:8b:0f:13:ab:02:dd:57:06:1d:
86:5b:70:db:54:6b:71:1e:94:71:b9:d7:ae:58:2f:84:f6:a9:
66:b8:47:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUDdah+i6cxYXenxwWkmqu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjExMjMxMjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjhmODM4MTI5ZWI0ZTRmNTUxNTA0MjY2MWU2NzJmODI2OGRiYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzHnPsD2uBivO9qP/uVsxRrFe5L2
baQ02sZlfWXntQCJGS4M4dzN8B5UE1Dg1X17x4roXpTm6CyCshpXdyDsHSl+uj1Z
2Vixk6lXokK7OSpVMSaNYBo8HcD4Ad2XfaPgBvjmrorWaCZzmGJCW2xN13CT/u8D
odvMmLTeIoK0q8knKT7TDcRPYXJsR1o6bPNtIZ80gjAsSvW17nXD3Zzq7QyN+iGj
ErLkOGWi6K8fosq+R46bRfKkHA5XO+qG4JoTXLRXSOvIUz1EPp0rl/1prKm3dD2T
BLYS9xY1B+Jrmxh3b57ZZ4k8qzRf9GpBo/pqZjKb9nEc4L7wswHRLnETNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKKPg4Ep605PVRUEJmHmcvgmjbvTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvb28tRGdTbnJUazlWRlFRbVllWnktQ2FOdTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAFr9qRe/YJ/N9YjFK1b
YOAp6zMkLopL4WpdBwsCkvEhVVY41EYRjOyXGbNfqgGv2N7J7gQCgYgAAfrVbpuX
OGNp5oz4KdbE1wOyUgIu6GXZKJ4WHky+lhiwZ5+4QC3v54cJlaWTrvKl4f6v4Hzm
ViQ3BVe+vN7L02/ULLrB6x2cej2yvmC2eq5JnyxLfiXVQe8srviT61dsTiOdz0R3
irZvVnJ3LTBW+rV9i5zkXXd3OoYYOKWufQERNLxhc1uN0zijGE6rR1hSd1XUkl23
2kO8Z5TJk4N9BioQrVuOX4l1iIsPE6sC3VcGHYZbcNtUa3EelHG5165YL4T2qWa4
RzI=
-----END CERTIFICATE-----
Generated at Thu May 1 14:27:22 2025 by rpki-client