Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/op5FWBISLAchkkfFSujJAKLAt6I.roa
File: op5FWBISLAchkkfFSujJAKLAt6I.roa (raw, json)
Hash identifier: ZpGw8m13FMKmCfe4zwC9ITJCUvG5ERlGc3+lc/MBRmo=
Subject key identifier: A2:9E:45:58:12:12:2C:07:21:92:47:C5:4A:E8:C9:00:A2:C0:B7:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018668164D881FDB74E3184A5EA1FC25F173
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/op5FWBISLAchkkfFSujJAKLAt6I.roa
Signing time: Sun 19 Feb 2023 05:12:17 +0000
ROA not before: Sun 19 Feb 2023 05:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:16:4d:88:1f:db:74:e3:18:4a:5e:a1:fc:25:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 05:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a29e455812122c07219247c54ae8c900a2c0b7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:ae:97:2b:2a:ac:da:4d:ba:e8:ca:7f:c8:
1e:e5:54:d9:24:20:0c:8d:71:96:e2:5b:5d:16:9f:
01:dc:08:10:0e:1b:32:43:e1:2d:0a:17:0b:2e:15:
cb:73:f5:a4:8d:b0:d0:ce:4e:44:e5:31:8a:47:0e:
a3:a3:b1:74:77:f0:94:a3:4e:f8:63:5d:9d:58:14:
a7:29:00:84:88:54:8c:80:be:45:fc:35:0f:e0:07:
d4:0c:17:c9:93:f2:2d:fb:00:1e:63:94:b2:1d:24:
fc:f9:13:5f:68:57:ba:e5:4d:46:4b:77:18:54:81:
5f:9c:80:1a:79:1b:9b:e6:99:8d:14:81:e2:22:77:
2e:55:16:05:0c:31:25:d2:7f:0c:fa:6a:1f:92:dd:
9a:5e:48:c2:1e:31:a9:f6:25:bc:8f:74:9b:49:38:
93:eb:43:35:1e:51:8e:ff:a4:a0:34:29:60:5a:ed:
c9:bd:de:7f:a0:32:92:d9:4d:96:7f:ad:a0:21:53:
86:16:f3:1b:af:cb:f4:c0:cb:e2:e8:9b:48:e6:a1:
b5:3b:00:75:ea:79:7c:10:6a:3b:35:3b:9e:ac:e1:
36:c7:d1:12:3c:13:3b:47:86:87:69:6d:44:c5:08:
f1:b0:91:3d:ab:f9:cf:dc:0a:53:5d:84:d9:28:30:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9E:45:58:12:12:2C:07:21:92:47:C5:4A:E8:C9:00:A2:C0:B7:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/op5FWBISLAchkkfFSujJAKLAt6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:57:88:75:b8:5c:c8:c6:72:a8:29:99:d6:e6:d7:b7:a4:08:
04:a1:05:28:05:fb:57:67:b7:c0:40:55:85:62:8d:9c:35:d4:
b1:30:e0:45:76:23:9c:2d:16:a1:3d:9b:07:ec:33:9d:f9:c3:
d4:c4:5f:15:23:b5:ea:86:6d:72:19:10:28:ed:c8:b8:62:4a:
54:4f:01:98:78:dc:86:a3:76:42:0f:8d:77:7d:23:8b:60:b1:
c3:44:c5:24:eb:1d:18:39:79:65:f6:90:d2:dc:95:db:62:b6:
fb:d9:f6:e4:13:b5:b0:91:5b:f8:84:dc:69:67:26:be:0e:95:
2e:3a:d4:8b:83:ae:89:44:06:2b:8a:ec:ea:99:9c:f5:b5:be:
f2:c2:b2:19:bb:42:25:b4:f2:ac:a9:e7:1d:83:e1:fd:89:37:
00:48:f6:a4:e1:13:b2:83:d9:c1:05:8c:2e:d1:65:f9:e1:77:
36:2d:64:6b:cc:52:0b:98:b7:29:5a:54:ea:f0:74:1b:e2:c4:
55:2f:db:e7:91:fc:3e:46:08:00:be:8c:fb:3b:6a:9c:a9:b3:
1e:db:dd:4a:98:1f:9d:b0:ea:54:fc:23:08:4f:31:b2:ec:94:
c1:cc:2f:ef:3f:49:e0:f3:f0:68:ee:bb:5a:3f:77:d4:e2:24:
12:f6:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:04:10 2025 by rpki-client