Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oqMvNUVHu6qhktW_5nMc0gIa84o.roa
File: oqMvNUVHu6qhktW_5nMc0gIa84o.roa (raw, json)
Hash identifier: NcEfOlnqI0o4UCBeE8nrdfQixtQt++YhrdgF4/rHl94=
Subject key identifier: A2:A3:2F:35:45:47:BB:AA:A1:92:D5:BF:E6:73:1C:D2:02:1A:F3:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899629C2EF08DA6E5D85F624D7795155D2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oqMvNUVHu6qhktW_5nMc0gIa84o.roa
Signing time: Thu 27 Jul 2023 07:04:26 +0000
ROA not before: Thu 27 Jul 2023 07:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:9629:9eb2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:29:c2:ef:08:da:6e:5d:85:f6:24:d7:79:51:55:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 07:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2a32f354547bbaaa192d5bfe6731cd2021af38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:85:d5:45:07:34:ff:bb:03:c5:d0:6c:8e:
e4:1a:a8:04:5b:fa:4d:50:93:8c:b6:c8:43:6c:11:
28:50:5c:75:8f:58:0f:4e:3f:af:19:cb:4c:dd:da:
fb:74:dd:7e:e6:e1:a5:7c:ec:c4:2c:c7:19:ca:9f:
a5:85:b1:d9:05:c1:e4:82:e6:a3:53:18:8c:12:09:
0e:43:41:ff:07:3d:f3:21:8f:45:d2:f8:33:ac:10:
33:68:30:71:93:81:59:49:89:d8:a1:f2:df:a0:ba:
5e:ae:43:da:0f:c2:9e:e1:09:90:0c:7e:a5:6b:5c:
21:a0:19:79:b0:4a:bb:be:b8:b8:2f:08:45:7f:11:
cc:1a:40:87:0f:7c:ba:5c:ed:f4:76:b4:89:4a:18:
7e:46:87:f0:57:13:0d:6a:a1:b7:48:73:78:df:d4:
cb:ab:8c:9e:7a:84:22:e7:e7:5a:83:e6:ba:5f:a1:
c6:47:32:83:54:91:80:14:73:6b:af:ec:cc:fe:25:
47:b3:34:d9:ef:46:3e:1a:dd:dc:27:99:6b:a8:8e:
d3:11:2b:d0:51:57:10:27:e1:5f:3c:15:52:39:1a:
87:00:c5:dd:6b:a2:6f:6e:2d:d1:0c:c5:89:eb:b4:
54:95:88:96:96:e1:23:0e:ed:10:cf:74:f4:f3:c7:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A3:2F:35:45:47:BB:AA:A1:92:D5:BF:E6:73:1C:D2:02:1A:F3:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oqMvNUVHu6qhktW_5nMc0gIa84o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:5e:6e:cd:ae:5a:dc:69:10:08:08:46:26:1d:2c:77:50:9d:
87:5a:fb:1a:0c:4c:9e:92:0a:20:de:07:0a:11:05:34:a2:37:
90:1c:45:b2:9b:67:54:0c:70:e9:eb:c8:96:0b:24:eb:5c:44:
ab:b5:48:4c:4b:a3:a5:f2:9e:f6:09:3a:75:55:4c:e3:e4:70:
97:b3:a8:8f:1a:52:0c:d2:97:5a:cd:9f:76:37:38:12:6e:0c:
42:76:31:8c:c8:38:a6:c1:4c:db:b5:e5:54:c2:c1:f6:3e:3f:
6f:7d:b4:11:d6:bf:bc:83:d5:11:bc:f5:06:5c:a8:9b:1f:8b:
0f:5a:b8:f4:9d:3e:fa:c3:22:be:82:8b:1c:6d:69:9a:9d:6c:
05:2b:90:80:6d:82:3b:a3:67:d4:59:78:54:a2:7d:40:94:9e:
70:4c:17:5e:aa:65:b6:bc:f7:2d:11:d2:7d:8a:df:a1:d1:99:
62:e3:21:37:5d:e8:b3:b9:8c:6f:57:1f:dd:5d:3f:d3:fd:fb:
59:02:e5:9e:43:7f:9c:b6:e7:b5:7c:46:e3:f1:f8:1a:c0:5a:
9e:ce:f8:29:3d:3c:93:cf:2f:bd:1f:7b:d8:a3:39:4a:54:ca:
f7:85:b6:eb:67:74:49:a7:3c:cc:ef:09:84:fc:ae:00:bf:15:
6a:f5:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:52:24 2025 by rpki-client