Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/osDMM9yp8jEPAyYtSSXyxE9nCJU.roa
File: osDMM9yp8jEPAyYtSSXyxE9nCJU.roa (raw, json)
Hash identifier: IPOrkdjgdtNjLOyLn4a9APo1DmosUYftZ38AthaEzn0=
Subject key identifier: A2:C0:CC:33:DC:A9:F2:31:0F:03:26:2D:49:25:F2:C4:4F:67:08:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69A1F728
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/osDMM9yp8jEPAyYtSSXyxE9nCJU.roa
Signing time: Fri 11 Feb 2022 07:09:29 +0000
ROA not before: Fri 11 Feb 2022 07:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1772222248 (0x69a1f728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 07:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2c0cc33dca9f2310f03262d4925f2c44f670895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:2b:2f:e3:44:fe:e6:dc:93:53:cf:6d:ae:
42:67:70:4c:9f:92:a6:d5:c7:66:e4:90:59:8b:73:
8f:ba:53:44:8b:98:dd:dd:c8:ec:3f:6e:7e:b8:8c:
15:5d:6d:82:56:5d:11:2f:b9:84:61:a8:64:6f:4c:
52:60:99:24:f0:98:3b:c6:06:9e:fd:aa:87:f8:14:
f0:bf:81:28:b3:83:78:9f:85:ef:50:20:2b:6c:9f:
5a:95:df:fc:14:86:77:f3:dd:76:66:22:46:f1:c2:
de:5e:65:92:3b:60:03:fd:5f:6c:36:25:8c:de:da:
d0:77:d1:e7:e2:79:71:86:78:e3:d6:e3:89:09:ba:
dd:16:f1:43:27:79:74:d0:f9:ff:5a:4e:c6:30:fb:
58:6d:5b:e8:89:b9:52:b6:3e:cb:20:3b:11:d8:fa:
49:7a:33:b7:12:58:21:f2:3d:f6:ee:0d:1c:95:cd:
8e:41:f9:81:17:02:83:33:c7:38:3f:2f:76:7b:f4:
38:25:0b:fd:bc:d5:3b:9d:a7:d2:ec:08:65:a6:fe:
3b:e7:29:40:4d:50:7c:51:6c:57:85:f3:87:56:95:
58:ea:9e:cb:3e:2d:a5:1c:04:e8:86:0b:66:10:1a:
c3:a9:ba:96:a9:54:9f:22:21:dc:f7:9b:31:95:18:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C0:CC:33:DC:A9:F2:31:0F:03:26:2D:49:25:F2:C4:4F:67:08:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/osDMM9yp8jEPAyYtSSXyxE9nCJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:0f:dd:ee:9c:71:3b:b1:eb:68:40:aa:46:e7:76:6c:15:e1:
8e:b3:96:29:06:69:bf:5d:8d:88:5a:79:11:0f:54:80:2a:28:
ee:92:89:44:9e:f5:60:29:6f:61:1b:14:c8:2e:b5:1d:39:96:
dd:33:93:a5:36:2c:e3:27:55:2d:81:b1:44:c4:1a:ba:a7:9c:
c3:f2:e5:d6:f2:9b:c9:ae:35:4d:03:77:c3:a5:f1:93:8d:16:
8d:7a:0f:05:f1:5e:f1:63:e3:29:86:02:00:28:e0:c0:8b:51:
2c:d2:d4:3d:04:3f:c7:4d:32:0d:31:5c:c0:87:95:77:89:e6:
c9:33:23:ff:6e:32:49:e3:05:6f:7f:25:95:88:2d:49:ff:76:
44:9b:b0:35:88:3e:d9:c4:fe:9c:0b:24:2d:c4:54:20:e9:f0:
4b:4f:f0:93:f6:1f:be:62:fc:76:83:06:0d:42:a3:2d:15:3a:
22:30:73:4b:5f:57:c4:b5:80:c9:10:03:42:53:b0:1c:9e:55:
f9:c0:ee:cc:c9:6c:44:2c:e8:b2:bb:6c:2a:0f:25:f5:8a:5e:
cc:7e:3f:ee:8f:be:63:5b:cc:fb:3d:da:bf:22:c6:ed:c4:0a:
94:02:a2:4d:a6:96:0d:e0:cb:13:82:9b:bc:88:6b:a1:3c:66:
c2:b0:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:41 2025 by rpki-client