Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oysKV_jcO0fKWjFTyoEMT3WBVmY.roa
File: oysKV_jcO0fKWjFTyoEMT3WBVmY.roa (raw, json)
Hash identifier: UQG8K9BQdsnI8yDLMj2oiZneEbR5anGKrU0m2WxssQw=
Subject key identifier: A3:2B:0A:57:F8:DC:3B:47:CA:5A:31:53:CA:81:0C:4F:75:81:56:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018712089C95136834D7650C3E84C29AEB26
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oysKV_jcO0fKWjFTyoEMT3WBVmY.roa
Signing time: Fri 24 Mar 2023 05:12:46 +0000
ROA not before: Fri 24 Mar 2023 05:12:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:12:08:9c:95:13:68:34:d7:65:0c:3e:84:c2:9a:eb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 05:12:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a32b0a57f8dc3b47ca5a3153ca810c4f75815666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:f8:51:54:70:a0:1f:45:93:96:fd:eb:41:
3f:7a:37:7f:74:ac:06:6a:60:ba:d0:42:7d:11:33:
bb:1e:16:de:06:09:e1:64:f5:a0:61:38:46:9f:ec:
32:95:7d:c1:64:6d:27:25:b5:2f:f3:6e:d1:ac:43:
28:0b:bc:90:3c:b4:89:96:70:3d:88:c2:2b:5f:f0:
57:61:bc:aa:e8:8f:bd:31:72:2b:41:09:f5:b9:0b:
13:0b:1b:6f:ad:16:1a:52:0c:e6:e8:43:27:fc:38:
19:d9:64:d7:01:69:67:26:18:91:55:19:9e:18:5b:
17:bb:43:1d:9a:0a:ee:c6:73:ba:c1:ce:da:b3:0f:
59:40:b3:28:0c:19:20:d9:aa:51:7d:cf:9e:50:ed:
dc:1a:c4:c6:03:fe:7d:9b:b8:40:48:6d:e5:bc:5c:
ae:1c:a7:b8:29:f4:51:7b:be:88:08:d8:18:fa:f0:
aa:3d:42:bb:f8:c8:cc:c5:55:3c:d6:af:07:11:ec:
f6:90:9a:44:1f:4b:8f:4d:63:85:92:eb:ad:b4:ea:
0e:60:80:d5:30:8b:b0:26:46:b6:7e:24:36:7e:91:
75:93:66:8e:df:c7:3f:f6:a8:43:b2:e6:f0:cc:8e:
a9:d4:d6:0d:e4:62:d7:23:35:b8:43:6a:27:1f:ba:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2B:0A:57:F8:DC:3B:47:CA:5A:31:53:CA:81:0C:4F:75:81:56:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oysKV_jcO0fKWjFTyoEMT3WBVmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:73:25:8e:0c:78:8e:a6:14:34:9b:9b:7e:4e:ca:e8:90:ab:
49:2f:a2:0f:c5:6e:4d:bf:89:e1:47:5f:15:97:01:46:f9:4f:
79:cf:55:5e:92:b5:4a:c1:64:09:19:12:2b:7a:31:5b:5d:12:
34:43:c6:93:6b:2d:c5:52:fc:ad:26:01:8b:5b:d1:e0:bc:21:
33:b6:00:14:8b:d8:e7:f0:48:7b:e5:54:fc:a3:f8:bb:00:68:
78:28:82:08:63:08:d7:a1:c7:e5:15:9a:a3:4f:52:35:08:9f:
69:04:7d:de:80:8c:e1:be:6a:55:48:5a:f4:26:9d:79:67:c1:
12:bd:54:47:da:a5:54:2b:66:22:91:e2:33:be:80:d8:cf:70:
98:fd:e7:e5:68:6e:84:81:7c:47:0e:28:c7:c8:c0:d4:a7:3e:
fd:ac:fd:8b:4b:22:fa:90:62:09:b8:f9:40:2d:79:71:95:f1:
f6:ac:47:a9:58:04:41:6c:81:78:07:dc:81:4b:50:06:de:c6:
c6:02:76:ea:76:67:59:03:54:b0:2c:5d:2f:ce:4b:59:d5:f9:
36:99:fd:f1:65:1d:ff:50:8e:bc:36:b4:7b:72:40:90:ec:b6:
69:7c:0f:ae:b2:19:20:af:f3:dc:bb:43:05:04:4d:de:35:d0:
b3:2a:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:19:42 2025 by rpki-client