Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oyzXh_O9KVMyuCMCrIndUty4gQk.roa
File: oyzXh_O9KVMyuCMCrIndUty4gQk.roa (raw, json)
Hash identifier: ++b34h7o9QBhS3kAkVvb7Pxrejq37qIy8IJCZzikt8U=
Subject key identifier: A3:2C:D7:87:F3:BD:29:53:32:B8:23:02:AC:89:DD:52:DC:B8:81:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A082483A8C8946064ABE1E7241A0288CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oyzXh_O9KVMyuCMCrIndUty4gQk.roa
Signing time: Fri 18 Aug 2023 10:15:25 +0000
ROA not before: Fri 18 Aug 2023 10:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:24:83:a8:c8:94:60:64:ab:e1:e7:24:1a:02:88:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 10:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a32cd787f3bd295332b82302ac89dd52dcb88109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:4a:66:f2:c7:58:9f:66:81:9a:1c:4a:11:
c8:d9:52:c7:c8:51:3d:82:45:7a:58:88:ab:33:fb:
15:b3:af:22:c0:0a:4f:b4:5e:79:9d:d6:75:17:c9:
cf:4d:61:58:32:13:f9:cc:93:53:1f:22:96:3e:32:
71:88:2f:0f:36:28:21:f1:af:97:85:fd:2e:e4:f3:
ec:64:84:4c:34:81:ed:de:0e:6d:b0:e7:f1:50:c4:
3d:39:70:50:18:15:88:11:38:48:0c:30:62:8c:e8:
7f:a1:9f:a6:0d:5b:27:f3:6f:81:57:d8:3e:43:0b:
d3:9d:d8:7a:0f:ec:49:32:63:17:1d:d1:65:2d:8c:
65:13:ac:e7:a1:97:35:6c:40:d3:b9:64:8f:c1:8f:
a3:49:9c:38:dc:c5:13:1a:21:04:e8:dd:62:88:72:
38:a5:46:96:53:e0:c0:22:3d:0c:43:09:c8:4b:7d:
d5:01:b7:5d:b8:12:87:4a:67:13:2c:ed:32:26:ea:
f0:33:d4:fe:ce:02:dd:f5:6e:49:ea:10:a8:bb:6e:
6e:8a:71:3d:cd:db:b2:e0:77:92:87:3a:8c:89:ec:
f2:60:9b:35:73:20:18:a4:3b:99:e9:3a:f0:a0:4b:
65:4f:49:f8:70:4d:e6:52:50:c3:30:c2:cd:69:aa:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2C:D7:87:F3:BD:29:53:32:B8:23:02:AC:89:DD:52:DC:B8:81:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oyzXh_O9KVMyuCMCrIndUty4gQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:d1:08:65:bf:d3:6b:fd:2b:8e:80:c7:8a:46:37:b0:00:e0:
99:d6:6e:cf:5d:3d:48:8f:33:46:23:a1:96:a5:0b:d9:19:42:
ac:a0:d9:b5:0b:d8:30:4a:ad:44:50:9f:8f:ad:c6:73:7b:08:
76:aa:be:33:f3:33:b4:c1:c2:98:32:87:25:b7:d8:8f:63:8c:
ff:63:49:38:59:c0:15:1a:55:d5:21:ff:d0:45:a7:b2:dd:7c:
3d:2b:e0:42:c0:1b:ff:e0:1a:a3:98:1b:fb:ba:63:6b:7d:74:
39:d7:20:9a:7c:ca:c7:49:91:60:c7:18:79:b4:c6:21:07:d1:
36:3f:4d:2d:5d:a8:b5:37:00:cc:8e:3e:d1:80:86:03:1b:0c:
79:e0:02:f6:92:ce:bf:41:fe:e9:c1:da:3a:a8:83:48:38:bc:
dd:28:3b:ca:b6:17:1c:3c:fe:70:8f:15:84:dc:d4:82:af:dd:
d4:f2:f5:23:62:7d:fe:e0:50:d3:10:38:3f:c8:7f:4a:8b:d6:
34:bc:e6:83:b5:c2:c8:61:d3:53:40:db:28:f7:62:7d:5c:b1:
5e:d8:37:33:29:fe:87:7a:fc:03:43:f5:6e:ca:0c:be:c4:29:
1f:f2:31:09:89:6c:ba:26:ae:26:5b:ac:e0:67:a8:25:d1:e4:
0e:89:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:59:12 2025 by rpki-client