Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ozkO8UAXIAcvE3vAwEqE8cTQixw.roa
File: ozkO8UAXIAcvE3vAwEqE8cTQixw.roa (raw, json)
Hash identifier: x8mPTfyp1XIYCEmgBu4JPpC3Rbu5bHkqgl/OBHDaxq8=
Subject key identifier: A3:39:0E:F1:40:17:20:07:2F:13:7B:C0:C0:4A:84:F1:C4:D0:8B:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EC75A561FF7D524924A28F95B09FA313
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ozkO8UAXIAcvE3vAwEqE8cTQixw.roa
Signing time: Fri 05 May 2023 15:09:05 +0000
ROA not before: Fri 05 May 2023 15:09:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:75:a5:61:ff:7d:52:49:24:a2:8f:95:b0:9f:a3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 15:09:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3390ef1401720072f137bc0c04a84f1c4d08b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4c:8a:e5:be:70:ac:ee:da:fa:a2:83:e1:f3:
6b:80:12:48:01:c5:ff:b0:ef:b2:26:06:44:03:5b:
99:cd:cf:1b:92:b1:77:14:14:d1:43:d1:30:6d:94:
a2:5a:29:4f:dc:3d:d8:1f:e7:e5:6d:90:e0:16:e5:
e2:be:6f:52:ca:fa:e6:4b:90:49:60:ea:43:99:45:
d7:f6:1b:10:53:36:a3:c5:39:c2:38:4d:e5:86:70:
5e:52:c9:69:dc:d6:43:6a:b9:1b:ee:16:c4:57:2d:
74:98:cd:10:8d:90:e3:bb:f3:4f:f6:04:2b:04:8e:
dd:17:d1:dc:99:02:0f:5c:34:0f:6d:8e:15:89:45:
20:a7:11:fc:3a:87:a8:e3:25:8f:fd:1c:64:a6:34:
79:fc:47:ce:af:35:2f:c7:b2:09:84:03:de:b1:8a:
bf:2b:1f:71:02:72:be:c7:fd:60:51:29:18:82:95:
64:5d:a5:77:91:ed:e4:50:15:f4:a4:96:95:4a:ca:
20:2b:85:8e:30:91:62:24:fa:09:8f:54:31:24:78:
ac:7f:ff:64:86:c6:43:f7:9e:55:ed:8d:0c:e1:94:
c1:47:75:92:34:b3:f6:14:4e:74:a6:47:92:da:3f:
f0:02:ec:14:a5:66:8c:41:a9:5c:45:e0:b5:b1:52:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:0E:F1:40:17:20:07:2F:13:7B:C0:C0:4A:84:F1:C4:D0:8B:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ozkO8UAXIAcvE3vAwEqE8cTQixw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:12:0b:0e:de:47:26:0e:58:7d:58:7c:f2:3d:1b:55:7e:4d:
47:bc:da:64:b7:6f:56:aa:e1:a4:2b:ef:0b:d8:a8:5d:8f:04:
2b:c6:60:3a:de:cd:ed:f7:87:07:60:33:22:56:44:ac:d2:73:
6a:aa:b4:e8:f9:4e:10:8c:15:20:a8:68:76:16:75:46:53:91:
1d:0f:8d:ef:25:37:a6:96:76:0e:b9:9a:53:ea:16:81:74:ae:
bf:a8:4e:16:e4:68:24:93:38:8a:81:61:27:f5:ae:e2:58:d2:
c6:03:e9:1f:98:53:33:62:20:9b:aa:cf:d9:24:34:cb:1b:ac:
30:54:8e:2f:c4:c3:00:ec:cc:89:74:5d:39:60:41:95:b5:72:
fa:15:1e:f9:d8:b4:8c:4d:e7:da:3a:08:8c:e6:86:f6:80:d0:
e5:89:5c:c3:13:89:74:ac:43:d9:e3:7b:76:68:54:27:c2:4a:
55:e8:e8:d5:6d:86:ab:22:f7:f8:37:0a:c1:dd:3a:25:8e:fe:
ba:47:8e:26:57:93:32:c0:d3:0e:d6:e3:cb:d7:e7:75:92:de:
88:a9:47:7a:52:50:05:20:2d:a5:52:74:35:9d:23:35:2d:0a:
1d:d6:f7:5b:e4:52:92:57:b6:d1:d6:88:c6:39:f0:e5:6d:e0:
49:37:13:8e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfsdaVh/31SSSSij5Wwn6MTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA1MTUwOTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzM5MGVmMTQwMTcyMDA3MmYxMzdiYzBjMDRhODRmMWM0ZDA4YjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEyK5b5wrO7a+qKD4fNrgBJIAcX/
sO+yJgZEA1uZzc8bkrF3FBTRQ9EwbZSiWilP3D3YH+flbZDgFuXivm9SyvrmS5BJ
YOpDmUXX9hsQUzajxTnCOE3lhnBeUslp3NZDarkb7hbEVy10mM0QjZDju/NP9gQr
BI7dF9HcmQIPXDQPbY4ViUUgpxH8Ooeo4yWP/RxkpjR5/EfOrzUvx7IJhAPesYq/
Kx9xAnK+x/1gUSkYgpVkXaV3ke3kUBX0pJaVSsogK4WOMJFiJPoJj1QxJHisf/9k
hsZD955V7Y0M4ZTBR3WSNLP2FE50pkeS2j/wAuwUpWaMQalcReC1sVKr4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKM5DvFAFyAHLxN7wMBKhPHE0IscMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvb3prTzhVQVhJQWN2RTN2QXdFcUU4Y1RRaXh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIwSCw7eRyYOWH1YfPI9
G1V+TUe82mS3b1aq4aQr7wvYqF2PBCvGYDreze33hwdgMyJWRKzSc2qqtOj5ThCM
FSCoaHYWdUZTkR0Pje8lN6aWdg65mlPqFoF0rr+oThbkaCSTOIqBYSf1ruJY0sYD
6R+YUzNiIJuqz9kkNMsbrDBUji/EwwDszIl0XTlgQZW1cvoVHvnYtIxN59o6CIzm
hvaA0OWJXMMTiXSsQ9nje3ZoVCfCSlXo6NVthqsi9/g3CsHdOiWO/rpHjiZXkzLA
0w7W48vX53WS3oipR3pSUAUgLaVSdDWdIzUtCh3W91vkUpJXttHWiMY58OVt4Ek3
E44=
-----END CERTIFICATE-----
Generated at Thu May 1 05:33:05 2025 by rpki-client