Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ozkdZkVA8dS_RO7I4KzjrEaY9jo.roa
File: ozkdZkVA8dS_RO7I4KzjrEaY9jo.roa (raw, json)
Hash identifier: NKkI06JfyVUzMj0kPFHFMzVFQh2G3L7w2ai13fJP24M=
Subject key identifier: A3:39:1D:66:45:40:F1:D4:BF:44:EE:C8:E0:AC:E3:AC:46:98:F6:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79900FBA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ozkdZkVA8dS_RO7I4KzjrEaY9jo.roa
Signing time: Fri 08 Apr 2022 16:12:54 +0000
ROA not before: Fri 08 Apr 2022 16:12:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2039484346 (0x79900fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 16:12:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3391d664540f1d4bf44eec8e0ace3ac4698f63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:9e:31:17:85:74:1e:ec:85:09:43:2d:72:
b6:00:55:18:55:15:6b:bc:36:39:c8:27:e9:ee:5d:
50:66:1a:15:c0:e7:f5:c5:0b:2b:a5:b1:aa:da:cd:
df:df:ca:22:46:68:4f:45:b0:42:59:bf:20:49:ec:
c0:67:0d:8d:c1:ef:7a:a3:2c:e7:ca:a0:95:9c:30:
e3:bd:c9:ff:8d:51:85:00:0d:75:40:73:a0:d9:f2:
d7:d8:fa:d6:16:be:07:60:c2:59:26:6d:56:7b:22:
3a:1d:9f:3d:b5:d5:16:dc:65:7c:ff:d2:d8:65:52:
45:46:ef:2e:e1:c8:3c:2a:39:8d:55:34:3b:af:46:
a7:08:a6:31:cd:24:3c:c3:7a:98:58:c5:88:87:ec:
3c:01:a2:de:52:0f:69:d5:67:7a:c5:7f:be:35:a5:
ba:12:9a:08:c7:47:fc:16:bd:89:f4:49:59:17:3a:
ea:e3:f5:e6:6b:c2:fc:15:a1:b7:e5:36:02:57:bf:
08:ae:86:bf:fb:15:ec:7e:56:bb:58:41:c6:3a:de:
05:9a:04:e8:e0:d7:5d:cf:f5:99:de:62:aa:5d:c6:
06:4f:83:da:ac:83:df:a0:17:63:9a:93:4c:7a:21:
bf:25:ab:5f:20:88:c4:2d:b6:b9:30:a2:54:8e:4f:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:1D:66:45:40:F1:D4:BF:44:EE:C8:E0:AC:E3:AC:46:98:F6:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ozkdZkVA8dS_RO7I4KzjrEaY9jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:1a:a5:76:27:ca:c5:60:d9:d4:85:b3:ec:82:8f:06:46:c7:
21:6e:4e:c7:4d:fc:74:37:4c:76:d7:43:49:2d:ec:f6:4d:42:
d2:9b:34:67:15:2b:dc:95:96:93:c8:06:c2:78:ed:d6:4b:cf:
8b:e1:37:4c:99:a9:cd:22:d4:6d:a0:16:76:c9:62:18:9b:0d:
64:5a:2f:76:8a:b9:91:cf:6f:77:fc:40:c1:4b:3d:4c:f2:e9:
05:9e:8c:e1:b2:78:b2:09:c0:1c:01:b6:6e:e1:4e:24:1a:0e:
84:b2:19:f9:f1:85:04:18:09:b8:48:5f:14:ec:3b:97:a6:5f:
27:fc:2f:81:bf:38:d3:be:1f:e0:ea:86:36:cb:7f:b8:70:58:
88:af:81:5c:c1:23:c3:d5:6d:0a:67:b4:17:53:0f:72:2f:1d:
15:43:51:ad:89:5d:3d:02:61:e3:93:8d:09:42:ed:da:81:89:
a1:1c:c2:d5:80:fc:10:82:28:e5:3f:c0:c3:0d:60:ab:5c:1a:
56:cd:ab:c7:71:70:62:cb:cc:4e:ba:88:f1:01:ef:5b:01:66:
9f:23:cd:23:f7:58:68:46:1b:bb:6e:22:0c:c7:d1:c8:2b:3a:
ad:96:74:d5:f2:24:21:7a:06:46:d0:ed:ce:74:65:f5:ac:df:
e5:a9:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:48 2025 by rpki-client