Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rOAlHT8Y0WZqRnSiqKSxYeHoaVk.roa
File: rOAlHT8Y0WZqRnSiqKSxYeHoaVk.roa (raw, json)
Hash identifier: KmwkM7Rinq7VDzaJ9nEo31j4tfXd+Tk9aySieWbtu8k=
Subject key identifier: AC:E0:25:1D:3F:18:D1:66:6A:46:74:A2:A8:A4:B1:61:E1:E8:69:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B28D7046A70A92B71569F7F0BB09D893
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rOAlHT8Y0WZqRnSiqKSxYeHoaVk.roa
Signing time: Fri 07 Oct 2022 13:05:57 +0000
ROA not before: Fri 07 Oct 2022 13:05:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:b28c:a3ba/128 maxlen: 128
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:8d:70:46:a7:0a:92:b7:15:69:f7:f0:bb:09:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 7 13:05:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ace0251d3f18d1666a4674a2a8a4b161e1e86959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8f:32:b6:d8:e4:54:93:1c:ed:32:2c:94:d7:
82:dd:50:73:33:18:9d:10:d0:02:31:af:fc:0c:fb:
84:c2:6b:44:bc:47:bf:f8:29:0d:1e:ae:62:85:95:
a0:cd:3a:38:67:5b:63:79:25:78:a0:a6:34:ef:47:
3f:bc:0c:20:55:f5:27:4e:60:6a:2f:4b:66:2d:e9:
8b:fe:ac:2d:a6:c4:ec:78:48:11:20:99:36:72:28:
ea:b4:77:f4:ca:d6:6f:e2:f6:fb:4a:b0:41:53:3b:
35:33:51:80:bc:c4:db:89:fc:64:25:2a:17:f9:8c:
57:65:23:8e:d3:23:21:f8:44:42:0a:32:fc:cd:69:
6b:35:07:4b:4b:17:7d:4e:64:e6:39:29:35:08:ac:
dd:63:1c:ad:89:85:23:42:29:7d:5a:41:48:71:e2:
02:1b:cd:aa:45:5a:cd:ad:43:17:2c:a9:f4:38:be:
19:45:66:dc:4c:0a:cb:1b:79:0b:01:a5:ec:c9:b9:
4a:ac:c6:bc:a5:33:24:83:85:4a:8b:9a:fb:7b:64:
94:c6:fe:4b:71:71:34:ed:e5:b9:4c:40:35:f8:17:
2e:f2:b3:fb:ec:0c:71:5b:9b:34:b5:82:3a:50:6d:
1f:ad:20:5c:ef:86:9b:78:a4:54:c3:d1:65:40:48:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E0:25:1D:3F:18:D1:66:6A:46:74:A2:A8:A4:B1:61:E1:E8:69:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rOAlHT8Y0WZqRnSiqKSxYeHoaVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:1f:60:dd:35:96:d1:91:fa:28:3d:14:bd:50:4c:d7:f0:3f:
02:64:bd:ae:14:01:df:92:a8:d6:7e:c8:8d:94:af:d3:9f:96:
c2:19:f7:ba:8e:ce:1b:de:25:7b:ed:b2:09:44:35:87:c0:92:
64:b7:80:34:7b:b2:5d:19:db:e6:47:3b:90:a1:f6:59:76:01:
4a:f0:1b:76:a2:4d:68:6d:9f:64:19:a0:f9:59:f8:7f:4c:a4:
90:9a:a6:e1:f5:dc:f4:b1:24:c7:87:09:b7:e0:6b:38:e5:32:
3e:30:1a:93:95:51:28:41:d4:5d:73:8a:29:36:a9:04:54:38:
be:77:b1:61:41:04:fc:a6:41:87:b5:ea:ad:9e:f9:ea:82:0a:
b2:fe:38:a6:39:1f:ef:19:da:e4:c8:dc:13:80:02:76:00:61:
aa:4c:7a:4f:3f:9b:69:7f:6d:c0:1b:36:eb:ef:cd:5c:96:17:
fa:45:1e:b8:b1:94:27:5a:b7:09:b0:9d:5d:2e:c8:3a:2c:4d:
58:a2:6e:0b:0a:9b:14:f1:72:bf:1f:7c:48:8b:37:c5:63:05:
f7:0c:3d:66:d0:05:d5:28:3a:63:df:74:ad:4b:e2:99:c7:52:
71:7e:e0:e7:ef:49:2c:6a:c1:a6:e2:28:c6:36:32:5d:d6:5b:
da:91:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:33:54 2025 by rpki-client