Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0OQojSd65q4EX7xWK5ZzJl1LKs0.roa
File: 0OQojSd65q4EX7xWK5ZzJl1LKs0.roa (raw, json)
Hash identifier: jnHWPNC7kyhoCAP9iP2U8DkesXgZ1yLY2G2GmmtnGqI=
Subject key identifier: D0:E4:28:8D:27:7A:E6:AE:04:5F:BC:56:2B:96:73:26:5D:4B:2A:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8210C52B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0OQojSd65q4EX7xWK5ZzJl1LKs0.roa
Signing time: Sun 08 May 2022 00:15:28 +0000
ROA not before: Sun 08 May 2022 00:15:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182137131 (0x8210c52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 00:15:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0e4288d277ae6ae045fbc562b9673265d4b2acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:79:82:19:35:bc:8d:35:66:90:a2:99:5c:
fb:85:76:44:d4:14:97:3f:22:16:04:3f:66:fc:1a:
85:b0:2e:12:fd:a7:5c:b2:b6:62:d9:a4:b6:d8:57:
93:94:7f:2f:90:5b:56:78:13:24:73:60:0a:11:b6:
c6:bb:1b:36:17:5f:a7:2c:a8:84:c3:0a:a4:37:76:
4f:86:9e:be:b0:c4:d7:81:0d:9c:bd:91:a7:13:6d:
ae:b7:5d:fc:21:ce:02:6a:aa:e3:5b:01:7e:b7:9d:
b7:cc:3e:e6:7a:43:33:86:23:29:fd:0a:7b:e6:db:
87:58:a2:6c:67:0d:98:55:5a:c8:eb:a5:93:d2:e0:
d4:74:84:28:bc:e0:61:86:39:f6:50:6c:4d:7a:e2:
e3:72:49:87:e1:f4:84:3e:ee:ad:49:81:08:1a:9a:
87:ae:dd:b1:70:20:ba:04:4d:0a:32:af:b5:b9:ec:
37:ae:e8:8b:f2:f3:58:0c:29:fb:22:83:cc:1c:63:
f1:d8:f6:f7:e9:88:b5:ea:24:13:1c:cd:ed:08:41:
ba:23:9b:89:b1:f7:39:ae:d5:aa:86:d8:8e:9f:28:
0c:fc:95:bd:4c:3a:99:a5:22:61:f8:4d:77:85:0d:
a9:07:c3:8d:47:74:62:43:b5:ef:29:07:28:1b:72:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E4:28:8D:27:7A:E6:AE:04:5F:BC:56:2B:96:73:26:5D:4B:2A:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0OQojSd65q4EX7xWK5ZzJl1LKs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:b7:98:e5:0e:75:d5:e4:ee:c3:8c:76:2d:0c:b3:b6:ae:5a:
82:f9:63:ab:45:41:f6:72:1d:6b:69:ac:0b:e5:6f:32:4f:cf:
91:15:21:1e:59:f9:d1:2b:64:dd:94:ac:fb:5f:f2:66:c4:3d:
db:cf:ce:aa:bf:fa:8e:41:68:ef:81:90:8e:63:14:56:d4:0a:
6e:ee:6b:06:0f:d7:9f:0c:b4:c2:c6:a6:51:d9:da:be:f4:66:
bb:e1:ec:27:bb:de:b8:d6:07:b0:9d:79:bd:67:c7:99:13:f8:
6f:f5:ba:20:2f:25:68:6d:bf:58:b0:fc:af:7e:ff:d0:87:69:
4e:59:ed:95:11:42:b4:0f:d2:f7:1b:ea:91:cb:a6:f1:45:63:
37:0a:9b:5b:76:c1:ad:4d:93:a5:0c:9f:d9:4c:fd:4a:1d:b9:
3c:bd:03:6a:4b:b3:e6:f5:85:00:00:bf:48:2d:b5:e3:14:37:
45:5b:a4:0a:c9:f9:61:ff:5d:7b:c8:b4:12:eb:11:07:a7:59:
df:8a:0e:97:7f:ed:ef:e8:df:ab:98:90:db:6d:0e:0b:a9:d3:
11:07:bc:e1:40:d1:a2:4e:73:ce:f3:45:e3:ec:51:a6:4e:5f:
b6:8c:bc:83:62:de:c7:e3:d1:eb:e5:6d:b2:ec:e5:ba:84:98:
fb:6c:cf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:23:40 2025 by rpki-client