Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0OXHHFRFvbawQm7B84GMi1ho1Uw.roa
File: 0OXHHFRFvbawQm7B84GMi1ho1Uw.roa (raw, json)
Hash identifier: g1F5b4cDv3aD5E3mQ4+YC60+ovpJHZe8mpac6K2my/w=
Subject key identifier: D0:E5:C7:1C:54:45:BD:B6:B0:42:6E:C1:F3:81:8C:8B:58:68:D5:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895E673DB57747E1523FDFE4BCCCCE67EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0OXHHFRFvbawQm7B84GMi1ho1Uw.roa
Signing time: Sun 16 Jul 2023 11:12:51 +0000
ROA not before: Sun 16 Jul 2023 11:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5e:67:3d:b5:77:47:e1:52:3f:df:e4:bc:cc:ce:67:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 11:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0e5c71c5445bdb6b0426ec1f3818c8b5868d54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:ca:b9:6e:21:df:d9:62:bb:95:36:69:89:
f6:d7:76:eb:f9:c2:d4:f4:c1:52:18:0f:59:0c:7b:
92:a8:f9:1e:7f:9c:6f:32:cf:e9:0f:e6:80:c7:c1:
ba:91:03:bd:e4:7f:1f:3a:22:fb:7f:0a:f9:74:aa:
a8:41:a3:7a:c6:a9:49:e4:e1:c7:7d:8f:07:5f:42:
43:26:a6:1c:38:59:34:ac:f8:cd:b1:e4:41:85:58:
f7:0d:ea:57:40:c8:6f:83:fd:af:ef:92:3b:2a:f3:
38:8b:f1:db:3b:ea:39:b6:6f:25:aa:46:8f:7a:aa:
e1:5e:33:58:8d:c8:fc:09:52:e8:04:d4:5b:80:85:
70:ba:b7:45:94:00:9d:40:fc:a4:85:3c:19:ce:0d:
a9:74:5a:dd:a1:92:f5:72:65:07:1f:89:ff:34:33:
aa:66:bc:ba:54:83:f7:3d:22:a0:a6:43:06:24:92:
61:4d:38:b3:e6:fc:98:3e:04:f5:a8:26:e7:85:74:
50:a5:2a:25:3a:15:41:bd:00:cb:1d:94:93:de:56:
f5:38:20:fc:08:07:f2:5d:67:ef:4b:79:6f:e8:58:
5b:d0:b1:e3:a3:57:7f:2e:fe:35:92:47:7c:23:05:
42:b5:a8:19:35:e2:23:63:0a:36:14:d8:54:b0:7f:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E5:C7:1C:54:45:BD:B6:B0:42:6E:C1:F3:81:8C:8B:58:68:D5:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0OXHHFRFvbawQm7B84GMi1ho1Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:6b:3f:88:5f:cb:7e:f1:27:d4:02:33:6c:3c:01:1d:c0:f2:
46:de:df:8b:b8:16:25:ad:9e:6f:3c:6d:cf:aa:e3:41:49:d8:
47:f4:fa:65:e5:77:50:53:8d:5a:ff:0b:9c:d9:92:bb:37:e3:
6e:e7:dd:ab:63:5d:52:b3:c4:fa:1e:99:1d:8e:97:2d:1b:03:
5c:41:a2:1c:3d:a3:5f:f2:f2:bf:d1:4c:a7:d8:40:9a:5e:94:
dd:c1:b6:ac:ad:5a:d1:c7:a4:48:56:7b:16:11:39:32:78:04:
13:2b:a8:6b:b0:2c:81:4d:0c:42:73:2a:bc:29:61:e0:37:27:
cf:ea:e0:64:16:7c:f1:51:05:d7:d7:3f:b3:9b:b4:e3:77:8b:
5f:88:f0:2e:c6:40:15:44:c7:2e:55:89:95:bb:d1:45:bb:a3:
7c:c2:03:ca:13:61:3e:03:5f:35:ac:ba:39:5e:e8:d4:27:56:
59:9a:54:93:0e:ba:1c:a0:e4:7e:45:5c:bb:94:18:9c:6d:7f:
3d:19:96:69:86:2d:b7:67:e1:d0:62:1a:fb:6d:22:1b:bc:64:
17:c9:0b:7f:b5:65:5a:6a:3b:82:b1:83:37:b2:54:66:f8:cb:
0b:4e:03:d1:fa:b4:b9:92:82:62:05:0f:c0:2f:c5:e6:62:bf:
b1:b1:c3:55
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYleZz21d0fhUj/f5LzMzmfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE2MTExMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGU1YzcxYzU0NDViZGI2YjA0MjZlYzFmMzgxOGM4YjU4NjhkNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkPKuW4h39liu5U2aYn213br+cLU
9MFSGA9ZDHuSqPkef5xvMs/pD+aAx8G6kQO95H8fOiL7fwr5dKqoQaN6xqlJ5OHH
fY8HX0JDJqYcOFk0rPjNseRBhVj3DepXQMhvg/2v75I7KvM4i/HbO+o5tm8lqkaP
eqrhXjNYjcj8CVLoBNRbgIVwurdFlACdQPykhTwZzg2pdFrdoZL1cmUHH4n/NDOq
Zry6VIP3PSKgpkMGJJJhTTiz5vyYPgT1qCbnhXRQpSolOhVBvQDLHZST3lb1OCD8
CAfyXWfvS3lv6Fhb0LHjo1d/Lv41kkd8IwVCtagZNeIjYwo2FNhUsH+fGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNDlxxxURb22sEJuwfOBjItYaNVMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvME9YSEhGUkZ2YmF3UW03Qjg0R01pMWhvMVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFNrP4hfy37xJ9QCM2w8
AR3A8kbe34u4FiWtnm88bc+q40FJ2Ef0+mXld1BTjVr/C5zZkrs3427n3atjXVKz
xPoemR2Oly0bA1xBohw9o1/y8r/RTKfYQJpelN3BtqytWtHHpEhWexYROTJ4BBMr
qGuwLIFNDEJzKrwpYeA3J8/q4GQWfPFRBdfXP7ObtON3i1+I8C7GQBVExy5ViZW7
0UW7o3zCA8oTYT4DXzWsujle6NQnVlmaVJMOuhyg5H5FXLuUGJxtfz0ZlmmGLbdn
4dBiGvttIhu8ZBfJC3+1ZVpqO4KxgzeyVGb4ywtOA9H6tLmSgmIFD8AvxeZiv7Gx
w1U=
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:23:17 2025 by rpki-client