Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0oELb5TEXN2k6Cg-pLwjKgBxkSg.roa
File: 0oELb5TEXN2k6Cg-pLwjKgBxkSg.roa (raw, json)
Hash identifier: cO+1TR/7UPQaitBsgYe0iFgESYfmK18ex4Y5a9qeOmw=
Subject key identifier: D2:81:0B:6F:94:C4:5C:DD:A4:E8:28:3E:A4:BC:23:2A:00:71:91:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018719535F49E8462D8F09F06ACA4544167C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0oELb5TEXN2k6Cg-pLwjKgBxkSg.roa
Signing time: Sat 25 Mar 2023 15:11:46 +0000
ROA not before: Sat 25 Mar 2023 15:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:19:53:5f:49:e8:46:2d:8f:09:f0:6a:ca:45:44:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 15:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2810b6f94c45cdda4e8283ea4bc232a00719128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:8f:60:5c:68:13:79:fe:f6:db:00:2b:c2:
8a:b5:0c:86:de:e9:00:4f:df:37:04:1f:a8:da:24:
31:b8:23:d2:9a:d8:27:08:e2:52:86:46:3d:56:0c:
41:ac:47:ea:12:5f:fc:21:1b:00:5b:a8:39:9d:5a:
e1:66:55:32:d4:cb:1a:76:dc:a2:5a:05:00:36:11:
dd:55:d4:71:d5:32:fc:27:63:01:8e:1d:2c:bd:8d:
dc:90:66:e8:8d:6c:f2:4b:bc:7d:fd:0b:07:85:c4:
44:bc:d3:0d:f2:b6:ea:a3:44:5f:bb:e0:60:44:50:
60:84:31:df:4e:77:c3:23:5d:4a:b7:b1:39:3a:78:
d4:fc:e0:76:aa:9b:4e:9b:9f:3d:04:0a:34:9f:f8:
33:ed:25:7c:17:11:b5:50:a5:1c:b4:7d:f5:81:12:
a7:f2:8c:06:50:6f:6d:67:bb:d0:27:03:56:17:48:
bb:90:ec:63:89:ad:b6:4a:fa:ee:52:22:a6:ca:57:
6f:85:b1:a0:39:71:3c:02:ff:db:76:ea:11:25:0a:
73:14:51:7f:8d:0e:ab:1f:54:97:0f:bc:33:b3:1e:
58:91:59:3f:94:72:29:7e:31:66:a6:12:29:bb:43:
c4:e4:c3:29:e2:9a:18:dc:fa:20:dc:18:82:4e:91:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:81:0B:6F:94:C4:5C:DD:A4:E8:28:3E:A4:BC:23:2A:00:71:91:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0oELb5TEXN2k6Cg-pLwjKgBxkSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:b2:19:e0:70:c8:4d:61:c4:8c:ca:42:12:07:57:76:7f:93:
b0:2a:5b:23:22:92:8f:1b:f3:3e:b2:82:c6:75:c4:f1:3f:a1:
fb:af:fe:f3:83:6e:99:d0:4c:ae:fb:2f:d9:e4:30:f9:8e:43:
80:5f:bf:b3:be:78:4b:bd:74:27:8d:5c:55:94:b0:ac:f6:2f:
d8:14:a5:f8:ce:e2:c2:a8:d5:cf:18:cd:35:cc:66:59:85:3e:
26:8f:b5:bf:de:f7:11:f5:83:71:14:57:60:eb:d3:8f:9f:22:
bc:02:99:7e:17:dd:20:e4:30:c1:55:3a:22:16:b8:a7:86:b8:
0d:56:68:c9:69:35:06:17:89:c3:2b:c5:3f:62:e2:e1:58:9b:
c0:e2:0b:b7:60:2c:58:af:32:65:9c:45:49:9a:26:c0:39:25:
a9:86:bc:82:a7:c4:aa:3d:4f:2e:84:53:97:7f:e1:cc:2e:3e:
2f:9e:c3:02:79:14:9a:31:f1:95:f0:44:86:21:35:92:c2:ce:
9c:e0:ac:eb:71:e7:e0:95:45:0a:ce:e5:bd:62:5e:87:23:77:
c0:af:39:89:c5:9e:c6:cb:17:ad:51:3a:91:85:bf:a0:91:75:
72:de:e6:d3:14:a6:9e:f2:38:f8:a0:93:0e:41:ed:85:2c:4c:
d3:75:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:30:19 2025 by rpki-client