Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-OwbRV2YopDxCALlTdi75-llrjc.roa
File: 1-OwbRV2YopDxCALlTdi75-llrjc.roa (raw, json)
Hash identifier: 7QU1gfSjv4gnnulm+9kTPChELIt1GwzyE3KWrbZBgFE=
Subject key identifier: F8:EC:1B:45:5D:98:A2:90:F1:08:02:E5:4D:D8:BB:E7:E9:65:AE:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894E7EF9EBB4076A3BA7635EBCD4CDD0F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-OwbRV2YopDxCALlTdi75-llrjc.roa
Signing time: Thu 13 Jul 2023 09:04:51 +0000
ROA not before: Thu 13 Jul 2023 09:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:4e7e:6b69/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:7e:f9:eb:b4:07:6a:3b:a7:63:5e:bc:d4:cd:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 09:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8ec1b455d98a290f10802e54dd8bbe7e965ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:eb:65:d8:e8:ec:77:8f:dd:b8:57:ef:1b:
34:3b:65:82:34:0c:29:fb:ae:2d:36:08:47:9f:ff:
28:be:66:99:85:0e:41:48:69:81:60:91:be:6f:f8:
39:fd:b9:40:ce:b7:86:d1:3c:cb:71:3e:97:db:28:
a3:63:2a:5f:d5:6b:88:a2:bc:e9:85:c3:72:a9:0c:
8a:42:fd:ec:58:a7:05:6a:4a:15:21:00:d6:04:fd:
f2:38:8e:e2:a7:09:0f:ff:83:d1:39:55:c6:fd:cf:
9e:c4:7d:d8:76:1d:d6:06:32:ee:1a:1f:09:e1:6d:
ee:47:21:da:9b:d6:ca:54:8d:cf:14:c2:bf:a3:24:
e1:49:d5:be:9d:3f:b1:3e:ab:19:d4:ac:38:91:62:
cd:85:b5:43:9a:58:62:5d:9f:a1:7b:57:79:93:f1:
72:b3:fe:0a:35:a7:43:d8:73:4b:a0:77:86:62:55:
b9:a7:24:14:64:f0:12:c3:6b:d6:c8:80:6e:9a:47:
1f:cd:15:74:a6:4b:77:2b:1e:a5:bc:7b:cc:ca:22:
b3:7e:6b:1b:91:34:80:8a:b4:73:f9:b9:f7:2a:41:
b8:3a:25:4a:0f:ff:dc:0e:02:95:bb:16:b6:07:5a:
77:80:81:c6:cb:6a:27:95:9b:ed:59:88:44:78:4e:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:1B:45:5D:98:A2:90:F1:08:02:E5:4D:D8:BB:E7:E9:65:AE:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-OwbRV2YopDxCALlTdi75-llrjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:4a:26:d1:18:69:ab:b3:14:01:e7:3b:b5:02:85:03:27:e9:
b6:3c:85:0e:51:e9:51:85:7e:54:e1:c5:6a:6e:b3:2a:5e:26:
c5:4b:c1:93:28:d3:96:74:ef:2b:bb:c3:8e:68:7a:45:ab:99:
c7:fb:64:fa:08:29:78:cb:49:b2:3f:7a:fd:ba:5b:8b:21:f7:
87:2f:32:57:bb:46:04:4a:f1:bb:f8:f9:4b:b2:7c:52:11:1e:
04:aa:11:c5:f9:a0:02:c7:35:ec:f7:ae:ab:23:a1:cd:e2:c0:
42:93:40:5a:bd:9e:ae:49:a8:d2:74:03:49:dd:55:b6:bf:99:
c0:74:6c:e8:28:f1:84:3e:a1:86:b7:db:e0:76:2d:9b:0e:1e:
7c:da:12:67:8e:77:9b:ec:5f:4e:7a:90:8a:6a:b5:00:1d:05:
cb:3e:c3:f8:34:66:a0:3d:22:5d:80:ce:87:5d:ea:e4:34:f7:
a9:b9:a6:4f:8f:b7:19:5e:7c:23:39:cc:43:62:47:62:20:65:
21:5e:0c:c6:4c:e8:db:de:a3:f3:12:15:12:da:75:75:76:a1:
1e:f8:d2:9a:ea:d3:bf:7b:c2:81:ca:cd:b9:e7:53:67:47:96:
4b:a7:03:0b:e6:dc:cc:98:e0:8a:eb:1e:f1:83:ce:57:70:77:
92:bb:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:34:35 2025 by rpki-client