Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/14Omz1VMcyKvpZG6CcyI9HrJRGI.roa
File: 14Omz1VMcyKvpZG6CcyI9HrJRGI.roa (raw, json)
Hash identifier: WaK/HLVNIH7fnxj3hTjX1BL4ByKvl/OhnhBSHugI9RI=
Subject key identifier: D7:83:A6:CF:55:4C:73:22:AF:A5:91:BA:09:CC:88:F4:7A:C9:44:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A41729BEE582FD0A9D0ED09838BFBDDBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/14Omz1VMcyKvpZG6CcyI9HrJRGI.roa
Signing time: Tue 29 Aug 2023 13:19:04 +0000
ROA not before: Tue 29 Aug 2023 13:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:72:9b:ee:58:2f:d0:a9:d0:ed:09:83:8b:fb:dd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 13:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d783a6cf554c7322afa591ba09cc88f47ac94462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:fb:dd:a0:46:24:b5:f3:99:73:d3:c0:3d:
00:e3:72:e5:4c:e1:86:64:52:f0:78:84:ac:35:35:
d7:7c:2d:d8:ee:ad:f8:77:cc:09:61:e0:4e:4c:4f:
34:b0:f1:2f:42:41:1d:37:14:00:bd:d2:c7:50:2b:
77:8b:e4:d3:68:d7:b9:0c:df:9d:d7:16:61:2f:c8:
4c:4a:c4:fe:52:c4:03:42:e2:83:71:bd:94:42:af:
14:4a:e8:03:64:23:2a:d7:91:c2:73:f1:74:d3:1e:
ff:6e:4f:9d:ea:c0:2a:8a:86:04:97:0a:9a:cd:5b:
31:1b:57:e9:8f:7f:39:ae:ce:56:bf:41:06:c2:c6:
ca:1d:bc:9a:d2:d7:91:54:f1:95:28:55:7c:38:49:
3d:57:37:ca:07:40:da:76:54:32:b7:e5:6f:c0:fc:
a2:c6:92:4f:c5:d5:d7:26:12:2f:05:90:bf:ac:3b:
09:30:81:7b:6f:90:b6:9b:c6:10:1d:40:dc:33:3e:
2d:1e:f7:d6:57:4d:c8:3d:1a:eb:6c:7d:3f:f7:ad:
8c:46:df:81:22:ff:8b:ae:ab:70:49:f1:d3:63:59:
a7:66:f6:b7:06:b6:74:76:67:bf:6b:5d:5e:0e:fd:
45:6c:19:b3:0c:2f:f2:86:2d:15:eb:05:29:e7:ab:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:A6:CF:55:4C:73:22:AF:A5:91:BA:09:CC:88:F4:7A:C9:44:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/14Omz1VMcyKvpZG6CcyI9HrJRGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:ea:2f:41:84:cf:13:1c:b0:8b:2e:e5:ca:e2:bb:d0:d0:4b:
b4:66:ca:64:fc:2f:01:0c:f6:c5:b2:6e:71:3e:ae:56:37:f4:
7b:53:ec:ca:16:61:e5:86:b4:91:0c:2b:a8:c2:f8:c0:e0:2e:
bb:29:2d:4a:12:a2:47:1c:16:85:c4:d9:61:83:a9:a7:21:5d:
2e:92:80:94:4c:08:ad:62:2b:bb:37:16:0c:94:58:4f:20:2d:
1d:61:1d:39:b8:a7:83:0d:eb:81:30:d5:87:9a:15:89:98:d4:
7c:85:1b:26:45:7d:28:d2:13:6e:42:69:ed:64:ef:b7:eb:50:
d0:58:21:e7:77:b7:d5:ee:64:37:f1:dd:ff:fd:13:5e:30:c7:
73:44:61:2e:65:26:aa:18:0c:66:69:7d:bf:8f:80:30:14:9e:
31:88:b2:04:10:28:28:1b:55:4f:b1:90:c2:83:5b:ab:db:0c:
5a:e1:06:4c:57:72:6f:a0:bd:32:ef:db:3f:ae:a2:32:75:a1:
b3:d1:4a:58:24:af:6b:73:4a:cc:01:cd:c5:36:24:00:c7:b8:
84:b7:23:d5:23:82:89:d7:fd:5d:ca:e9:da:31:ba:e6:ee:e3:
81:c2:50:b3:53:d7:44:c8:aa:ea:12:8b:57:c4:51:7c:12:cb:
8a:a2:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:04:06 2025 by rpki-client