Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O8UIlgZKYA_7BIT4n-bFOaECIHA.roa
File: O8UIlgZKYA_7BIT4n-bFOaECIHA.roa (raw, json)
Hash identifier: vgwGyOSlCrWXVQHFnKXSSleqVG6UqrB5OxMxlZk+Hhw=
Subject key identifier: 3B:C5:08:96:06:4A:60:0F:FB:04:84:F8:9F:E6:C5:39:A1:02:20:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F76BE07B559002846E5CAB928D699A96
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O8UIlgZKYA_7BIT4n-bFOaECIHA.roa
Signing time: Sun 19 Mar 2023 01:11:27 +0000
ROA not before: Sun 19 Mar 2023 01:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f7:6b:e0:7b:55:90:02:84:6e:5c:ab:92:8d:69:9a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 01:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bc50896064a600ffb0484f89fe6c539a1022070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:7c:9f:6d:b2:0b:c3:7e:90:49:45:97:ca:
c5:04:b5:1e:97:16:14:87:63:62:e5:e4:33:bf:7d:
0a:31:b7:43:ac:7a:7c:b4:2f:75:a5:34:e7:41:d8:
19:87:4d:0f:40:c9:a6:cb:47:d1:45:85:65:be:c7:
16:59:0b:13:b6:3b:1a:b8:25:04:0d:12:64:11:32:
e3:13:cf:8b:49:82:58:f2:21:d6:e0:e8:d7:5c:40:
f3:8a:11:57:20:de:d2:c3:a8:a2:d1:56:0f:f6:16:
e5:3a:7f:b6:66:7b:f8:fa:44:b5:a8:bd:bb:92:83:
71:51:00:d9:4e:db:e4:ee:b3:c2:c4:a4:96:03:ac:
5f:db:e0:f2:e2:0e:53:db:e3:87:67:46:3f:eb:6a:
6e:63:a0:36:4a:79:3a:3d:d9:91:87:8e:ad:21:a8:
b6:f6:fc:e9:13:e5:76:42:51:47:e9:77:75:89:7b:
31:6e:48:ac:9c:4d:07:d9:01:80:56:d2:02:13:24:
75:3c:d2:49:55:6e:32:83:ac:33:ac:60:da:73:62:
5a:de:a1:9e:72:49:30:6b:9f:60:36:d5:07:fb:40:
cd:29:b0:d4:c7:3a:f9:44:98:c4:c3:9d:47:1e:00:
ed:73:7d:a0:11:ff:24:4e:02:eb:91:68:13:aa:af:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:08:96:06:4A:60:0F:FB:04:84:F8:9F:E6:C5:39:A1:02:20:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O8UIlgZKYA_7BIT4n-bFOaECIHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:f9:90:60:bb:bd:fc:f5:9e:07:bd:d1:2f:4d:87:b1:fc:0a:
98:b9:23:bf:87:f0:08:d8:e8:16:7d:01:32:08:76:0b:c3:7e:
bc:17:81:6e:3e:d7:f2:a8:dd:7d:0c:7c:d8:2d:30:3f:b3:a6:
f0:93:26:d4:de:ae:91:6c:60:d7:88:7d:3d:4d:bc:af:92:90:
77:da:12:67:fb:03:18:0c:31:89:07:91:6d:b0:fd:51:6f:f0:
71:a7:84:4e:ff:73:d0:96:9b:68:9f:d8:c8:a5:29:e1:52:ec:
5c:dd:c9:c5:d7:59:1a:9b:d3:d2:36:85:40:49:6e:76:ce:23:
a9:09:e7:57:f2:e7:d6:fe:d4:97:50:bd:54:89:19:0b:12:e1:
a0:8a:ff:c4:9d:07:c8:41:43:2c:1b:b9:7c:00:14:6e:0f:a2:
a5:bd:0c:a7:e0:28:34:60:10:be:2a:bd:63:d1:11:85:87:f9:
4d:59:ed:2f:73:48:5a:5e:09:e9:35:f5:f2:6b:b6:91:92:1f:
3e:93:be:a1:ca:4e:cb:4d:65:f6:af:28:93:1a:b9:58:d0:d2:
1d:81:ac:fb:19:76:fe:bb:7e:f2:ac:87:e6:91:0c:64:8a:ea:
2b:d7:62:6e:26:b9:4a:ca:88:f5:8b:24:a3:21:0d:01:ab:30:
62:97:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:53:53 2025 by rpki-client