Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBuXr5B1LhJyTXyWiURELE-wXkY.roa
File: OBuXr5B1LhJyTXyWiURELE-wXkY.roa (raw, json)
Hash identifier: uErl4TFlNHjga5IQB6dy/RvVu64ftTPj0krxukycSms=
Subject key identifier: 38:1B:97:AF:90:75:2E:12:72:4D:7C:96:89:44:44:2C:4F:B0:5E:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F57F1BBA118E73D4D0E1B05D65B10336
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBuXr5B1LhJyTXyWiURELE-wXkY.roa
Signing time: Thu 20 Oct 2022 13:04:51 +0000
ROA not before: Thu 20 Oct 2022 13:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:f57f:6d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:7f:1b:ba:11:8e:73:d4:d0:e1:b0:5d:65:b1:03:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 20 13:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=381b97af90752e12724d7c968944442c4fb05e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:ee:ba:62:5d:90:9f:8d:1e:e1:a6:7e:e5:
a0:3d:cf:16:ca:4d:ce:cd:5a:e4:8a:60:37:51:15:
8a:b0:dc:23:56:13:a0:ff:5d:30:09:41:e8:05:32:
cc:d1:ce:73:b8:60:ac:63:9f:44:c3:f1:8f:db:42:
fc:ec:8f:45:a5:90:7b:07:b0:fa:1a:cf:b7:6f:a4:
e1:9d:e7:cd:46:4b:82:79:55:f5:58:2b:df:79:a2:
83:7f:95:ad:ca:7b:56:25:72:ff:8b:f5:af:df:14:
94:ce:aa:f0:f8:c1:7f:51:13:df:26:d6:ce:2c:9b:
f3:59:18:f2:e9:6b:95:ed:34:c0:3b:91:35:4d:f1:
26:7f:6d:d0:c0:30:53:8a:f1:ff:a0:7f:0e:e4:8e:
76:b2:a8:50:fb:77:8d:3c:86:69:8d:a2:0c:ad:d5:
35:3a:ef:a4:cd:e9:09:22:c1:82:ec:a1:d4:0c:4c:
c6:9f:00:99:3b:a0:64:45:be:fd:2d:11:29:26:7f:
c5:fc:c2:00:0c:0e:65:4e:ec:6b:24:c7:4a:1b:e8:
bd:c6:9a:75:3f:88:6a:37:61:46:c1:81:a3:7d:aa:
2d:2c:78:b9:d4:05:bf:fc:23:d6:0e:a3:ca:b4:a0:
7b:8b:fe:c7:d4:1b:33:5a:ae:1c:21:fd:da:6a:c5:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:97:AF:90:75:2E:12:72:4D:7C:96:89:44:44:2C:4F:B0:5E:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBuXr5B1LhJyTXyWiURELE-wXkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:a8:f1:3e:e7:ac:86:44:13:06:d3:1a:9e:80:f9:4f:22:90:
78:b6:46:3c:ff:f3:18:f6:f8:37:14:aa:3f:9a:94:b5:51:88:
ad:32:35:d9:06:b1:9e:87:e4:bf:55:bf:e2:b3:59:02:57:e1:
62:00:66:71:63:37:c9:1b:c6:62:d7:5a:43:59:ab:37:27:dd:
a0:53:a1:1f:8a:32:ee:b2:69:fd:6e:0b:d6:de:7a:76:67:79:
dd:a7:5a:40:69:49:f2:59:35:c7:c8:a2:ab:3d:28:4c:07:bc:
24:14:00:b5:02:35:bb:63:06:7b:ba:ed:aa:47:b0:51:c0:cb:
20:21:6b:9f:ae:b2:57:b6:9b:dc:09:d4:22:85:fc:fa:a1:69:
0d:71:f8:07:78:7a:cd:14:ee:9a:2a:de:ba:e5:eb:a7:eb:06:
44:a0:63:77:d3:b6:d3:89:5e:91:06:b4:43:e8:a2:db:59:cf:
5f:52:d7:08:a3:9d:2c:39:6b:00:4d:df:40:1d:10:2c:5f:e0:
ed:df:2e:fb:0a:17:8e:a4:90:54:c7:c2:d7:ba:3e:2c:c2:89:
a0:5d:6e:0a:00:02:ad:45:d3:6f:b2:43:28:a6:83:74:c5:e6:
fd:4f:e9:e6:0d:ad:e1:49:f1:6e:79:dc:2d:b2:c3:9e:70:73:
22:f7:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:27:53 2025 by rpki-client