Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OH_2j6oHuuTc-P6FZ18wv1DlcvA.roa
File: OH_2j6oHuuTc-P6FZ18wv1DlcvA.roa (raw, json)
Hash identifier: 1m784uKnAli1LKOoEuRf02v67TvCSO8dC3H7Ec2BEvw=
Subject key identifier: 38:7F:F6:8F:AA:07:BA:E4:DC:F8:FE:85:67:5F:30:BF:50:E5:72:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018972C20ADDEF4340D9C81B559F58A42F1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OH_2j6oHuuTc-P6FZ18wv1DlcvA.roa
Signing time: Thu 20 Jul 2023 10:04:26 +0000
ROA not before: Thu 20 Jul 2023 10:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:189:72c1:eedf/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:c2:0a:dd:ef:43:40:d9:c8:1b:55:9f:58:a4:2f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 10:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=387ff68faa07bae4dcf8fe85675f30bf50e572f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:b4:b7:54:90:7b:1b:89:ca:23:40:00:02:
bb:99:6e:20:4b:6e:4d:39:8a:5d:00:11:3e:c1:88:
3b:5f:39:26:36:88:b7:42:d3:13:0e:c3:de:b0:87:
77:3e:47:97:77:ec:1c:17:a3:e4:10:4e:c3:3d:a9:
86:d4:c1:d3:43:40:fb:11:42:36:28:f3:93:2e:b4:
99:4a:c3:d0:b3:11:29:2b:4f:f4:c9:8a:40:de:d6:
e5:6e:dd:b1:df:46:68:61:79:7a:c5:87:ab:b2:77:
3a:e5:f5:d8:72:0e:ee:20:4f:dd:5c:46:bc:ee:a6:
09:98:ed:7a:7e:49:8e:86:e8:91:ed:fe:ec:cd:ba:
74:ee:5a:16:73:5b:ae:5a:97:4f:f3:e1:fb:a8:90:
8c:c9:fa:4a:0e:fc:0d:de:fe:b9:66:15:64:33:e3:
b8:71:94:46:a5:a5:b1:3b:5d:ef:e3:1c:58:2c:2d:
95:e1:dc:c6:a6:0e:5b:9b:52:18:0b:a0:b0:2b:a1:
00:93:48:07:f2:01:64:a9:08:70:45:e5:a4:0f:6a:
44:3a:df:df:e1:ec:8e:e8:c1:4f:b4:c6:17:6e:36:
1a:90:d4:4a:69:12:9c:61:c5:78:07:82:a5:47:18:
fa:c5:70:27:e2:b5:d1:46:35:92:f0:a0:79:96:e2:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7F:F6:8F:AA:07:BA:E4:DC:F8:FE:85:67:5F:30:BF:50:E5:72:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OH_2j6oHuuTc-P6FZ18wv1DlcvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:fc:17:f0:fc:46:4f:47:53:5c:35:7b:b4:ed:5b:94:c5:1d:
c8:fb:49:3b:bc:62:b5:67:d8:4e:cf:3e:01:1c:85:67:ee:58:
76:49:77:4f:62:d7:68:ea:11:d6:c9:12:fa:a4:5c:2d:4c:ef:
76:3a:a6:01:2f:c7:cd:0f:21:b1:1d:7b:d2:5c:74:7e:26:fb:
df:15:f4:8e:73:70:eb:4e:12:c4:f2:ae:4a:c0:22:18:32:04:
1c:c5:1d:4b:a6:5c:1f:66:a8:8d:a4:a1:ff:2a:ff:80:e2:46:
42:61:d7:40:63:12:58:a1:83:49:d1:bd:01:4b:c1:23:2f:21:
14:1d:f1:65:66:5c:f7:60:26:d0:d6:a5:e2:34:db:50:0f:3b:
26:7d:d1:93:a2:db:e7:11:91:ee:60:97:23:17:21:39:f7:1b:
db:c1:46:34:db:24:1b:eb:b3:63:bb:eb:ff:d6:cd:db:1a:01:
bb:76:87:39:16:89:20:d1:b4:df:18:8b:16:fd:ea:3e:6d:11:
a5:0f:13:1e:fa:c9:38:fc:ed:cb:73:e3:b2:52:98:a0:c0:6d:
67:0d:64:f4:3f:80:b2:bf:73:9f:b8:70:81:9b:7b:bc:28:b6:
a7:5c:5a:35:1b:a3:33:89:88:0c:91:30:87:95:7c:6a:e6:03:
1b:15:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:26:08 2025 by rpki-client