Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OONySeo8rFAt466P_67okboVrSY.roa
File: OONySeo8rFAt466P_67okboVrSY.roa (raw, json)
Hash identifier: JV1AzvpkbptkgMZDcYMRsdsEJFVT8GBkSBpMtWqqu/A=
Subject key identifier: 38:E3:72:49:EA:3C:AC:50:2D:E3:AE:8F:FF:AE:E8:91:BA:15:AD:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865F1416D610C3056FAA4E5345ECF96486
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OONySeo8rFAt466P_67okboVrSY.roa
Signing time: Fri 17 Feb 2023 11:13:17 +0000
ROA not before: Fri 17 Feb 2023 11:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:14:16:d6:10:c3:05:6f:aa:4e:53:45:ec:f9:64:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 11:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38e37249ea3cac502de3ae8fffaee891ba15ad26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:35:08:df:7a:0b:7d:54:ae:f0:84:04:06:
fc:0c:83:15:be:9d:42:47:b0:c9:6e:ed:c0:dc:fd:
11:0f:76:2c:53:d2:cb:1b:04:74:d9:ab:d5:c7:40:
cf:b3:52:8a:45:32:7e:0e:c1:ed:5e:5f:7b:13:0f:
03:55:fc:06:44:9e:98:18:75:a5:e7:1c:6f:43:f1:
87:d0:2f:2e:c3:ce:14:b3:14:ab:93:bf:74:72:5f:
99:75:1f:dd:c3:81:05:dd:09:97:2f:52:20:89:c2:
5f:7e:97:a6:40:68:b0:7b:08:e5:80:06:b0:8d:d0:
bc:b6:58:90:d0:49:14:cd:71:e6:44:ae:02:12:96:
84:79:f8:75:ba:71:30:3d:17:d6:19:53:9f:9c:96:
4a:9c:81:b4:84:9d:7d:e6:5f:ce:c4:0e:38:a5:15:
f4:ee:ad:a0:9b:c7:f2:45:80:29:c4:dc:8d:06:28:
10:53:cb:cb:42:a0:2c:78:f5:6e:1f:a8:0a:f5:9e:
23:11:85:eb:21:03:49:73:a8:fd:cc:06:f1:39:6c:
66:3c:73:dd:cb:b4:3c:73:0c:91:0c:a6:d3:61:58:
af:8c:fa:71:76:c1:47:99:ad:72:4c:7c:55:29:49:
37:16:8a:9c:ab:c1:ef:bf:fd:90:4e:53:5c:9d:e3:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:72:49:EA:3C:AC:50:2D:E3:AE:8F:FF:AE:E8:91:BA:15:AD:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OONySeo8rFAt466P_67okboVrSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:2d:23:9e:3c:cb:81:6e:1c:bc:3f:81:76:e6:f1:60:7f:18:
03:7f:f9:0a:98:33:56:78:1b:23:fc:22:11:14:c8:e1:60:0d:
01:6b:a6:9b:99:cc:5e:73:71:a3:6b:36:cf:a3:97:c3:fb:be:
a4:57:5f:23:2d:2b:3b:82:dd:b8:ff:e8:68:ea:03:b8:b1:80:
b8:31:93:0e:a5:3f:a8:e7:bb:e6:a3:65:7d:7f:24:95:b8:ec:
7a:ee:ab:2b:c8:82:fd:3d:d5:8b:00:6b:b0:c1:d9:74:de:af:
cf:ed:0c:ae:2e:fe:05:8d:d7:5b:d9:96:6b:64:d0:04:48:31:
f4:b3:18:13:40:7a:e0:e5:93:32:34:bb:f4:64:f3:6f:d7:0e:
41:21:b9:e6:f5:0d:34:c5:fd:aa:a2:27:6a:08:ac:7b:13:b0:
30:af:52:32:b6:a7:a6:ea:a8:04:76:0d:48:bf:20:3a:2d:29:
87:05:25:25:19:81:20:27:13:b5:c9:eb:3a:db:c7:9d:c4:24:
cc:e5:58:c7:c9:66:9f:a3:11:ec:b8:43:1c:59:1b:d9:66:0e:
97:a6:75:fb:84:64:26:e5:5c:16:d0:e2:2b:10:96:4c:af:b2:
0b:0d:2d:8e:b3:5d:18:33:80:2b:24:ae:13:5e:bf:1b:bd:f1:
64:41:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:27:50 2025 by rpki-client