Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OX_yTJA3sjragkGKcn0r44XT0sQ.roa
File: OX_yTJA3sjragkGKcn0r44XT0sQ.roa (raw, json)
Hash identifier: jkxlMjjmIU9pr6/7u473qLT8Ht4to/e8Om1gJbzv0D8=
Subject key identifier: 39:7F:F2:4C:90:37:B2:3A:DA:82:41:8A:72:7D:2B:E3:85:D3:D2:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F79E1613E31E7EB41DF1F6E4BC808A76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OX_yTJA3sjragkGKcn0r44XT0sQ.roa
Signing time: Sun 07 May 2023 19:09:05 +0000
ROA not before: Sun 07 May 2023 19:09:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f7:9e:16:13:e3:1e:7e:b4:1d:f1:f6:e4:bc:80:8a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 19:09:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=397ff24c9037b23ada82418a727d2be385d3d2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:88:04:67:63:68:fd:58:d6:ce:14:00:27:
fb:1e:b8:fb:ea:7f:94:f8:88:b0:c0:05:6d:18:35:
c8:c5:f3:c0:af:b6:03:6b:91:0a:11:0d:1f:6a:62:
6f:2d:b6:ef:96:b6:57:8d:68:95:b6:68:c2:bc:f7:
5b:c8:3f:1f:f2:0f:5d:b6:99:9c:f0:9a:84:61:a2:
2c:68:88:8e:e2:98:e3:2c:83:8b:55:72:83:dd:d1:
35:ec:b2:a0:a6:4d:11:79:cc:e2:2d:84:50:09:aa:
98:e2:30:e4:86:00:86:c1:98:7d:f5:d4:53:87:49:
15:2c:a3:4b:a1:c7:d5:4c:d3:c2:ae:b3:e8:da:21:
2b:20:d0:0d:7e:df:19:2d:bc:88:72:83:a6:83:ff:
5a:f0:8f:82:f1:83:b7:34:14:cc:1b:90:49:ba:b5:
cd:83:c3:7b:a5:55:68:52:54:3f:35:c2:6f:2d:21:
71:93:c8:1c:8e:5d:d4:61:a1:18:60:db:fd:de:2f:
93:d3:d6:da:49:d6:b7:e4:8d:97:60:de:6d:2d:36:
e6:a5:1d:84:90:47:45:a7:1a:5c:db:b2:47:f7:9e:
6e:c6:bc:78:c0:78:aa:cf:1d:8f:42:92:02:25:27:
a6:e3:02:63:35:c4:65:49:08:28:3a:59:d5:69:19:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7F:F2:4C:90:37:B2:3A:DA:82:41:8A:72:7D:2B:E3:85:D3:D2:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OX_yTJA3sjragkGKcn0r44XT0sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:a4:5d:2d:ce:24:13:44:92:04:d0:8d:f6:cf:55:d1:cd:b0:
9a:a5:13:14:db:52:5f:82:9f:f0:46:42:f3:e1:40:ba:a5:60:
34:1c:00:ad:8c:00:6d:67:76:61:30:e5:a0:a8:25:a6:63:70:
43:cf:f5:83:50:98:7f:9c:7c:31:fd:8d:6e:84:18:93:b4:53:
90:d2:9d:9a:ca:3c:7b:0c:e5:ff:66:f1:b2:f9:8f:4b:5b:89:
bb:46:d7:b7:5e:1a:a8:87:25:f5:c5:fd:0b:1d:bd:47:50:1a:
d3:eb:64:ee:82:1b:50:d3:a4:ca:24:a0:f5:78:c4:95:23:2c:
32:9b:29:e2:d7:d1:e8:b4:b9:7a:84:2a:12:a8:de:6c:37:21:
28:be:9b:9e:f7:d6:d9:0f:f9:56:69:04:b5:cc:f2:8e:b7:61:
95:3d:35:15:11:52:ec:a2:b3:70:32:3a:d6:a5:e4:6b:e9:ea:
80:6e:74:89:79:33:54:67:69:3d:a8:d6:6e:08:01:41:af:6a:
49:ed:e8:a4:d8:55:c9:34:dc:f7:95:10:81:38:3d:7e:1b:f2:
d6:e3:b4:a5:31:0a:e2:d5:cf:f2:13:a5:47:51:04:93:2e:7b:
6f:71:c5:fe:a0:63:b3:1b:cf:b0:f3:b5:a8:62:b1:8f:2a:a2:
3b:ad:21:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:43 2025 by rpki-client