Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oc3Vv9QHrfAvINCNwjp_4FnS90w.roa
File: Oc3Vv9QHrfAvINCNwjp_4FnS90w.roa (raw, json)
Hash identifier: gIZLvQIEOOMEntnLjrSXNe+21t5ydn9Z6r7CiZYyI40=
Subject key identifier: 39:CD:D5:BF:D4:07:AD:F0:2F:20:D0:8D:C2:3A:7F:E0:59:D2:F7:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859746D5F6A33FC0C5439BAB3EA02414A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oc3Vv9QHrfAvINCNwjp_4FnS90w.roa
Signing time: Mon 09 Jan 2023 16:04:39 +0000
ROA not before: Mon 09 Jan 2023 16:04:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:9746:6cda/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:46:d5:f6:a3:3f:c0:c5:43:9b:ab:3e:a0:24:14:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 9 16:04:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39cdd5bfd407adf02f20d08dc23a7fe059d2f74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:61:32:a3:74:b6:d6:53:0c:44:cd:89:28:
19:55:67:73:02:14:14:cf:48:7e:4b:ff:d3:e1:3b:
16:c2:39:ee:e3:94:44:b5:8c:84:3d:f7:cf:a4:eb:
bc:25:ae:10:b1:18:61:05:54:0a:89:9e:f4:69:fa:
ca:e6:fc:27:a2:55:83:aa:ce:ce:be:94:d7:58:ac:
13:cf:0c:57:d5:b4:16:6f:41:e2:72:5c:0d:4d:13:
7f:bb:73:49:f7:3e:56:97:da:20:f3:43:11:6a:df:
60:72:a0:cc:96:1e:8d:c9:d8:4e:06:20:dc:5b:4e:
f3:18:00:d6:47:2a:cd:44:de:2c:42:9b:ed:9f:0e:
3b:2d:93:83:14:9a:77:35:86:ec:9a:9c:27:b0:06:
b0:2c:22:90:5e:bc:c0:60:46:3e:98:54:5e:1f:b0:
56:e2:fe:d5:b0:6c:16:67:90:dd:92:33:b6:45:ee:
aa:0f:51:16:64:f5:02:fc:6a:a7:6c:be:03:27:a7:
44:89:9c:13:e0:4d:f7:63:20:0d:81:83:46:27:fb:
40:2b:f9:ff:49:05:f3:79:93:0e:91:f5:d5:31:8d:
3b:f1:dd:1f:84:fe:4d:16:64:cd:bd:21:96:50:7e:
28:34:3b:f6:44:fb:63:60:ed:64:5e:6e:4d:38:bd:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:D5:BF:D4:07:AD:F0:2F:20:D0:8D:C2:3A:7F:E0:59:D2:F7:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oc3Vv9QHrfAvINCNwjp_4FnS90w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:bb:e4:81:17:97:77:42:2d:b2:9c:87:20:4c:4d:b4:3e:1a:
69:58:d8:ac:9a:4f:2d:d4:63:29:be:98:80:1a:c7:10:91:e6:
4a:09:2d:00:06:f2:92:64:c4:5e:3a:3f:4a:cd:fa:08:0a:8a:
da:e9:54:ca:39:4c:18:ea:2a:3d:fb:b3:36:94:c6:4f:3a:f4:
2a:91:5b:68:80:1f:98:c7:0a:19:1c:5a:54:74:6f:e5:b9:c8:
78:67:62:59:34:47:19:31:33:a4:40:4b:38:f3:70:9c:aa:11:
e4:3d:67:60:c1:f6:71:1e:12:ff:1f:76:c8:51:5b:8e:f4:e9:
d6:7e:2c:54:1c:ae:c4:c4:47:05:cc:b4:a5:fb:a7:3c:07:37:
03:0f:84:2c:6c:df:ca:9e:a0:81:f9:c2:4f:14:28:34:c9:b8:
b1:c4:bf:32:ec:39:d9:cf:c1:b8:5c:b3:83:5b:cf:f3:73:6b:
85:c0:6f:db:73:ed:c0:da:83:d3:b0:8c:0c:ab:fe:4d:33:6a:
84:25:ef:2c:d4:03:44:bb:bc:fe:20:ae:91:74:c9:8c:16:23:
5b:08:b2:ab:54:99:66:20:bb:88:26:92:46:ff:de:cc:c2:20:
7a:ac:0e:41:3a:e8:1f:08:9f:0f:05:fe:6d:1b:2e:10:d9:85:
d4:78:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:32 2025 by rpki-client