Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Of56VwD-LaGnpYOCiFfG6XO5DKo.roa
File: Of56VwD-LaGnpYOCiFfG6XO5DKo.roa (raw, json)
Hash identifier: GkZtQmCu6kkITI1JIWozoIno/ghQB9KgIQXRRtdBDmA=
Subject key identifier: 39:FE:7A:57:00:FE:2D:A1:A7:A5:83:82:88:57:C6:E9:73:B9:0C:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850C0419781F1626E548745995A80C26BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Of56VwD-LaGnpYOCiFfG6XO5DKo.roa
Signing time: Tue 13 Dec 2022 15:04:33 +0000
ROA not before: Tue 13 Dec 2022 15:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:c03:d054/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:04:19:78:1f:16:26:e5:48:74:59:95:a8:0c:26:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 15:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39fe7a5700fe2da1a7a583828857c6e973b90caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:7a:d0:1d:32:6d:ca:0e:86:8f:0c:ae:49:
01:22:39:01:eb:d3:ba:a7:32:d4:92:8e:34:16:21:
a8:3d:99:95:e7:0b:37:13:82:46:cc:06:a7:18:4b:
78:69:16:0e:83:ce:32:7a:2e:f6:b8:59:93:b2:50:
bc:fd:de:3e:2a:00:9b:da:7f:c6:1a:c5:54:1f:00:
e0:e0:44:ef:88:e6:52:2a:c4:95:18:66:55:e6:15:
a2:2f:14:b8:cf:f7:25:3e:4c:e0:9c:16:c7:a4:2a:
88:ec:a6:d0:d6:e4:e9:b0:d1:21:a8:38:04:75:dc:
50:4b:87:56:ff:47:7d:3c:5a:2f:75:6c:d0:32:95:
1c:30:d7:83:9d:2a:eb:2f:b2:52:16:f9:f0:a1:a9:
e0:34:e6:3f:f8:6d:b3:a3:df:2b:0b:c5:19:0a:0c:
c8:44:be:56:b3:22:e6:92:e6:03:b8:23:26:b0:be:
53:19:fa:9d:ed:8f:17:be:65:c4:e0:ec:29:cb:c4:
c9:e5:c4:4c:f0:be:22:e5:db:4b:4c:fe:6c:95:80:
c0:88:a2:fc:89:db:6d:0e:a1:e9:92:02:98:29:a5:
dd:db:f0:a5:2b:95:78:b6:63:4a:55:28:f9:04:1f:
e8:39:1a:b7:ed:d8:09:87:1f:0a:a5:14:4e:6e:ca:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:7A:57:00:FE:2D:A1:A7:A5:83:82:88:57:C6:E9:73:B9:0C:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Of56VwD-LaGnpYOCiFfG6XO5DKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:3c:2a:3c:03:7d:f9:50:a6:9d:c9:fc:23:c6:b5:8a:71:62:
fa:07:ac:ae:be:39:d7:9d:d3:d4:7e:fa:1b:cf:8f:78:a3:f7:
10:ce:3f:fa:2e:2d:4d:8e:53:a3:81:7c:7c:b5:ff:01:05:5d:
af:39:ac:b1:2e:54:ba:f9:e7:3b:4a:97:1c:bb:d2:d5:e1:f1:
81:fb:fe:13:0a:31:df:2a:84:a1:0f:e3:c9:5b:bb:dc:15:77:
1e:8e:82:84:94:ef:0c:63:3f:87:b9:16:82:82:ed:75:bd:f8:
5a:65:17:0a:7b:16:7d:ae:27:d8:02:3a:46:ae:96:9f:6f:63:
33:2b:42:ad:77:b9:42:bb:8b:1a:c4:c1:4b:a6:c9:d3:04:77:
88:89:54:ee:22:a1:b0:c5:74:4f:c3:91:50:32:13:b6:69:5d:
31:eb:0d:e8:d9:3a:5c:c1:af:39:5d:d8:3c:da:c7:e8:d9:46:
7b:99:04:aa:ab:11:0b:fd:0b:a2:16:39:aa:24:2b:ca:8a:6b:
c5:92:c8:ac:e1:43:d7:39:9a:3d:f1:92:d2:2d:32:ca:51:16:
39:89:d4:a5:bb:3d:59:da:36:d4:a9:67:b8:51:0a:84:1a:dc:
94:f3:77:ff:12:cc:50:ee:a5:f6:9d:80:b9:45:9a:cf:76:3f:
f0:cc:a5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:28 2025 by rpki-client