Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oh6GJCJvWdwlDY4gFaTqkOstw-Y.roa
File: Oh6GJCJvWdwlDY4gFaTqkOstw-Y.roa (raw, json)
Hash identifier: vBA9jBRNpV8h0Gg19DdC5SDiHJPPDqfUXgDLvvumInM=
Subject key identifier: 3A:1E:86:24:22:6F:59:DC:25:0D:8E:20:15:A4:EA:90:EB:2D:C3:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884EF38ED136FA91D388EF9A4C808DEDC8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oh6GJCJvWdwlDY4gFaTqkOstw-Y.roa
Signing time: Wed 24 May 2023 18:09:24 +0000
ROA not before: Wed 24 May 2023 18:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:f3:8e:d1:36:fa:91:d3:88:ef:9a:4c:80:8d:ed:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 18:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a1e8624226f59dc250d8e2015a4ea90eb2dc3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:3f:c5:81:31:a3:4a:a7:75:7a:f0:da:ac:
89:25:2f:93:4e:e8:d2:df:ee:9e:41:f9:52:3f:fc:
45:ce:f0:76:84:b9:3b:8a:b6:90:4d:10:74:06:d2:
34:77:24:a3:a6:f0:aa:79:af:d9:c7:b8:cc:53:8e:
60:eb:ec:63:79:b0:2b:75:c2:e3:bb:56:d9:c3:45:
e9:00:5f:eb:58:81:a5:81:01:22:8f:25:b5:2c:00:
62:f5:1a:11:e3:b5:0a:42:16:b1:7f:4a:32:fd:ea:
d8:06:06:ed:8c:dc:e5:73:ef:22:95:80:08:31:b5:
1d:88:22:58:59:3f:16:25:85:2c:b7:fc:3d:96:53:
a2:53:85:88:4f:29:ff:0d:96:fc:2b:46:6c:e5:dc:
38:1c:48:a6:90:f3:ca:b0:ae:1b:d8:ae:54:bb:0e:
95:45:b1:bb:0a:b6:1a:aa:84:95:55:5b:c7:58:de:
b7:82:60:46:18:0d:f6:c9:15:b0:1c:c1:5f:c4:9f:
5c:61:03:f4:9e:31:98:cf:d4:69:3e:5b:94:a9:03:
9b:5f:16:34:07:2a:e9:f8:08:e2:15:cc:e1:ac:e7:
2d:f0:ca:87:ad:f0:4d:ef:57:f0:18:18:e6:48:2e:
c7:96:f8:19:a5:a5:e0:6f:f9:31:d2:0d:ff:98:a1:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:86:24:22:6F:59:DC:25:0D:8E:20:15:A4:EA:90:EB:2D:C3:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oh6GJCJvWdwlDY4gFaTqkOstw-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:f8:69:5b:e4:60:25:30:db:b5:5a:71:1f:a5:bd:14:c0:71:
8b:ff:76:98:3d:71:78:0c:5d:16:e1:01:30:db:fd:41:cd:eb:
0e:ed:24:10:41:30:f6:f6:0a:e5:55:9e:b9:a6:fe:f0:a6:ba:
b9:ab:68:23:37:e8:c3:84:4f:ed:8d:df:06:42:02:6b:9f:93:
e2:ce:87:e3:ff:50:b2:1b:37:da:30:74:4c:4d:2c:a9:fa:32:
b7:f6:4d:9b:9b:39:8e:80:92:83:99:21:5f:6a:aa:22:16:ae:
52:b7:eb:2e:6f:9c:a4:d8:57:d0:0e:97:87:c8:c8:e8:58:f2:
20:8a:6b:49:c9:c5:ed:6c:2f:f5:4c:f4:1e:a5:6e:96:55:81:
7b:e4:66:43:a7:c7:ea:84:7b:9d:60:f7:8f:6c:45:d1:36:56:
c0:14:35:82:7e:05:87:9b:37:4b:0e:0e:66:d4:c8:18:38:67:
a5:cc:ed:b3:76:7b:98:ff:fc:f9:04:d8:ff:ff:c5:b6:da:29:
23:cf:7b:85:e4:83:b8:9f:3e:2d:6e:8e:a9:07:88:26:4e:e6:
e4:3c:48:7b:7e:97:07:a1:57:c9:c6:ed:dd:af:84:77:aa:2a:
29:a2:df:c7:15:96:94:de:d7:11:db:82:90:9a:a1:e4:d3:37:
46:ae:36:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:54:05 2025 by rpki-client