Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OhCe_m3j0aITT_V7CoE5s2RtCEA.roa
File: OhCe_m3j0aITT_V7CoE5s2RtCEA.roa (raw, json)
Hash identifier: xSWdR2vdQRWFTw0tAiMkFbxW+n0UcglXhLoKxMJaApc=
Subject key identifier: 3A:10:9E:FE:6D:E3:D1:A2:13:4F:F5:7B:0A:81:39:B3:64:6D:08:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183561BDEB0B15C54FA09694089697F8ED9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OhCe_m3j0aITT_V7CoE5s2RtCEA.roa
Signing time: Mon 19 Sep 2022 14:16:50 +0000
ROA not before: Mon 19 Sep 2022 14:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:1b:de:b0:b1:5c:54:fa:09:69:40:89:69:7f:8e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 19 14:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a109efe6de3d1a2134ff57b0a8139b3646d0840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:4a:fd:bf:a7:33:50:4a:92:14:91:8f:d6:
51:3c:38:02:4b:8e:30:e0:bd:05:03:dc:5d:48:23:
47:24:84:f3:88:ef:a6:6d:63:81:f0:e2:55:6a:25:
8c:3a:8e:e8:da:ad:ff:63:77:40:cc:be:79:2c:ec:
9e:24:24:79:aa:4e:5f:bb:fd:81:5e:6b:12:41:6a:
e3:8f:39:01:f3:e4:00:04:80:86:64:0d:86:2e:27:
dd:16:b6:e0:3c:29:dd:6f:32:bb:83:8d:ee:ec:62:
50:2d:93:8c:c0:3b:fe:39:9d:35:23:90:5a:63:fe:
82:95:46:9a:9e:85:ff:8a:cf:45:58:c6:5d:d8:30:
57:53:54:ca:fa:b0:c1:91:56:63:27:2a:89:f6:4e:
25:b4:0f:c6:ed:f8:91:e6:4c:a5:1b:5b:1c:c5:40:
01:71:de:89:84:1e:ac:83:64:45:79:13:09:a4:ca:
b2:fb:a2:f7:d8:05:33:f7:e8:a8:28:76:ef:af:2a:
e8:0a:94:0e:4d:62:8e:c3:32:4a:c0:83:cc:13:8d:
0c:2e:d9:62:e7:2b:3b:5b:20:57:44:f2:f0:d1:46:
d7:99:71:cf:af:87:28:43:45:83:b6:0a:97:a1:d7:
3e:b4:5e:02:24:6a:33:b1:72:8f:f2:bc:81:ec:48:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:10:9E:FE:6D:E3:D1:A2:13:4F:F5:7B:0A:81:39:B3:64:6D:08:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OhCe_m3j0aITT_V7CoE5s2RtCEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:d8:59:5a:a2:ce:6c:98:ff:f8:80:b3:41:8e:8d:55:11:57:
cd:f8:e2:04:26:6f:08:09:b0:47:90:84:76:59:6c:79:cf:e9:
f2:23:92:18:50:0b:ad:77:87:22:18:c5:f4:18:08:3f:e3:6a:
5d:a4:d2:5c:63:6a:a0:05:5e:cf:19:7b:00:94:91:86:d2:34:
b7:31:dc:6d:40:4d:df:ab:66:89:d7:1c:51:22:4c:06:22:e3:
7c:62:67:71:27:7f:c4:0a:bf:f1:ee:2d:d9:91:f9:b1:59:bf:
99:0e:17:c3:5e:a4:68:59:54:7d:8c:84:be:7d:8f:bb:0b:30:
d4:47:a7:d5:63:00:01:43:9e:12:b1:cf:6f:18:ca:7f:c2:80:
60:ee:cd:8f:11:cc:63:39:e7:9b:40:3e:e2:36:19:df:3d:d0:
3d:2a:bd:cc:ad:80:3c:d6:92:4c:25:e0:c8:7e:82:9f:46:be:
53:e5:6e:7c:4e:e1:eb:78:54:40:73:6d:03:cc:d5:d8:fe:23:
0c:00:35:71:df:6b:37:01:7a:9f:f0:eb:3d:d4:7d:19:ee:a9:
0d:e8:62:c6:0e:06:35:a4:b8:b9:4e:ff:48:77:32:d0:9e:4b:
d9:3c:62:5a:88:a1:a9:88:15:c3:7d:29:94:15:59:1b:6c:44:
5d:52:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:56 2025 by rpki-client