Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OitY88YCX9e-mQD5oIrHT9i5mGQ.roa
File: OitY88YCX9e-mQD5oIrHT9i5mGQ.roa (raw, json)
Hash identifier: rHdRh7MFrWJKHuqZI69S9Xc/tT8aoOzPq3l1BSRtwLo=
Subject key identifier: 3A:2B:58:F3:C6:02:5F:D7:BE:99:00:F9:A0:8A:C7:4F:D8:B9:98:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018729A3BDE66E06CC40CA1F017869729F53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OitY88YCX9e-mQD5oIrHT9i5mGQ.roa
Signing time: Tue 28 Mar 2023 19:13:29 +0000
ROA not before: Tue 28 Mar 2023 19:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:29:a3:bd:e6:6e:06:cc:40:ca:1f:01:78:69:72:9f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 19:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a2b58f3c6025fd7be9900f9a08ac74fd8b99864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:97:b3:bf:f9:7f:45:b8:7f:07:61:f1:74:
fe:6b:50:cb:0f:e8:43:d3:a8:9b:a3:b6:ff:e1:a0:
a7:42:54:11:73:06:36:69:59:dd:62:92:80:70:38:
2e:5b:67:a2:80:6d:84:66:a4:d0:19:c4:d9:4c:51:
13:31:13:c3:67:e6:9b:63:be:6f:1a:ca:9e:8c:e9:
6e:77:1c:e1:d5:0c:40:a9:31:57:0d:ad:c0:42:26:
b3:1e:09:ce:c1:25:f1:08:69:69:3c:b1:4f:01:78:
2b:1a:1b:94:99:63:31:43:51:0e:5a:0e:3c:7e:a7:
a0:de:d9:11:99:57:f9:2e:8e:4f:6e:93:9c:c1:36:
20:e3:aa:ae:64:03:6a:f9:c9:6f:4c:5e:a8:98:bb:
0f:35:2e:fa:e3:9b:dc:5b:99:e0:13:69:6a:a1:08:
3a:64:6a:37:6d:0f:e5:ae:fc:50:61:e2:5c:95:a8:
03:5f:8c:ad:41:a2:75:df:0e:e4:5c:94:75:3c:fc:
3b:57:64:ba:9f:f5:cc:a1:28:ea:88:61:df:39:ee:
3c:4d:53:bf:30:ff:97:88:ff:04:fd:e1:d0:c9:07:
2e:de:f2:6e:53:e3:35:4c:ea:27:8f:1b:9a:80:ee:
ab:7e:c6:c7:44:11:46:84:fe:66:82:ad:d6:2b:c3:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:58:F3:C6:02:5F:D7:BE:99:00:F9:A0:8A:C7:4F:D8:B9:98:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OitY88YCX9e-mQD5oIrHT9i5mGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:ea:02:d1:69:41:dd:dd:39:37:b5:0e:23:47:35:a7:10:03:
bc:a6:23:6a:41:76:f5:25:05:d1:ea:ce:7c:5a:65:53:a3:87:
22:dc:13:6c:6c:32:f1:a2:66:f1:34:0a:93:5c:a7:1d:bc:1e:
e6:47:7b:be:65:f0:af:4e:f3:50:4e:db:17:1b:82:6f:cc:42:
cb:e1:9f:12:03:c4:c4:d0:8f:a7:af:82:c6:68:ad:b3:3d:c6:
a9:c0:39:d4:d2:82:91:e8:92:ce:02:d2:6a:a1:2c:81:2d:05:
47:db:c9:13:fc:2d:29:ae:68:4d:e9:1e:9e:82:ad:6b:1a:db:
fc:f7:da:8e:8c:11:6f:7d:63:8d:a9:fe:ed:c2:09:d4:f1:c2:
4c:6c:69:4c:3c:62:67:30:0f:82:3d:67:99:d3:b5:42:67:3a:
1f:e1:17:f2:d4:41:13:28:74:47:e9:60:d5:99:0c:b3:99:c9:
a3:5c:53:bf:d9:85:29:f8:4e:98:6d:55:b3:28:b9:0e:81:2d:
9a:05:cd:d2:c1:fe:25:a4:aa:47:4d:a9:08:14:98:d8:35:09:
f7:79:36:f0:72:da:68:d1:4e:1c:80:e8:f2:f7:35:29:bf:97:
2e:3d:5f:76:93:1d:c9:e5:8d:eb:f7:3b:ae:bd:76:a5:8e:a4:
45:a3:ad:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:50:48 2025 by rpki-client