Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OlrL_HhW8trzw4UYF2_SXLAr-R8.roa
File: OlrL_HhW8trzw4UYF2_SXLAr-R8.roa (raw, json)
Hash identifier: ZrsL6cMkQUBWPAmoHrkwu8Vk/hgBP/fPn6H69oJrCUc=
Subject key identifier: 3A:5A:CB:FC:78:56:F2:DA:F3:C3:85:18:17:6F:D2:5C:B0:2B:F9:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 670CC8D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OlrL_HhW8trzw4UYF2_SXLAr-R8.roa
Signing time: Wed 02 Feb 2022 00:09:17 +0000
ROA not before: Wed 02 Feb 2022 00:09:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728891095 (0x670cc8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 00:09:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a5acbfc7856f2daf3c38518176fd25cb02bf91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:48:73:86:d7:20:46:d8:30:4b:e5:92:04:
c9:fa:f7:3b:90:11:23:60:20:e9:fe:65:95:ac:6e:
47:14:cb:7b:0c:ac:4b:8c:ea:58:c6:35:f9:df:54:
c3:e2:14:52:d9:38:16:78:f0:f8:06:17:16:a7:fb:
d4:b9:4d:f5:4e:34:a1:48:07:80:21:8c:69:b7:52:
d8:ea:bd:53:c8:91:ef:9a:f9:ca:b6:0e:e6:19:b8:
43:92:65:3d:55:88:72:cb:62:6f:c9:7a:21:4f:98:
76:b1:61:08:7b:23:91:09:4a:2e:30:95:e3:d9:ea:
3a:cf:41:5b:9a:cf:f1:93:6e:d4:e6:9f:ee:ef:39:
21:76:be:0c:52:74:4e:42:31:c2:19:4a:1f:c8:29:
cd:2f:c7:91:f1:cf:75:1d:33:68:81:f3:c7:a2:41:
ec:b4:1e:5f:30:67:7a:32:ce:bf:9f:18:93:36:ce:
74:16:e9:83:16:44:fb:74:81:43:13:c5:0b:b9:45:
80:2b:89:d9:a8:5c:67:56:d2:8c:7d:a5:6c:d6:06:
f9:a1:6f:e9:07:81:f4:03:e6:fd:02:ab:57:9b:ca:
3a:d2:1c:78:07:88:bd:a7:6b:8f:1c:58:61:c9:30:
75:b3:66:47:40:5e:6e:29:7e:e3:4e:32:b0:15:77:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5A:CB:FC:78:56:F2:DA:F3:C3:85:18:17:6F:D2:5C:B0:2B:F9:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OlrL_HhW8trzw4UYF2_SXLAr-R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:9d:f2:a9:04:14:f0:bd:a0:e0:68:07:8b:9a:63:55:40:8b:
5d:78:c2:45:30:f2:04:fb:a0:cc:44:60:0d:d1:62:55:f8:66:
a2:f1:ab:13:bd:08:24:6c:51:f6:75:f6:cc:cb:28:e0:d5:28:
7a:1d:94:f1:66:9c:e0:76:fc:cc:60:5b:a1:c7:e1:8e:ab:be:
0d:5e:87:9e:b7:7b:0c:05:b3:ac:e1:be:a3:e5:4b:e5:d9:a2:
da:9f:cc:d4:75:8a:2e:e9:55:ff:74:00:b7:57:09:4c:65:23:
3b:3e:b9:63:9a:ea:9b:5b:3d:85:ba:62:ac:bd:4b:92:bf:e8:
1d:48:7f:44:99:74:70:bf:17:19:69:12:5b:91:b9:74:4e:0c:
d5:40:d4:6d:af:73:a1:ec:2d:f5:65:bd:89:34:3c:40:c5:20:
31:d1:30:69:98:aa:ec:97:d5:c5:57:82:e2:96:8d:ae:e1:7d:
78:bb:77:d6:78:49:3b:cc:da:15:2d:05:4c:02:3c:5a:c1:55:
8e:e1:61:ff:54:51:e4:85:68:d5:5c:e8:20:86:e0:89:8d:70:
c1:14:9d:86:2c:20:4d:00:cd:d2:fe:b1:f4:47:ca:e1:ff:88:
15:2a:4f:8a:1d:61:c3:78:e6:9d:d5:20:5d:3a:4b:40:eb:d7:
6e:13:80:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:38:50 2025 by rpki-client