Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oo2BS1SqeInK4bnpWt9R_4teYqM.roa
File: Oo2BS1SqeInK4bnpWt9R_4teYqM.roa (raw, json)
Hash identifier: EVgDyXeIJHvEEVprSqVOtXLGrilFYpz9u/xWsvIRDe8=
Subject key identifier: 3A:8D:81:4B:54:AA:78:89:CA:E1:B9:E9:5A:DF:51:FF:8B:5E:62:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01836FA1F5BF4BDDEC5D353FD8C144CAB408
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oo2BS1SqeInK4bnpWt9R_4teYqM.roa
Signing time: Sat 24 Sep 2022 13:13:48 +0000
ROA not before: Sat 24 Sep 2022 13:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6f:a1:f5:bf:4b:dd:ec:5d:35:3f:d8:c1:44:ca:b4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 24 13:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a8d814b54aa7889cae1b9e95adf51ff8b5e62a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:08:e5:46:4c:49:c5:2f:f6:58:a9:44:8c:
5e:13:c1:8d:33:fb:da:12:4b:35:b7:22:75:4e:6f:
7d:d0:c5:db:d6:5a:63:64:66:4e:87:ec:56:aa:bb:
24:a5:20:53:5d:d1:15:71:90:42:d2:d2:e9:7e:f8:
ac:f1:05:df:9a:dc:e5:10:63:ad:eb:d0:45:17:36:
bc:12:9d:1b:e8:a5:95:4a:67:d4:0f:a0:0c:83:c7:
4e:30:cd:87:42:87:e7:81:5e:f7:5a:5c:31:97:49:
35:1a:17:b6:71:06:d4:ab:94:f8:75:5b:49:ef:a2:
76:87:da:ee:e0:ab:fc:f1:fe:df:05:7d:bb:67:c9:
d4:3f:ab:c2:90:ae:f2:70:bb:cc:86:2d:15:e2:1f:
6f:b0:85:bd:99:eb:8c:9f:6e:c6:0c:91:05:ca:92:
d5:09:e0:e4:a1:1a:c8:45:88:32:99:fe:c3:21:9e:
e7:f5:c2:f0:a2:be:61:53:6e:f3:cc:50:ad:98:2b:
71:97:48:94:75:33:f5:74:7c:8f:78:85:08:a1:11:
d6:aa:55:16:76:95:40:a6:29:ec:e6:d1:5c:f8:ac:
8b:fe:e4:ac:b2:66:96:d6:91:86:70:ea:a6:3a:c2:
df:ef:d3:69:2d:49:b6:82:9e:f0:c3:66:7c:3d:e8:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8D:81:4B:54:AA:78:89:CA:E1:B9:E9:5A:DF:51:FF:8B:5E:62:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oo2BS1SqeInK4bnpWt9R_4teYqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:12:2a:e3:6a:cd:23:e2:1e:4f:6a:de:3f:d4:68:eb:91:5f:
7c:3b:13:6d:4e:95:12:6d:6f:ca:e9:79:ac:5c:31:8b:4e:94:
4f:28:5d:b8:cf:c8:6d:4b:a3:4f:c2:bf:e7:8b:15:85:72:34:
65:ee:dd:2b:29:e7:95:9c:90:e0:d9:23:4b:38:21:86:16:c8:
72:90:80:cb:ff:32:61:59:d0:ed:6c:28:6f:fd:c5:9e:87:d3:
17:6d:c8:d5:fb:77:95:d6:47:02:0d:d9:0d:b2:90:05:c9:56:
2f:d9:e9:97:d8:5e:95:c5:f2:f2:a3:04:03:80:f0:12:d8:a0:
d6:bf:3c:59:57:b7:af:57:1c:71:c3:85:31:0b:46:fc:d7:8e:
ed:02:bc:d0:e6:a7:05:5a:5f:8e:2a:4d:57:4f:b4:bb:a9:f5:
af:0a:cd:db:5a:62:8a:28:98:82:d8:ef:9e:4f:9e:46:86:84:
ac:e0:91:ac:e7:94:83:64:5e:c2:fc:e5:0d:99:dd:e3:40:cd:
d3:97:c7:58:eb:40:24:3f:30:43:ed:d4:ae:68:21:2e:fd:13:
3c:23:83:b6:32:ad:67:f3:80:5c:37:d4:e0:14:2a:4d:e9:d8:
01:85:4f:12:4f:ec:66:24:58:17:ac:95:a8:b5:17:91:c6:d8:
02:cb:34:5f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYNvofW/S93sXTU/2MFEyrQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTI0MTMxMzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYThkODE0YjU0YWE3ODg5Y2FlMWI5ZTk1YWRmNTFmZjhiNWU2MmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EcI5UZMScUv9lipRIxeE8GNM/va
Eks1tyJ1Tm990MXb1lpjZGZOh+xWqrskpSBTXdEVcZBC0tLpfvis8QXfmtzlEGOt
69BFFza8Ep0b6KWVSmfUD6AMg8dOMM2HQofngV73Wlwxl0k1Ghe2cQbUq5T4dVtJ
76J2h9ru4Kv88f7fBX27Z8nUP6vCkK7ycLvMhi0V4h9vsIW9meuMn27GDJEFypLV
CeDkoRrIRYgymf7DIZ7n9cLwor5hU27zzFCtmCtxl0iUdTP1dHyPeIUIoRHWqlUW
dpVApins5tFc+KyL/uSssmaW1pGGcOqmOsLf79NpLUm2gp7ww2Z8PegXvQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDqNgUtUqniJyuG56VrfUf+LXmKjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT28yQlMxU3FlSW5LNGJucFd0OVJfNHRlWXFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKQSKuNqzSPiHk9q3j/U
aOuRX3w7E21OlRJtb8rpeaxcMYtOlE8oXbjPyG1Lo0/Cv+eLFYVyNGXu3Ssp55Wc
kODZI0s4IYYWyHKQgMv/MmFZ0O1sKG/9xZ6H0xdtyNX7d5XWRwIN2Q2ykAXJVi/Z
6ZfYXpXF8vKjBAOA8BLYoNa/PFlXt69XHHHDhTELRvzXju0CvNDmpwVaX44qTVdP
tLup9a8KzdtaYooomILY755PnkaGhKzgkaznlINkXsL85Q2Z3eNAzdOXx1jrQCQ/
MEPt1K5oIS79Ezwjg7YyrWfzgFw31OAUKk3p2AGFTxJP7GYkWBeslai1F5HG2ALL
NF8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:17:38 2025 by rpki-client