Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OsbGZDTAXxa3GccmDOrWMO_eP1w.roa
File: OsbGZDTAXxa3GccmDOrWMO_eP1w.roa (raw, json)
Hash identifier: GpM382CK6FXFacRbGTeAVqt5sPVNu5nLnS+0M0DaF+Y=
Subject key identifier: 3A:C6:C6:64:34:C0:5F:16:B7:19:C7:26:0C:EA:D6:30:EF:DE:3F:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91FD0DB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OsbGZDTAXxa3GccmDOrWMO_eP1w.roa
Signing time: Sun 03 Jul 2022 09:12:25 +0000
ROA not before: Sun 03 Jul 2022 09:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449280440 (0x91fd0db8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 3 09:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ac6c66434c05f16b719c7260cead630efde3f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:fd:4c:dc:0d:99:c6:05:aa:1a:41:84:b3:
69:53:84:70:1e:8f:dc:74:32:fd:0f:db:61:24:c5:
cb:3f:d2:a4:b7:0c:13:6e:c4:b2:9f:23:da:c2:0a:
21:b2:c8:0b:5b:3f:88:b0:31:0d:c4:64:86:67:3d:
1e:d4:e2:76:3a:f9:3a:12:a3:fa:16:59:ff:b3:32:
f7:74:3d:cd:08:10:16:29:cf:f3:14:89:00:7f:eb:
ff:35:0b:eb:fb:3b:fa:12:86:be:67:01:55:8b:ce:
13:76:20:f3:e5:9e:a5:e8:65:52:8d:89:4b:7e:d4:
d1:ea:7b:1f:f8:3d:3a:58:50:ad:76:d5:3d:b9:8e:
f6:63:e8:e7:b6:f0:3f:9a:9a:5a:67:cd:10:9f:d1:
b6:02:89:5b:01:68:6d:52:54:83:88:a4:80:3c:d5:
65:8b:e0:d3:9e:15:39:16:7b:1c:42:46:99:47:1c:
cb:61:03:5e:b2:79:c8:60:ab:fd:51:45:ac:58:6c:
91:e6:bd:31:51:a3:51:b9:91:e8:3a:0d:16:04:47:
8f:2e:db:50:3a:87:c3:d6:10:b8:9c:7f:85:c8:f7:
b0:45:9b:f7:77:47:66:2d:c3:f8:58:23:c8:c3:61:
4c:87:ff:e7:7c:b6:9c:65:ff:34:c7:7b:78:7a:26:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:C6:64:34:C0:5F:16:B7:19:C7:26:0C:EA:D6:30:EF:DE:3F:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OsbGZDTAXxa3GccmDOrWMO_eP1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:13:2c:8c:df:73:d5:3d:d5:18:c0:bc:df:72:9a:69:1e:18:
20:e0:1b:f8:71:21:36:13:0f:72:8b:fa:35:48:cc:88:49:47:
50:a7:0b:ca:1d:d7:cc:7f:aa:9c:8b:f2:3b:8d:15:1d:bf:56:
23:d8:b5:93:b2:78:a9:4d:4b:f6:f8:30:88:45:ee:8b:1c:98:
a7:0f:cc:7c:9b:0a:08:66:b2:6e:8b:8c:ac:65:b3:0e:85:0a:
01:bd:06:c2:e6:03:24:b6:04:d6:12:4c:6d:50:98:79:61:79:
66:77:69:d2:06:e6:03:14:bc:fe:9c:77:39:9e:f8:33:81:30:
77:49:6c:69:52:77:2b:8d:8b:72:65:3d:6c:24:93:0e:83:de:
84:1b:3f:91:e8:7c:2d:bc:be:76:b5:37:0f:b1:57:5a:af:6e:
fa:0e:b8:cb:97:77:3c:ca:9a:01:f3:79:0b:e4:69:a2:e0:18:
9f:94:05:3f:c5:f0:c9:df:00:07:96:e8:79:cc:ae:a6:e4:ee:
cd:70:6e:46:32:c3:6e:eb:75:4e:60:31:94:20:f4:d4:c5:32:
1f:ac:d7:9a:27:a9:16:11:17:85:7e:57:f7:04:97:2f:aa:46:
ab:81:2a:1d:7c:64:93:fb:09:61:de:c6:7d:2f:47:f8:2e:1b:
6e:88:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:35:41 2025 by rpki-client