Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzD9SjOoiPbI6Bnbus7nXTD4z9Y.roa
File: OzD9SjOoiPbI6Bnbus7nXTD4z9Y.roa (raw, json)
Hash identifier: m/AEKeuJSI8zCBnYk4BDI9HY//3twuwOYAt10VT5PEE=
Subject key identifier: 3B:30:FD:4A:33:A8:88:F6:C8:E8:19:DB:BA:CE:E7:5D:30:F8:CF:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018832D9CC401BA4ED863A5FD771FE519D45
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzD9SjOoiPbI6Bnbus7nXTD4z9Y.roa
Signing time: Fri 19 May 2023 07:11:54 +0000
ROA not before: Fri 19 May 2023 07:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:d9:cc:40:1b:a4:ed:86:3a:5f:d7:71:fe:51:9d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 07:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b30fd4a33a888f6c8e819dbbacee75d30f8cfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:40:20:10:67:45:cf:0f:c4:c5:6f:82:9c:
4c:58:1e:cf:99:14:f5:58:f5:83:12:08:00:f9:08:
0f:75:1e:15:f4:cd:f9:d9:72:ec:23:9c:0d:8b:ec:
87:80:c0:15:f8:43:83:b1:19:be:a1:37:cd:ec:78:
0d:af:cf:e0:f9:f5:5c:32:f0:ea:f3:4f:9e:f3:22:
31:e9:dd:1b:75:ac:b2:41:44:5f:d4:3e:0c:11:46:
93:d0:eb:a0:60:00:39:30:a6:6b:34:c0:fd:e6:05:
06:36:71:cf:57:c0:56:2b:5e:fe:56:50:14:68:d4:
2c:06:91:b0:45:42:91:09:82:74:2b:34:dc:50:93:
a7:cb:da:8d:95:69:90:a1:bd:ff:a3:ab:93:73:c3:
ee:2a:2b:22:fe:3a:96:f2:a2:ef:07:85:01:28:50:
5e:36:4b:34:33:ce:16:90:4c:fc:e1:d0:21:1e:97:
e5:6a:a8:86:a1:19:2c:13:c7:27:7a:72:6f:c9:ee:
69:09:c8:8e:b6:3f:6f:1e:b3:51:13:0e:d2:6c:1b:
4a:f2:e6:28:1c:94:2d:f2:ae:96:8a:e8:23:d6:fb:
0c:88:01:ec:d0:75:3e:d1:ef:c5:b6:7c:80:b6:c2:
23:01:24:d8:38:82:8b:4a:da:ea:b8:d3:d1:07:bd:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:FD:4A:33:A8:88:F6:C8:E8:19:DB:BA:CE:E7:5D:30:F8:CF:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzD9SjOoiPbI6Bnbus7nXTD4z9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:f8:60:b6:2e:9b:16:57:20:d3:65:95:3c:62:26:06:a5:95:
7e:55:5e:fd:9b:31:52:bd:13:0b:53:61:1d:c2:22:b8:6d:d6:
05:33:87:55:0d:72:94:ab:10:a3:18:27:6a:aa:d7:56:d8:d7:
d2:f6:88:b8:b5:ae:20:10:a7:cb:9b:bd:45:68:56:20:62:24:
a7:45:86:6f:7d:32:50:1e:89:fd:41:7a:5d:50:af:97:13:10:
72:63:62:03:65:33:1b:04:6b:ce:dc:54:ef:3c:83:35:f3:1b:
55:0c:55:cf:8b:8a:09:01:8e:9d:47:3d:a8:eb:a3:b5:43:79:
a2:41:0f:9b:f8:ea:ec:37:f2:40:37:d2:0f:46:0b:04:68:d9:
7c:bf:8d:0a:0d:60:c5:bb:9d:a6:76:1e:45:ea:64:9d:62:be:
67:73:61:3e:a9:f7:b0:5b:03:14:67:09:87:89:b7:ac:23:b5:
49:ec:0d:62:d0:a8:9b:c1:45:5b:b4:47:24:ce:8d:01:e5:02:
79:58:b5:53:56:97:24:0f:75:20:a8:ed:c4:d0:31:b3:2a:90:
f5:f2:0b:18:78:58:31:b9:aa:7b:3d:29:dc:7a:b1:c0:df:fb:
c9:9c:a5:54:d3:74:25:3a:36:b7:a6:c5:9e:4a:85:51:73:90:
95:85:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:44:21 2025 by rpki-client