Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzJfpC75XtZ4IQOOhrzpc0ZuO-g.roa
File: OzJfpC75XtZ4IQOOhrzpc0ZuO-g.roa (raw, json)
Hash identifier: iAP9YO9gdzklaTJp8t49aTHGyiW19bLODnthj7AGoEM=
Subject key identifier: 3B:32:5F:A4:2E:F9:5E:D6:78:21:03:8E:86:BC:E9:73:46:6E:3B:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018865B2503E90C9DCFC987223849A78E70E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzJfpC75XtZ4IQOOhrzpc0ZuO-g.roa
Signing time: Mon 29 May 2023 04:09:24 +0000
ROA not before: Mon 29 May 2023 04:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:65:b2:50:3e:90:c9:dc:fc:98:72:23:84:9a:78:e7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 04:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b325fa42ef95ed67821038e86bce973466e3be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:03:7c:68:60:ac:16:1a:23:9c:3b:ff:17:
0b:9e:c8:56:a9:58:af:0c:2a:63:da:06:ac:9d:b6:
73:56:2c:6c:64:3d:a5:ec:a1:27:a9:64:1c:5e:7d:
1a:63:2d:80:b9:83:62:10:cd:20:65:77:fa:34:f2:
16:12:62:ca:6b:45:a5:19:99:53:b7:68:20:32:30:
05:b3:1e:1a:26:88:65:6e:8a:eb:7a:9c:ce:86:ff:
62:bf:9c:53:74:96:a7:2e:0a:f8:98:bd:80:16:a1:
6d:d9:03:d9:19:03:f3:aa:f7:bd:69:60:9e:10:91:
c4:9a:25:e9:a7:31:49:d2:7c:59:3f:bd:f9:ad:04:
b2:de:24:bf:f4:e2:4a:d6:e1:29:c0:ee:bf:fe:dc:
c6:8a:47:57:ab:42:a6:be:27:4b:3f:f6:47:d2:f8:
7c:18:1b:27:a9:07:41:68:38:a5:fa:63:16:13:0f:
36:b1:b2:c2:c6:fb:da:c4:99:7f:a5:73:46:fb:2f:
60:de:93:19:6b:58:0f:9e:89:54:de:df:77:19:02:
61:ad:69:17:8e:d6:ad:27:e0:3b:6b:f1:2a:14:d8:
a0:62:cd:23:76:1a:85:9d:92:96:c6:05:5a:2d:31:
40:db:67:4e:97:82:63:7f:75:81:f5:06:e1:ad:88:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:32:5F:A4:2E:F9:5E:D6:78:21:03:8E:86:BC:E9:73:46:6E:3B:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzJfpC75XtZ4IQOOhrzpc0ZuO-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:4a:7e:59:04:28:fb:41:3e:b1:de:7c:be:74:91:48:44:5c:
dc:c0:76:44:73:76:36:75:43:10:b6:ac:9c:08:77:bf:c6:d5:
21:11:ca:99:e6:0a:71:99:a1:0d:bf:7b:ba:f7:3c:7c:0a:09:
7a:e7:ae:e9:c8:15:87:5c:f8:b4:93:f7:6f:6d:03:b0:80:c9:
a7:62:0b:ff:b9:bb:c0:bb:3c:dc:54:0b:ae:e0:28:2e:61:cd:
36:65:c0:dd:31:92:90:20:58:90:f7:80:57:3e:e8:f0:a4:f0:
e5:d3:63:35:af:91:1a:ee:53:36:7f:b8:6c:86:e6:18:c6:41:
e8:6c:ac:8c:c0:39:1f:cc:0f:3c:b4:23:de:b4:26:22:45:1e:
d2:e2:78:32:c8:ed:ec:fd:f7:a8:bf:9c:f4:c4:5b:84:1d:9b:
a6:84:99:9a:c9:2b:9a:63:b6:ad:b5:78:92:75:b2:2c:5a:22:
02:f6:bf:7e:e1:f7:a8:86:33:c2:b6:28:e4:d2:2a:ab:ef:2f:
05:61:40:5b:b7:49:bb:dc:9a:f4:16:b4:a3:13:ff:c9:a9:bb:
19:bd:44:00:44:2c:52:ea:59:fc:82:9b:62:19:dc:0e:a8:cf:
a8:54:0a:96:78:83:91:e5:fb:05:5d:e1:e4:08:04:dc:1d:42:
2a:0e:5a:b9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhlslA+kMnc/JhyI4SaeOcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI5MDQwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjMyNWZhNDJlZjk1ZWQ2NzgyMTAzOGU4NmJjZTk3MzQ2NmUzYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3UDfGhgrBYaI5w7/xcLnshWqViv
DCpj2gasnbZzVixsZD2l7KEnqWQcXn0aYy2AuYNiEM0gZXf6NPIWEmLKa0WlGZlT
t2ggMjAFsx4aJohlborrepzOhv9iv5xTdJanLgr4mL2AFqFt2QPZGQPzqve9aWCe
EJHEmiXppzFJ0nxZP735rQSy3iS/9OJK1uEpwO6//tzGikdXq0KmvidLP/ZH0vh8
GBsnqQdBaDil+mMWEw82sbLCxvvaxJl/pXNG+y9g3pMZa1gPnolU3t93GQJhrWkX
jtatJ+A7a/EqFNigYs0jdhqFnZKWxgVaLTFA22dOl4Jjf3WB9QbhrYiVEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDsyX6Qu+V7WeCEDjoa86XNGbjvoMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT3pKZnBDNzVYdFo0SVFPT2hyenBjMFp1Ty1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA5KflkEKPtBPrHefL50
kUhEXNzAdkRzdjZ1QxC2rJwId7/G1SERypnmCnGZoQ2/e7r3PHwKCXrnrunIFYdc
+LST929tA7CAyadiC/+5u8C7PNxUC67gKC5hzTZlwN0xkpAgWJD3gFc+6PCk8OXT
YzWvkRruUzZ/uGyG5hjGQehsrIzAOR/MDzy0I960JiJFHtLieDLI7ez996i/nPTE
W4Qdm6aEmZrJK5pjtq21eJJ1sixaIgL2v37h96iGM8K2KOTSKqvvLwVhQFu3Sbvc
mvQWtKMT/8mpuxm9RABELFLqWfyCm2IZ3A6oz6hUCpZ4g5Hl+wVd4eQIBNwdQioO
Wrk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:00:23 2025 by rpki-client