Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oMPdiGTge5JfDTKmhM0iBPD8MYA.roa
File: oMPdiGTge5JfDTKmhM0iBPD8MYA.roa (raw, json)
Hash identifier: X+KucKTGLP6fEDWwrU45poRiSCJz2LqCk4tqNV4JO8U=
Subject key identifier: A0:C3:DD:88:64:E0:7B:92:5F:0D:32:A6:84:CD:22:04:F0:FC:31:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70DABFCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oMPdiGTge5JfDTKmhM0iBPD8MYA.roa
Signing time: Tue 08 Mar 2022 20:10:23 +0000
ROA not before: Tue 08 Mar 2022 20:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893384143 (0x70dabfcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 20:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0c3dd8864e07b925f0d32a684cd2204f0fc3180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:15:e7:80:3d:63:56:40:d8:92:70:68:79:63:
eb:99:8b:81:b2:42:2d:0a:f6:16:ff:42:f3:6b:bc:
6e:2e:cb:47:70:f1:8e:b8:57:b6:b5:58:c1:b1:75:
d0:f5:0a:27:40:d6:94:a9:97:5f:de:bd:e6:b0:f6:
2e:c0:da:db:0e:ab:ad:7c:53:15:62:5a:21:18:46:
df:42:1a:de:44:34:9f:ee:c8:04:62:2e:9a:7f:6e:
7c:80:9f:65:fd:84:9c:a5:16:69:b8:81:6b:da:c2:
7c:67:cf:14:b7:d2:c4:26:a9:40:3c:96:74:be:c5:
0c:d3:1d:2c:1d:47:d9:c3:e7:af:c9:60:2d:dd:5f:
0d:a4:a4:22:64:04:f0:46:3d:a4:3b:cf:5c:84:39:
ed:b9:f2:1c:d3:8a:37:ca:e9:ac:47:74:ce:5e:c2:
5a:9b:9f:43:9f:8e:0c:aa:bf:b6:ec:09:7c:fa:3f:
43:75:7e:5f:9a:4f:0b:34:6b:66:eb:ab:3d:43:e2:
6f:8d:87:2a:ba:4b:08:79:4d:cb:63:bd:41:02:ad:
75:d0:ee:70:c6:f0:ee:65:a2:c8:db:6a:2f:3e:7f:
9e:e9:c0:2e:70:8c:43:f2:4f:1f:96:a3:14:0b:cb:
fb:0f:95:b8:07:7f:8b:1e:da:c7:89:ca:a2:ac:92:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C3:DD:88:64:E0:7B:92:5F:0D:32:A6:84:CD:22:04:F0:FC:31:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oMPdiGTge5JfDTKmhM0iBPD8MYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:64:29:9b:2a:62:25:ca:d5:71:96:61:a5:64:61:ac:0e:78:
c4:cb:5c:0f:97:58:bb:38:61:e5:74:85:b7:c5:1a:94:7d:5d:
84:d7:35:45:10:00:45:a4:20:11:fe:6d:77:5f:a4:49:51:c7:
fe:ca:e0:d6:c2:b4:bd:15:11:86:26:a7:aa:d7:38:a5:f5:6f:
5f:07:d1:6a:48:c2:d6:4c:e6:66:21:54:9b:1b:52:28:da:f0:
35:cf:1f:29:d4:c7:6f:3a:1b:c5:f6:22:f6:f0:63:92:85:82:
71:b6:62:c4:9f:59:02:64:b0:ac:7c:48:82:9e:2c:1b:12:32:
3e:7f:cb:9d:62:2d:bf:ec:ab:4d:9a:47:87:01:91:eb:e7:ad:
9f:42:10:eb:19:24:eb:6c:78:a1:2d:c1:36:6c:73:67:ff:d4:
60:e8:7f:a8:99:b0:92:cd:6f:fb:ff:e3:42:68:b0:b5:ac:2c:
1b:d4:ae:9c:8b:08:3a:c7:33:22:8b:f6:d4:da:db:36:5b:0d:
4a:49:5f:bf:c2:09:2e:52:40:01:f6:72:ae:f6:5c:1e:f3:00:
73:3e:96:df:ae:8b:39:f4:e7:ff:0d:53:e6:1d:32:af:c9:77:
2e:fc:99:0b:dc:cc:ed:b1:e0:e2:9a:31:83:cc:9c:3b:34:35:
4a:8c:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:05:03 2025 by rpki-client