Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oPFFxwICU6wPC-qGoTkTb_E4O0s.roa
File: oPFFxwICU6wPC-qGoTkTb_E4O0s.roa (raw, json)
Hash identifier: hdncx/k0qy0qS4zgoIiTYcHgQy17t8XJzikgk/qiIu4=
Subject key identifier: A0:F1:45:C7:02:02:53:AC:0F:0B:EA:86:A1:39:13:6F:F1:38:3B:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182154660F9990277F283784502C27EAA9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oPFFxwICU6wPC-qGoTkTb_E4O0s.roa
Signing time: Tue 19 Jul 2022 07:05:09 +0000
ROA not before: Tue 19 Jul 2022 07:05:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:1545:fab3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:46:60:f9:99:02:77:f2:83:78:45:02:c2:7e:aa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 07:05:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0f145c7020253ac0f0bea86a139136ff1383b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:11:55:77:0a:f0:0f:e4:9e:24:1c:03:7f:
d6:f0:15:ed:6f:09:c3:f1:49:39:db:86:73:2c:da:
28:c6:6b:ec:ec:5a:a9:46:f8:c9:58:db:dd:92:ff:
db:5c:94:75:8b:ba:6b:e3:ab:97:56:ec:ee:9e:20:
c0:90:ca:13:8c:0f:3c:c9:3f:cc:0a:fe:bb:59:eb:
ac:12:3d:2c:87:44:d4:e4:03:b1:1e:59:9d:11:a9:
cd:36:e6:7a:96:03:8f:3f:e9:86:da:4d:50:51:55:
19:0a:57:b3:52:2b:98:3f:bd:22:e2:fc:e4:4e:d1:
a8:43:df:9e:27:d9:c7:a9:14:28:46:fc:6d:77:6f:
fd:c9:95:ed:d8:df:35:ac:78:6a:60:41:1c:59:ab:
b3:1b:b1:2b:4e:27:5a:97:e7:31:ad:21:a1:f2:ab:
9a:a7:09:6d:8b:71:68:34:70:90:5d:4d:9b:ea:72:
67:d7:9f:d1:d3:de:6c:8a:5e:28:23:f4:28:6f:6c:
b9:78:3b:cd:36:fb:13:0b:f1:91:38:fb:7b:01:03:
cf:94:32:0f:55:61:14:63:78:fd:bc:66:39:c6:39:
d1:4a:ca:ff:31:ad:73:55:e7:0e:9e:08:0f:2f:67:
98:06:91:56:96:8b:ec:b9:e8:12:be:d6:c7:47:fe:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F1:45:C7:02:02:53:AC:0F:0B:EA:86:A1:39:13:6F:F1:38:3B:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oPFFxwICU6wPC-qGoTkTb_E4O0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:4f:55:7c:aa:c5:68:a2:ec:0e:b0:65:3e:df:c4:c5:80:09:
1e:1b:a0:5c:34:57:4c:6a:30:42:c4:c7:a1:f6:a8:b9:cb:d5:
43:d2:5c:03:62:ab:ab:dd:fd:37:9c:f7:67:40:03:a7:2b:0b:
95:08:a4:b1:47:b1:7b:59:02:ea:09:e5:27:59:38:93:33:0e:
58:d2:11:a6:9f:e0:df:ef:b8:11:85:fa:d8:04:e9:05:2b:77:
d0:0f:c9:2b:04:dc:d9:db:9b:8f:57:aa:d9:67:48:02:56:49:
72:29:a3:6e:6b:ed:cc:83:c1:7e:3d:db:7d:6e:4a:42:6e:5d:
46:39:c4:12:fa:8e:86:64:70:5c:9d:51:64:e7:f8:d8:38:a6:
15:87:65:e3:1b:69:ee:0b:e0:bc:ab:20:77:1f:d8:f8:75:c0:
d9:4d:35:31:00:f2:44:54:f7:34:85:e2:88:18:ea:78:86:c2:
b5:83:aa:a5:11:4a:6b:2d:62:9b:cd:47:7a:e0:8e:19:16:3c:
3f:e0:b2:c1:06:57:d3:d5:8a:94:d8:ad:24:20:d5:56:7f:08:
6e:76:46:dc:20:a7:6b:1c:df:4e:78:2b:61:d1:30:ef:df:96:
7f:8a:9c:f7:55:b7:74:aa:4f:75:94:a5:06:2d:9c:30:2a:ab:
90:33:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:05:51 2025 by rpki-client