Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oSqFIdznoIbk86DNZSxaFQ642dc.roa
File: oSqFIdznoIbk86DNZSxaFQ642dc.roa (raw, json)
Hash identifier: PXm5fywZBouDBJ6051ld+lZ2lQLxDz1eeRwCK7hIry0=
Subject key identifier: A1:2A:85:21:DC:E7:A0:86:E4:F3:A0:CD:65:2C:5A:15:0E:B8:D9:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887F72D52DB594A7C5D11E8E4165C3A340
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oSqFIdznoIbk86DNZSxaFQ642dc.roa
Signing time: Sat 03 Jun 2023 04:10:12 +0000
ROA not before: Sat 03 Jun 2023 04:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7f:72:d5:2d:b5:94:a7:c5:d1:1e:8e:41:65:c3:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 04:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a12a8521dce7a086e4f3a0cd652c5a150eb8d9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:7e:c4:45:0d:19:3f:28:eb:55:df:cc:0b:
23:5d:b2:48:8b:fc:1e:c7:24:f0:d1:cd:dc:6f:c7:
6b:73:e6:3e:56:36:1b:9d:61:b1:f2:1d:7f:6a:63:
ba:86:57:48:a2:53:3a:57:30:64:9c:e1:c2:cf:91:
f8:de:94:f2:23:22:08:9e:2b:3c:69:d4:62:0d:16:
0b:f9:96:54:d1:ce:f5:71:1c:0f:72:f2:85:20:91:
11:73:8b:63:c9:6d:c8:7c:8c:e0:62:ca:d0:45:20:
9c:d5:79:0f:b2:ea:d2:3c:09:f7:b3:28:9f:eb:e9:
8f:ad:3a:9a:42:8b:48:c4:aa:51:20:39:cd:b8:74:
2c:a7:a5:58:9e:e3:32:83:c3:39:d8:a5:7f:d5:1b:
9d:c0:7a:9b:b3:44:55:5e:9a:5d:be:2a:f4:3a:fb:
09:e5:44:87:f9:f7:09:2d:ff:b1:2b:58:80:85:db:
07:af:5d:f6:4f:a1:7b:db:28:79:9f:92:8c:ad:88:
e2:d4:ac:cc:86:df:b9:1d:d6:08:91:5a:40:68:bd:
b9:b4:13:08:ba:9d:71:1c:72:af:0c:70:37:f5:81:
9a:54:31:8d:f7:92:ba:cd:01:71:1d:43:ca:ca:a1:
4b:f3:0b:5c:26:f0:90:d9:f4:94:83:1d:ab:f2:de:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:85:21:DC:E7:A0:86:E4:F3:A0:CD:65:2C:5A:15:0E:B8:D9:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oSqFIdznoIbk86DNZSxaFQ642dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:cf:c3:6a:fc:1f:ac:dc:6e:cb:e4:10:3c:a7:6e:2a:a2:68:
68:f4:3e:12:56:a3:40:2f:8e:8c:2c:ac:0a:4b:80:cd:95:0d:
9c:e8:2d:ff:31:96:19:cb:45:f7:d1:57:d5:7e:b9:3c:2b:08:
22:66:f3:5a:5e:f7:5e:c5:e7:cc:d6:ec:d5:9c:56:ab:4c:9f:
4c:e7:43:1e:71:be:6a:81:86:7e:6f:2c:e0:d7:4d:80:de:8f:
e9:12:1f:6b:b2:54:e2:00:dd:e2:2d:f4:5f:c0:01:74:15:c1:
87:39:bc:d4:a2:28:11:00:94:30:f9:db:70:f8:1d:78:33:86:
ce:d8:ef:c0:01:ad:ec:76:8f:c9:a0:fe:0b:86:a1:73:ee:26:
7a:ec:47:96:f8:ce:b1:37:36:3b:c0:9f:32:fc:54:6c:95:8f:
99:2c:d3:c5:dd:93:ac:66:95:7a:ea:f1:ad:bb:d5:c1:df:88:
1c:a9:1f:58:c5:e4:3c:38:76:55:36:96:c0:86:b9:0d:e5:e2:
5e:df:f7:8b:cc:d9:98:fb:3b:a8:92:d8:f6:e9:e0:5a:8d:a8:
be:be:07:78:c5:b8:c3:8f:cb:c1:33:4a:73:89:90:1f:f1:ac:
b1:ba:54:67:ba:f3:e2:56:7d:31:38:58:90:e2:d8:5b:4d:2f:
03:70:77:69
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYh/ctUttZSnxdEejkFlw6NAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjAzMDQxMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTJhODUyMWRjZTdhMDg2ZTRmM2EwY2Q2NTJjNWExNTBlYjhkOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwut+xEUNGT8o61XfzAsjXbJIi/we
xyTw0c3cb8drc+Y+VjYbnWGx8h1/amO6hldIolM6VzBknOHCz5H43pTyIyIInis8
adRiDRYL+ZZU0c71cRwPcvKFIJERc4tjyW3IfIzgYsrQRSCc1XkPsurSPAn3syif
6+mPrTqaQotIxKpRIDnNuHQsp6VYnuMyg8M52KV/1RudwHqbs0RVXppdvir0OvsJ
5USH+fcJLf+xK1iAhdsHr132T6F72yh5n5KMrYji1KzMht+5HdYIkVpAaL25tBMI
up1xHHKvDHA39YGaVDGN95K6zQFxHUPKyqFL8wtcJvCQ2fSUgx2r8t6MMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKEqhSHc56CG5POgzWUsWhUOuNnXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvb1NxRklkem5vSWJrODZETlpTeGFGUTY0MmRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACzPw2r8H6zcbsvkEDyn
biqiaGj0PhJWo0AvjowsrApLgM2VDZzoLf8xlhnLRffRV9V+uTwrCCJm81pe917F
58zW7NWcVqtMn0znQx5xvmqBhn5vLODXTYDej+kSH2uyVOIA3eIt9F/AAXQVwYc5
vNSiKBEAlDD523D4HXgzhs7Y78ABrex2j8mg/guGoXPuJnrsR5b4zrE3NjvAnzL8
VGyVj5ks08Xdk6xmlXrq8a271cHfiBypH1jF5Dw4dlU2lsCGuQ3l4l7f94vM2Zj7
O6iS2Pbp4FqNqL6+B3jFuMOPy8EzSnOJkB/xrLG6VGe68+JWfTE4WJDi2FtNLwNw
d2k=
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:15:02 2025 by rpki-client