Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ohT8eov0kxJgdoF2cG5_Q1Bzs1U.roa
File: ohT8eov0kxJgdoF2cG5_Q1Bzs1U.roa (raw, json)
Hash identifier: VrUwaI1wrHjuH9Ndv7Mwg8xawo9bZ46IyCJcF48d+jg=
Subject key identifier: A2:14:FC:7A:8B:F4:93:12:60:76:81:76:70:6E:7F:43:50:73:B3:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 788E6E69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ohT8eov0kxJgdoF2cG5_Q1Bzs1U.roa
Signing time: Tue 05 Apr 2022 04:11:11 +0000
ROA not before: Tue 05 Apr 2022 04:11:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022600297 (0x788e6e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 04:11:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a214fc7a8bf4931260768176706e7f435073b355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:cb:9b:95:64:86:a4:36:c8:ea:c3:03:d7:
11:ef:50:55:ad:c3:5f:6a:ed:7b:5d:ef:16:20:11:
c5:f7:10:e2:4e:48:d1:5e:65:99:85:70:ac:f8:a9:
5e:d6:3b:53:ff:ab:83:53:02:b5:c3:9f:5d:43:00:
86:97:fe:e8:b3:9e:e7:e1:49:4e:a3:95:1f:a9:e9:
16:aa:a5:d4:da:d6:7f:33:60:5a:ed:18:d1:be:50:
b6:69:af:95:60:67:fe:da:dd:9f:6e:43:7a:28:f9:
67:86:20:4c:99:01:7f:96:21:af:35:7f:0d:8c:60:
d7:11:91:d2:0c:1a:43:eb:a7:16:6f:dc:c3:23:bf:
8d:57:32:01:15:d5:f9:22:99:8b:60:68:08:67:81:
e9:61:4d:60:05:30:df:54:c2:b6:4e:55:fe:d0:fb:
22:8a:ad:e5:88:b4:31:ca:bc:01:ff:d6:eb:69:e6:
44:04:e4:37:5d:4e:56:81:ee:20:ee:66:91:18:7a:
2b:48:fd:ef:8d:67:60:c3:cb:43:e3:89:60:e0:a0:
b1:50:22:96:a9:9f:da:91:b4:27:8d:56:2f:4c:16:
80:90:c3:6c:f9:40:78:76:61:51:5a:38:4e:a5:18:
88:ab:0a:d4:9b:3a:4f:01:b2:46:3f:6f:02:39:a2:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:14:FC:7A:8B:F4:93:12:60:76:81:76:70:6E:7F:43:50:73:B3:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ohT8eov0kxJgdoF2cG5_Q1Bzs1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:10:92:fa:6d:db:ae:23:75:be:4c:16:68:a6:a7:51:b4:a9:
08:3a:78:b4:0d:8e:79:9b:c3:a3:39:08:bc:03:2f:31:d1:de:
20:3a:87:aa:4f:49:eb:5b:9e:ab:9c:6c:db:f8:e8:b7:2b:0f:
bc:6f:04:76:be:c3:1e:5d:d0:a5:ff:c8:4b:59:de:ed:cd:c9:
25:5e:e9:78:d1:a6:4a:4b:07:a0:7b:91:5d:89:b4:a2:20:66:
bc:2a:19:d9:6b:4d:bb:b1:ec:67:6d:d8:e0:82:0b:bf:db:c0:
b0:c5:1c:71:14:b1:4a:63:7c:4c:6f:6a:a3:91:e6:0b:2e:90:
ee:d3:83:8c:a5:a1:7f:53:8a:8a:d7:04:30:cb:a3:d1:ae:c1:
53:e8:df:5c:b6:60:cd:10:48:12:2f:9e:e2:ae:ac:27:a4:11:
3b:5c:43:ae:52:00:34:94:a8:3e:97:4f:e5:e0:f1:89:60:d0:
1f:f4:fe:05:3b:fe:12:bf:64:10:0e:58:9f:ab:d2:bc:a9:a5:
4d:6d:41:77:e7:d5:eb:6e:1a:68:5c:77:2f:ad:ff:46:7d:51:
2a:b2:62:fc:80:dc:2b:dc:7a:62:31:0c:a4:85:a2:65:ea:d6:
96:fb:74:9a:e2:b4:e1:74:da:7b:c9:9c:80:86:2c:25:7b:9f:
4f:44:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:56:43 2025 by rpki-client