Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ol89O-4kb64i5UB1s5iG4InbD0I.roa
File: ol89O-4kb64i5UB1s5iG4InbD0I.roa (raw, json)
Hash identifier: qs27OsxjNeQ7xMLTFK34klWaYN61R8VisvmofJSrXsg=
Subject key identifier: A2:5F:3D:3B:EE:24:6F:AE:22:E5:40:75:B3:98:86:E0:89:DB:0F:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882FDA955F4EDA1FFE9A3B2C920A383B06
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ol89O-4kb64i5UB1s5iG4InbD0I.roa
Signing time: Thu 18 May 2023 17:13:54 +0000
ROA not before: Thu 18 May 2023 17:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:da:95:5f:4e:da:1f:fe:9a:3b:2c:92:0a:38:3b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 17:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a25f3d3bee246fae22e54075b39886e089db0f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:57:1d:7a:5a:db:c1:0f:92:cc:c2:9d:75:
12:32:ae:f6:02:fc:da:8e:e1:8b:c4:6b:a6:44:52:
10:08:79:2b:06:34:1b:1e:dc:0a:18:bd:2c:2c:9d:
15:eb:3c:f2:e5:b1:84:a6:72:ab:25:6e:7d:ad:c5:
a7:8d:3e:68:3f:d1:75:dd:e9:11:aa:29:66:ca:1b:
a8:c8:e1:2b:7f:e9:e9:20:b5:98:90:57:26:49:c6:
93:8a:15:54:a7:45:d1:df:9d:aa:12:88:55:02:19:
9c:91:c5:93:e2:91:1f:da:16:2e:7c:62:96:01:80:
94:d4:46:98:c7:be:ff:fb:c8:ce:10:68:b7:f5:d4:
e9:31:43:16:20:8f:ea:b2:25:c4:38:37:3b:55:1e:
12:f2:4d:1c:61:91:4f:46:f2:50:e1:91:93:7a:27:
8a:b8:f3:68:cb:fc:cd:93:cd:22:29:a5:df:17:58:
4d:6b:04:bf:4d:63:f9:94:c4:84:26:92:61:52:9c:
8a:6c:68:e6:8e:75:d5:70:1a:84:96:71:bd:7b:e4:
5b:81:83:9e:4e:12:ee:3e:0c:44:dc:84:df:de:77:
50:30:6c:2c:30:6d:59:95:3a:7f:ff:81:61:75:dd:
c0:b3:b8:f2:d9:08:e1:71:72:3e:b6:4b:a6:d5:24:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:3D:3B:EE:24:6F:AE:22:E5:40:75:B3:98:86:E0:89:DB:0F:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ol89O-4kb64i5UB1s5iG4InbD0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:b8:58:03:a3:70:a0:a5:5f:85:0c:bb:7e:08:5d:c2:24:48:
c4:18:74:61:b2:d6:2d:7e:da:f8:f0:88:d7:70:cc:e4:24:b9:
9e:12:de:ca:b3:a9:98:64:31:09:d3:95:4e:b4:a5:a7:9d:d2:
24:50:c3:45:8c:b4:eb:61:df:ac:0d:1c:7e:f8:96:ba:96:3f:
eb:c0:8f:b9:d6:df:61:aa:3e:d8:f4:53:33:2f:47:8e:7b:68:
45:77:77:04:55:96:d5:b0:18:c6:6e:cf:a5:34:c7:d2:0a:6b:
ed:32:73:98:6a:b6:45:95:0c:45:4d:82:45:a4:35:8c:65:94:
8a:40:df:97:cf:f8:ff:05:62:56:a4:a5:ee:89:fc:25:3d:c1:
55:d8:ec:c2:4b:15:31:8b:e3:1e:e4:67:df:a3:57:be:2f:03:
56:0c:c6:5e:89:20:68:a3:89:6b:77:84:22:ce:de:ec:70:f6:
8a:be:1c:30:45:f4:87:d5:82:9c:48:b8:89:77:86:7a:53:1c:
6f:4e:be:1f:73:09:2c:8d:4c:c0:0b:30:0a:61:1d:f8:cf:9c:
9f:ea:8a:7d:c7:b0:3c:25:8e:1e:2f:91:a1:2d:cd:e4:89:9c:
3c:0d:43:d6:53:27:0d:4c:cb:8e:78:4e:5e:dc:da:30:f9:6b:
b9:53:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:34:30 2025 by rpki-client