Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ooBhxc8QMHdDBJfgBzj4Ykco7Uw.roa
File: ooBhxc8QMHdDBJfgBzj4Ykco7Uw.roa (raw, json)
Hash identifier: lZHrMVaCJS/sZe2NRS65iM/4zw3FdoljppZxspctCYo=
Subject key identifier: A2:80:61:C5:CF:10:30:77:43:04:97:E0:07:38:F8:62:47:28:ED:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018510543EFCDB8FCCF88EE7CF813F3BB9A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ooBhxc8QMHdDBJfgBzj4Ykco7Uw.roa
Signing time: Wed 14 Dec 2022 11:10:34 +0000
ROA not before: Wed 14 Dec 2022 11:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:54:3e:fc:db:8f:cc:f8:8e:e7:cf:81:3f:3b:b9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 11:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a28061c5cf103077430497e00738f8624728ed4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:68:22:cf:bf:29:33:7f:3e:f4:11:95:db:
8d:e4:ca:19:17:14:61:02:e5:89:f3:b9:6d:ab:17:
dd:19:5c:6f:12:f3:ff:2e:ed:3a:ca:9b:cc:62:71:
1c:e7:0c:cd:79:79:57:f7:11:3b:7c:fd:b6:01:e7:
2b:33:14:eb:81:20:9a:9b:3e:a6:80:83:b0:39:7c:
d0:9a:9b:eb:39:51:0f:b3:0d:f2:42:5f:64:39:da:
ba:c5:d9:35:98:39:42:91:9d:bc:04:b8:8e:eb:e6:
be:4f:78:a2:05:07:83:91:84:8a:6f:d0:32:ac:b7:
b4:8d:f6:f5:90:97:6b:fb:a5:73:7d:cf:22:16:48:
c2:6f:16:a4:7a:4e:b5:ab:59:2b:c7:76:30:c1:d8:
4a:c5:7f:c1:2e:00:90:52:bf:cf:ff:5c:f3:50:b5:
b6:29:87:47:73:4f:1d:46:76:db:7e:f7:da:1a:ac:
71:33:e5:cc:7c:ba:61:c9:8e:2e:e8:cb:78:24:0f:
8f:83:9b:35:e4:92:62:5e:d9:84:5e:15:92:c6:c3:
ca:43:62:d2:da:61:ce:fa:cc:4f:56:38:9f:eb:d9:
b9:17:61:4c:f9:a1:11:69:be:e3:a0:0c:aa:9c:5b:
64:dd:51:43:25:ad:55:bf:02:c7:4f:8d:74:09:e6:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:61:C5:CF:10:30:77:43:04:97:E0:07:38:F8:62:47:28:ED:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ooBhxc8QMHdDBJfgBzj4Ykco7Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:c6:61:5e:6b:aa:93:ff:c1:fd:1c:c2:85:d9:2c:e1:0d:97:
cf:3e:68:49:15:32:db:84:8b:97:35:6e:81:09:8d:61:bd:9b:
3c:e9:e7:2b:75:92:24:ff:27:be:15:71:4f:92:83:55:a1:54:
ed:df:72:0e:d1:ff:01:62:84:a4:b9:6a:be:4c:3a:8c:84:62:
f4:68:d5:72:09:9a:06:a8:9f:20:5b:f6:09:cf:1b:e5:fd:ba:
34:d8:c7:5f:a4:1a:9e:d0:aa:0d:9e:bb:86:3f:3d:07:b6:a9:
b5:3b:fd:ca:ab:44:98:7b:51:53:79:89:10:83:2c:70:2d:e7:
7d:e3:2b:e7:c9:8c:54:98:05:f7:78:74:47:c8:a6:3f:f3:e4:
05:7c:76:fb:7f:4a:41:8f:ff:a7:a9:71:9a:1c:4c:16:f4:10:
43:9c:21:27:a0:19:63:a7:02:22:2c:12:bc:17:1c:b6:d2:42:
92:01:dc:58:21:b8:3b:1e:b5:58:e4:39:67:34:af:ec:67:4a:
7c:7e:6d:a2:a2:4e:64:2c:77:25:28:61:de:d9:0a:f5:1b:a5:
14:24:ce:65:50:0e:de:65:9a:82:b4:a2:bc:0f:c3:12:63:f1:
89:86:35:9f:73:4d:79:5e:81:08:2f:05:2d:ec:a5:ea:ae:91:
7d:f9:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:33 2025 by rpki-client