Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oxePsNHUwzM7nsOmhoBBvY8SXVU.roa
File: oxePsNHUwzM7nsOmhoBBvY8SXVU.roa (raw, json)
Hash identifier: tmEDhmvdPGx/y2BTuNHRsHaUGO3fozg/vPIVZW8pMZs=
Subject key identifier: A3:17:8F:B0:D1:D4:C3:33:3B:9E:C3:A6:86:80:41:BD:8F:12:5D:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1E75080B7E6A10F58AF5FBA2239050BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oxePsNHUwzM7nsOmhoBBvY8SXVU.roa
Signing time: Tue 22 Aug 2023 18:15:00 +0000
ROA not before: Tue 22 Aug 2023 18:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:75:08:0b:7e:6a:10:f5:8a:f5:fb:a2:23:90:50:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 18:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3178fb0d1d4c3333b9ec3a6868041bd8f125d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:23:ea:19:e5:bc:19:ae:39:56:02:fa:fa:
61:04:62:03:7e:a6:5f:2e:2a:84:11:8c:ec:bc:a8:
c4:a2:dc:80:82:e2:59:62:56:e9:71:43:3e:1d:b1:
dd:cf:28:b7:da:66:64:3f:8d:f2:4e:a3:e6:ee:b3:
86:a9:a0:c3:58:a9:21:1b:10:a5:aa:9d:6d:bc:8e:
b6:c9:39:f8:a4:e0:90:e3:6e:61:f4:4c:ea:cf:33:
90:31:01:5a:e6:1b:e8:14:01:71:3e:64:e4:7d:3e:
64:04:9d:2b:97:20:46:67:f9:35:ac:b0:40:a7:55:
35:b1:e3:45:24:42:eb:59:ca:1f:ea:e2:f3:54:fc:
e4:11:08:f8:2d:f3:c8:8d:9d:15:28:98:36:1e:14:
88:c6:6f:82:64:8f:41:2e:2a:9d:b9:fd:86:fa:a6:
e7:fc:37:24:0e:d8:83:45:f8:ef:dd:d3:a1:7f:ce:
38:a5:a6:b8:5e:e5:e2:b3:c8:4c:07:f0:8c:b8:a9:
bb:1b:70:71:9c:54:86:ce:63:8a:e0:4a:5b:0e:13:
02:ed:af:59:93:a9:e6:44:a5:d9:13:52:87:04:c8:
98:77:cc:1f:fb:b8:f1:b3:7c:79:a0:c7:1b:1e:d8:
39:bf:fe:42:1c:76:83:af:62:de:a8:fb:d5:2a:78:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:17:8F:B0:D1:D4:C3:33:3B:9E:C3:A6:86:80:41:BD:8F:12:5D:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oxePsNHUwzM7nsOmhoBBvY8SXVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:19:96:c0:69:e5:47:b6:d3:b5:8a:08:37:a0:96:b9:b1:69:
c2:01:b3:8e:19:08:71:91:47:48:2f:d4:03:32:23:9a:6e:b4:
88:53:ca:4b:65:82:b8:a6:e5:a7:81:5b:b1:61:d2:9d:14:b1:
a0:74:58:61:04:dd:6f:35:4c:5e:6a:79:8d:61:88:60:ab:bc:
fc:76:d3:d7:b4:13:7b:9a:3b:de:07:ba:8b:5a:cd:1f:3f:75:
b5:e9:4f:b3:ed:c7:72:e6:66:9d:d2:60:01:91:84:45:61:50:
ec:4b:92:9d:c9:20:ab:45:74:e9:69:d8:00:d1:76:da:89:c0:
ee:18:71:43:83:de:f3:4f:fe:6a:45:0c:08:3d:36:e4:c6:1a:
df:9a:19:f1:2c:d1:d7:ea:76:6c:05:65:db:72:8c:c2:ee:89:
db:be:bc:f4:72:02:59:1c:cd:ef:96:52:a9:81:6c:d4:75:73:
f6:de:c8:01:35:cc:39:2d:af:23:46:0e:92:65:23:3c:79:50:
4f:04:19:ed:c1:59:90:e6:d4:6b:7b:5b:ae:b9:c7:a6:c2:3d:
8b:f7:a9:30:a2:98:f8:e7:0e:b8:20:07:63:5f:94:2b:22:a2:
6d:d0:7e:ef:8a:af:65:8e:31:2b:5c:de:65:f4:cd:0f:48:2e:
ef:4a:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:28:54 2025 by rpki-client