Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2UvgrEDsB9ZTFJ-bwguh-nXSBx4.roa
File: 2UvgrEDsB9ZTFJ-bwguh-nXSBx4.roa (raw, json)
Hash identifier: 8ivhwRgXWvU5sS2Qy0A4O7lfBsnjbw0CrYbJFKuj03M=
Subject key identifier: D9:4B:E0:AC:40:EC:07:D6:53:14:9F:9B:C2:0B:A1:FA:75:D2:07:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185944A67332CEC49EAFE082FE7C31EAA39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2UvgrEDsB9ZTFJ-bwguh-nXSBx4.roa
Signing time: Mon 09 Jan 2023 02:09:42 +0000
ROA not before: Mon 09 Jan 2023 02:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:94:4a:67:33:2c:ec:49:ea:fe:08:2f:e7:c3:1e:aa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 9 02:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d94be0ac40ec07d653149f9bc20ba1fa75d2071e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:b4:40:c2:24:a9:0d:63:0c:a0:72:09:81:
8a:f0:90:16:73:38:2b:03:88:f8:59:99:4c:b5:88:
f8:11:d2:d7:4a:45:61:cb:53:0f:b3:58:17:13:ee:
4a:f0:5b:5c:00:55:af:56:9a:ec:4f:99:45:81:4b:
3d:92:c9:dd:5f:24:ee:6b:4b:f3:4a:49:ca:d0:5d:
35:d3:41:1a:9e:3b:75:86:a3:e4:db:a6:4b:2b:ae:
6c:7b:2d:04:1c:44:bd:5a:9b:23:ed:b5:56:6c:76:
b2:a0:ae:e7:07:2c:83:3a:c6:a6:1e:f0:3a:22:4d:
1b:ce:19:ed:db:c1:21:7c:53:7d:4f:ec:9d:0e:43:
dc:dc:f4:89:d1:39:e0:2c:12:10:82:d5:65:5a:69:
eb:36:e6:0e:43:f9:f6:f3:f0:05:e6:3d:ce:bd:ba:
c4:2a:4a:61:1c:7b:22:76:67:9f:37:1d:ba:bb:cf:
c8:6c:be:18:92:cd:4d:e2:27:10:13:b3:55:0c:01:
ed:7d:a2:c1:68:14:84:2a:db:30:1e:e8:88:91:c0:
82:bf:e5:00:5e:7f:7d:8d:60:06:2a:08:f9:b3:3f:
4a:f0:f3:90:ff:d6:f6:93:ce:b2:72:a5:6c:5e:f8:
a2:83:ed:ed:c4:e3:4b:3e:ba:5a:c0:96:5e:1b:9e:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:E0:AC:40:EC:07:D6:53:14:9F:9B:C2:0B:A1:FA:75:D2:07:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2UvgrEDsB9ZTFJ-bwguh-nXSBx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:88:c4:62:d1:59:89:57:dd:e0:ef:59:a9:e9:1f:7a:f0:1d:
ac:22:8b:4b:04:20:92:e5:6c:02:1a:43:6d:36:81:8c:22:a6:
b2:11:c9:d4:4b:4d:7f:e9:22:22:10:ba:2a:01:ec:34:60:19:
7a:fb:91:40:50:62:37:b4:cd:5e:00:3b:e7:b6:2b:1d:88:b4:
d1:7b:2d:a5:10:0a:04:b2:91:d8:66:f0:07:0d:2e:70:d2:ab:
17:9d:87:3d:8e:15:19:94:dd:ff:bb:49:0e:9b:bc:20:4d:de:
f5:79:e7:50:04:be:83:03:da:f2:af:72:81:d8:b9:a0:ee:e0:
7a:e2:d9:06:57:ba:74:21:84:e3:26:26:a1:5d:5d:a4:a5:32:
c0:5a:cd:ed:e4:a2:22:01:27:18:38:6e:d0:99:32:40:75:09:
eb:ac:5a:38:19:c5:e5:fb:8f:77:86:c7:7c:95:5a:a8:db:30:
30:51:40:c2:e0:4c:6d:4b:33:f6:23:f0:bb:5d:51:97:be:11:
57:93:f0:ce:f3:24:c8:e2:75:8a:97:d1:99:15:66:78:95:aa:
22:6b:b9:74:2c:5c:8b:8b:70:61:ea:be:46:02:1d:dd:7b:04:
06:c9:45:e0:81:5e:b1:cf:32:f3:11:30:4b:c1:04:ec:bd:e9:
6d:1c:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:39:20 2025 by rpki-client