Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/53ulcBLExIzPtpJZeFS_EcevE3I.roa
File: 53ulcBLExIzPtpJZeFS_EcevE3I.roa (raw, json)
Hash identifier: 0PBFO9G3TVjyHYrn4SDvOZJgsGwVNoRHoSOFFsakS3U=
Subject key identifier: E7:7B:A5:70:12:C4:C4:8C:CF:B6:92:59:78:54:BF:11:C7:AF:13:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881428F94DDEFADDA234D173A5BB6A537B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/53ulcBLExIzPtpJZeFS_EcevE3I.roa
Signing time: Sat 13 May 2023 08:10:09 +0000
ROA not before: Sat 13 May 2023 08:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:28:f9:4d:de:fa:dd:a2:34:d1:73:a5:bb:6a:53:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 08:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e77ba57012c4c48ccfb692597854bf11c7af1372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:61:a5:77:d0:2b:06:76:c7:c0:f7:06:fe:
d0:6f:02:55:52:0a:eb:1a:07:d8:e3:22:1e:9e:99:
78:3c:3f:aa:24:6c:22:20:fd:10:e1:9d:83:e5:1e:
89:3d:29:88:bb:4c:72:0b:75:c8:39:fb:02:82:82:
fd:0b:f1:8a:06:17:e5:94:70:54:70:ee:1b:13:4b:
71:e4:3a:ca:c3:1d:3d:a9:69:24:f1:25:73:b0:54:
af:02:e3:83:57:4c:7b:19:bf:6b:e9:c3:a1:3d:73:
74:d8:cc:45:df:6c:95:2e:eb:0a:7e:2a:77:7b:c2:
99:59:80:e4:d2:cf:9f:72:a8:33:c9:2a:b6:f9:6e:
39:72:44:89:05:2f:5f:41:80:82:16:b0:2f:bc:bb:
e0:df:03:0e:db:02:5f:dd:2f:92:35:73:e6:da:35:
d0:a9:b6:26:30:a8:a3:69:90:78:06:95:d5:61:79:
a4:e4:d5:af:82:e6:b4:da:c6:51:29:d9:e3:42:71:
79:94:33:a0:55:4c:25:96:02:b2:ba:f9:12:85:33:
3a:67:c0:c4:2a:9e:b5:09:75:11:94:ec:c9:56:59:
70:e6:8f:c9:5c:a1:ea:e7:02:13:94:64:1d:a7:0e:
3b:58:2d:ed:d7:1e:f8:ee:98:ca:60:f5:1c:4f:cb:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7B:A5:70:12:C4:C4:8C:CF:B6:92:59:78:54:BF:11:C7:AF:13:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/53ulcBLExIzPtpJZeFS_EcevE3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:8e:20:3d:32:0e:b7:d7:79:be:c4:a1:d8:2e:bb:bf:28:e8:
97:d5:66:b0:ba:46:62:92:52:f2:06:1a:37:45:d8:17:ec:04:
63:cb:c7:bf:03:43:ea:dd:9d:aa:79:1b:92:54:63:fa:03:82:
4d:03:20:c0:fc:51:81:ba:53:ba:32:dd:6f:87:80:f8:51:20:
79:fe:c9:9b:43:ae:51:b3:87:63:2d:3f:ca:35:f3:d0:9e:1b:
d9:19:20:08:32:2e:65:fe:01:ff:9c:3a:06:0f:9c:85:32:78:
ed:59:bc:44:72:9c:99:b5:19:5f:a1:37:de:ac:e8:4f:64:6b:
be:69:62:25:80:ba:48:7a:43:4c:9d:46:48:34:c8:21:25:7d:
06:57:ff:90:dc:1b:b5:97:ea:82:27:e6:eb:f0:0f:a7:d7:80:
c9:01:8d:ad:48:7d:cd:14:cc:6b:41:03:92:e0:a6:53:ae:0a:
f8:4d:b2:fe:9b:52:5b:fc:48:15:74:1b:f7:87:d4:a4:81:ca:
9c:9c:f8:a3:f9:ab:54:4a:50:52:34:50:cc:0a:66:f6:c6:78:
48:fc:f8:c9:6f:4f:e2:51:05:49:96:e9:e6:0d:e8:a4:fe:36:
33:1b:69:d9:5c:3d:56:b8:fa:eb:35:d9:2e:3e:8b:70:e8:28:
33:c5:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:36 2025 by rpki-client