Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B1q7HIdasWVwuaZAXqYJ9x-uges.roa
File: B1q7HIdasWVwuaZAXqYJ9x-uges.roa (raw, json)
Hash identifier: N1AKjVDpGAyYuf+oty1mX4b67aB9SdOhksmNxIDo7Ho=
Subject key identifier: 07:5A:BB:1C:87:5A:B1:65:70:B9:A6:40:5E:A6:09:F7:1F:AE:81:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189909F9DEF8C5CFFC728D89022C2284EAF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B1q7HIdasWVwuaZAXqYJ9x-uges.roa
Signing time: Wed 26 Jul 2023 05:15:26 +0000
ROA not before: Wed 26 Jul 2023 05:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:90:9f:9d:ef:8c:5c:ff:c7:28:d8:90:22:c2:28:4e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 05:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=075abb1c875ab16570b9a6405ea609f71fae81eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:5e:13:81:44:ee:6f:9a:ca:c5:21:89:0f:
a8:b3:1a:60:70:e3:8d:fc:4c:46:3e:26:0e:8d:5a:
86:0b:61:86:d6:cb:3e:21:53:2b:f8:c2:da:b2:c3:
89:c4:1f:a6:45:d2:ad:d7:ce:11:be:88:3c:9b:49:
c9:bf:6b:6c:e9:5e:b8:b3:f1:52:b4:8d:1a:c3:ae:
63:a2:b6:1a:02:6b:8c:24:64:08:f4:a3:4c:f5:90:
93:40:e0:6c:58:a6:94:83:e2:08:97:58:95:fa:c3:
32:2a:b9:aa:40:40:f7:a0:cb:8e:4c:db:b4:79:f0:
1b:0d:a5:65:79:82:f3:11:dc:f0:28:9b:9c:d9:97:
10:69:d0:07:54:32:71:93:0c:c9:c0:fa:4f:37:94:
c6:b8:26:9e:be:d7:43:57:da:80:5b:3c:e4:bf:31:
d0:94:f1:75:0c:e1:94:3d:18:27:ec:15:59:d2:38:
21:dd:e8:4a:1d:91:04:59:78:dd:31:7e:44:d1:0b:
2b:87:39:7d:6d:66:52:db:19:d4:bc:5f:9f:03:ed:
c7:64:3f:1f:66:40:1c:0c:89:d8:c9:9a:f6:ca:bc:
63:5a:73:3f:07:28:18:83:6f:5c:53:25:a2:6d:6f:
4c:a3:62:04:5d:5c:cb:24:5f:b5:31:b2:16:05:49:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5A:BB:1C:87:5A:B1:65:70:B9:A6:40:5E:A6:09:F7:1F:AE:81:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B1q7HIdasWVwuaZAXqYJ9x-uges.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:19:26:fb:57:3c:bb:03:0b:2d:d6:08:1e:c3:ba:7c:71:45:
be:85:d6:e3:7e:ff:99:bb:2d:3f:eb:2f:e2:5b:6b:02:55:45:
f3:ff:53:f1:a3:81:02:59:f5:6f:f7:e9:74:9f:51:0b:f6:b1:
53:3d:8c:3c:38:d2:7a:24:d9:77:2f:97:d0:b6:b0:6d:8f:8b:
c3:03:56:df:b8:cc:5f:3f:31:cc:00:59:ac:b6:5a:1b:c8:d8:
d3:55:75:9f:78:ad:0e:74:60:d1:96:ca:38:e5:46:3b:a0:16:
8a:b2:12:f7:82:4d:c5:e2:60:de:58:a6:21:eb:e8:53:f4:37:
83:19:e5:78:18:94:1f:89:b1:b1:23:ed:a9:41:80:ed:dd:ff:
ad:b4:2d:80:f9:e9:41:dc:d7:4e:49:bb:b2:f3:d6:f4:45:a5:
e0:f9:15:7f:dd:6d:9f:4f:23:dd:91:10:84:00:bc:77:11:26:
6c:65:33:57:db:7c:ab:19:8d:79:77:17:97:30:7b:4d:49:c6:
fc:a3:59:c6:5f:eb:a1:5a:39:aa:2e:ea:5a:b0:89:0e:18:75:
9c:c1:fc:89:10:41:6e:ab:a8:90:57:e6:e4:9e:14:76:5a:e1:
e4:0c:53:23:ef:7e:ee:64:81:03:95:e4:82:d6:07:2a:5b:0f:
32:1d:e6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:15:11 2025 by rpki-client