Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U-nen6DLLJwKcs2JXkNgxHyy1Ec.roa
File: U-nen6DLLJwKcs2JXkNgxHyy1Ec.roa (raw, json)
Hash identifier: H0YUUtNEs0gic55LyyTjAR9kV8RZYZQgAoSwx6USPTg=
Subject key identifier: 53:E9:DE:9F:A0:CB:2C:9C:0A:72:CD:89:5E:43:60:C4:7C:B2:D4:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A03A206B9754F2B6CB0CF9BF49558917B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U-nen6DLLJwKcs2JXkNgxHyy1Ec.roa
Signing time: Thu 17 Aug 2023 13:14:24 +0000
ROA not before: Thu 17 Aug 2023 13:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:a2:06:b9:75:4f:2b:6c:b0:cf:9b:f4:95:58:91:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 13:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53e9de9fa0cb2c9c0a72cd895e4360c47cb2d447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e9:37:19:c4:f9:a2:54:a5:c3:c0:0d:46:a1:
76:ef:f2:7a:6a:9b:4d:48:f4:4b:3b:b0:c8:41:83:
5d:03:4a:64:db:2d:52:64:e2:b5:71:5a:54:ba:65:
49:92:62:4a:28:75:6e:fe:8a:58:1d:ba:d3:67:28:
4e:01:37:ed:58:86:77:cc:3c:8d:c1:08:3b:78:fa:
60:60:b1:8d:00:e6:96:8c:c6:88:33:7d:57:17:fa:
04:f7:44:a2:2a:ca:ad:1c:ea:0a:90:88:d9:f7:35:
b1:48:91:db:20:60:65:26:d3:e0:a7:1a:96:49:f5:
fe:8a:0e:86:e4:52:10:3d:39:fc:ad:47:90:d1:2a:
a1:48:26:0a:a3:9f:0e:1b:18:67:1e:7b:d2:c9:61:
bc:4e:eb:3c:44:ad:8c:56:a8:ec:76:f9:b7:59:19:
88:25:c4:b6:b1:03:38:84:a8:89:81:3e:16:16:35:
2e:37:3c:2f:7c:86:94:a5:86:a7:29:e5:24:ab:68:
1a:48:d8:ec:7f:94:26:d4:e0:8d:1c:b9:38:8c:f1:
ae:1c:9b:a6:d1:19:48:3d:1d:f5:70:53:2a:c9:76:
5b:b7:07:eb:46:d4:ed:75:75:8f:3e:a2:67:9e:fa:
03:ad:db:5e:51:be:16:1a:16:30:7c:51:1f:6f:d2:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E9:DE:9F:A0:CB:2C:9C:0A:72:CD:89:5E:43:60:C4:7C:B2:D4:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U-nen6DLLJwKcs2JXkNgxHyy1Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:87:44:6f:7d:fa:82:ed:97:ff:de:28:e3:18:d0:9b:73:de:
80:ad:a3:06:30:5f:58:64:25:86:77:bc:33:78:f9:ad:ed:b9:
29:45:3a:a9:98:80:32:f7:6e:01:2a:93:e8:9e:19:c8:e3:fd:
bd:44:de:1a:35:e1:c5:97:6b:88:f7:f2:00:88:29:4c:35:ee:
be:2b:e1:e6:bc:93:cc:13:53:57:31:5a:d6:0d:1b:74:64:9e:
68:be:81:92:2f:07:87:3e:b1:1f:11:36:1f:ee:89:01:7c:e6:
a7:1f:47:89:71:ac:c2:19:f2:68:10:83:c0:f2:af:4e:bd:ae:
1a:d1:ec:41:e3:a0:91:8d:f9:00:fd:db:1d:4c:bc:13:67:46:
ed:6d:b8:35:6e:3a:7e:ee:34:bc:63:5a:b8:6b:e9:43:66:a4:
de:9a:83:89:56:05:90:fb:ff:02:2b:93:82:17:c6:c0:25:68:
11:59:ca:c8:e8:68:21:7c:ba:2a:d0:56:eb:cd:40:0b:05:c0:
f0:bd:19:62:f3:45:8f:bd:73:02:d0:1d:97:b1:02:64:72:27:
41:e0:db:76:6c:92:4b:31:71:8c:d0:fb:b2:4e:4e:ec:48:df:
ab:27:c3:87:1d:b2:c5:f1:f3:c8:14:f4:54:37:88:5c:1c:b9:
b8:58:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:19 2025 by rpki-client