Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U5qnaMFUwUm8x8D36ahv75EvZpA.roa
File: U5qnaMFUwUm8x8D36ahv75EvZpA.roa (raw, json)
Hash identifier: NNv7o3sVESlK5v1ayLvmuywAl/dlb37tvLEfOYSHvmI=
Subject key identifier: 53:9A:A7:68:C1:54:C1:49:BC:C7:C0:F7:E9:A8:6F:EF:91:2F:66:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018255AE4FDE7809D9A77ADF179F47EC628A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U5qnaMFUwUm8x8D36ahv75EvZpA.roa
Signing time: Sun 31 Jul 2022 19:14:23 +0000
ROA not before: Sun 31 Jul 2022 19:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:55:ae:4f:de:78:09:d9:a7:7a:df:17:9f:47:ec:62:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 19:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=539aa768c154c149bcc7c0f7e9a86fef912f6690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:28:f9:ce:16:09:27:3e:ec:f9:54:48:7d:
5f:db:85:c8:5a:c5:e9:57:d9:20:52:01:87:8c:f2:
b9:c3:29:9e:e6:5b:83:8f:6f:d1:89:eb:42:f8:4b:
83:b4:d0:99:8d:5f:fd:fd:ca:cf:16:e5:9f:86:2d:
82:bd:b9:ff:48:4b:ea:92:93:ab:3f:6f:d0:e7:84:
07:d1:a5:93:73:d0:79:25:b2:7c:68:36:33:7d:3d:
de:2d:5b:1c:fb:05:7b:b6:5f:2f:fe:05:f5:48:ee:
f4:8f:7a:e8:cc:83:60:d8:bd:e4:65:93:54:d9:e9:
05:32:48:de:ca:66:2f:93:a1:1f:e5:1e:6b:46:77:
35:a6:94:d7:8a:ac:7a:68:9a:61:5c:d4:f1:4b:c4:
38:85:bd:02:16:fa:51:7a:a0:4e:09:c1:54:66:38:
b1:aa:78:39:f8:76:9a:41:bd:46:37:dc:0b:3e:e4:
ca:06:57:df:02:3b:80:3f:02:7e:df:a6:1b:5b:88:
fd:79:f8:46:3c:0e:bd:70:c9:f3:49:10:bb:56:d1:
b3:fa:ee:a2:a4:81:1a:39:90:0b:44:1e:b3:8f:0b:
b1:f6:11:50:95:f9:4c:6a:c6:72:4c:10:41:36:6e:
6c:17:ac:18:c6:e9:98:a8:06:f6:a9:12:31:ef:67:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:A7:68:C1:54:C1:49:BC:C7:C0:F7:E9:A8:6F:EF:91:2F:66:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U5qnaMFUwUm8x8D36ahv75EvZpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:8d:23:fd:cf:48:f6:6e:b4:93:d5:ec:a7:d8:1b:95:ae:5c:
81:d9:02:a2:7f:f6:f3:4f:52:1e:1e:16:0d:e4:84:51:6b:a7:
e1:bb:ad:77:77:16:46:75:30:50:7a:42:c6:ae:39:32:89:c3:
80:25:76:d4:32:01:6c:1d:81:32:7e:a0:20:ef:6a:78:49:89:
38:d5:43:6a:99:f1:cc:c2:82:6d:7e:45:4c:de:61:07:01:e8:
4d:c9:fc:b1:0e:65:3a:46:4a:39:c5:89:85:ea:74:bc:9b:5e:
66:9c:9b:6b:43:11:99:00:bc:26:d0:e4:5f:ff:d8:80:23:b6:
ca:0f:34:1e:a9:a1:a7:32:45:60:67:aa:25:5c:51:82:3f:7c:
08:f2:1e:78:af:c1:4a:52:11:bb:92:f2:ef:35:ff:31:ff:7c:
78:da:94:0e:cb:6e:4e:90:14:94:a1:45:a8:d1:c7:e5:e0:e3:
c3:ef:ea:e8:ef:76:91:b0:30:a2:78:5a:c6:51:4c:1e:47:b2:
dc:e9:b0:4d:46:c8:1b:5c:ec:a8:97:a9:fb:8d:70:d2:2e:54:
4c:cf:57:66:bc:c5:c1:52:ad:b2:c7:b4:9f:5a:dd:21:5b:ba:
95:15:b7:9a:1d:95:8e:ac:43:5d:29:20:bd:e6:4a:7c:33:dc:
2a:a7:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:05 2025 by rpki-client