Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U6jIrAmHYWEjeQhmE-E-DmWWWz8.roa
File: U6jIrAmHYWEjeQhmE-E-DmWWWz8.roa (raw, json)
Hash identifier: M/5Ryi2wics77590Yy+YQx1iqTDQmakYfVPIdNmqQtc=
Subject key identifier: 53:A8:C8:AC:09:87:61:61:23:79:08:66:13:E1:3E:0E:65:96:5B:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897AF0C3D51673D67D5654B818303B98F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U6jIrAmHYWEjeQhmE-E-DmWWWz8.roa
Signing time: Sat 22 Jul 2023 00:12:26 +0000
ROA not before: Sat 22 Jul 2023 00:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7a:f0:c3:d5:16:73:d6:7d:56:54:b8:18:30:3b:98:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 00:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53a8c8ac098761612379086613e13e0e65965b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:c9:43:f6:a2:21:c8:6b:5f:59:c3:cb:d4:
e8:a3:99:32:ad:e0:c0:80:92:15:cf:f5:f1:d2:64:
e8:a8:9f:f6:0d:76:e9:c5:50:b4:3a:60:ac:17:0b:
5e:70:84:99:7c:56:44:9b:ba:27:23:01:2c:71:db:
93:79:0f:fe:a7:14:ff:df:60:01:4a:ed:6e:f1:f4:
71:91:fa:43:62:da:e4:47:a7:95:9d:8d:fb:88:ef:
c9:7c:9c:09:fb:7e:ac:1d:9c:05:03:8b:da:42:a2:
6f:8a:1c:a5:25:7f:2b:e1:17:a4:61:44:ed:be:93:
df:e4:a9:5d:dd:be:79:32:89:70:c3:01:1b:6e:c7:
2b:ec:72:87:ae:70:48:b2:ce:73:62:44:0c:79:da:
17:39:54:22:5d:ab:95:42:4f:ba:db:b8:5f:8d:d5:
5f:00:f3:fe:89:de:c7:5f:19:7d:5c:0d:6e:ea:91:
0b:6f:fe:b9:6d:0a:70:be:5e:11:ab:88:0f:c7:c1:
1c:ff:c3:46:8b:f6:78:8c:7a:f7:3c:34:7a:1b:b3:
b4:46:6c:47:d2:09:38:58:a3:15:f8:16:db:35:67:
26:47:a8:bf:17:f4:9e:d4:31:6b:d3:5d:16:b6:77:
46:89:94:65:03:ff:4d:ec:56:64:5d:30:47:e1:5c:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:C8:AC:09:87:61:61:23:79:08:66:13:E1:3E:0E:65:96:5B:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U6jIrAmHYWEjeQhmE-E-DmWWWz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:9d:3b:9b:98:c5:b6:91:60:bf:f4:3a:c5:9c:ce:3c:1f:63:
ec:65:3e:4f:b4:03:0f:2e:f4:86:c3:c1:6e:f1:42:3c:c6:17:
f4:a0:88:42:3b:6b:45:54:9a:8d:7b:b1:1d:9a:64:fd:e3:1b:
ac:a8:40:c5:1e:53:bc:62:5d:64:7f:45:ba:f5:b7:f5:d5:67:
c8:04:c0:c8:1d:a9:ab:ed:f3:0f:76:f7:5f:41:83:00:89:2a:
60:69:bf:94:3c:b5:a9:b3:7a:1d:ed:a7:49:ed:34:8a:69:51:
c1:4f:0c:bc:a6:43:cd:bb:74:3f:dd:d9:1f:46:cc:0e:19:0a:
57:7c:7e:26:9e:6f:24:35:df:16:9b:fd:48:3d:7b:78:7e:db:
12:81:57:4b:0e:81:74:bf:95:39:9f:f3:b1:62:34:3a:0c:d3:
95:a1:43:ea:6f:12:2b:b6:a7:e2:e3:2b:46:60:51:7d:2b:7f:
3a:df:22:93:34:ce:ac:15:e8:a3:2d:3f:ab:20:bb:f4:42:f3:
63:12:e9:78:d9:ac:dc:4f:5b:a0:80:e6:d4:39:60:b6:c6:6b:
ec:72:fd:73:83:1d:b6:a5:2a:d7:4d:5d:40:88:84:8a:61:99:
fc:e4:03:a5:23:79:80:88:49:01:1c:fa:d1:49:8d:42:2e:be:
cb:38:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:02:39 2025 by rpki-client