Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U9Cv7tMCiTl1ECGW_uw0m4SYDJE.roa
File: U9Cv7tMCiTl1ECGW_uw0m4SYDJE.roa (raw, json)
Hash identifier: BRU22KqTG72wttgNJ9MsmonvJ03G5JivKEXjvySazIs=
Subject key identifier: 53:D0:AF:EE:D3:02:89:39:75:10:21:96:FE:EC:34:9B:84:98:0C:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829E6B81B22A3A7C24FE43765A5D9E9644
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U9Cv7tMCiTl1ECGW_uw0m4SYDJE.roa
Signing time: Sun 14 Aug 2022 22:13:41 +0000
ROA not before: Sun 14 Aug 2022 22:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9e:6b:81:b2:2a:3a:7c:24:fe:43:76:5a:5d:9e:96:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 22:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53d0afeed302893975102196feec349b84980c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:b9:98:74:a4:ef:05:ea:82:22:39:b5:42:
03:05:2a:b5:01:be:90:cc:87:ca:1d:1a:80:10:75:
ab:a7:3f:21:1e:a6:e9:46:17:8e:6f:b5:9a:23:bd:
18:00:e0:aa:1d:9b:ec:27:8f:36:11:e3:9a:90:af:
40:db:9c:db:50:89:9d:1e:fd:15:cd:0c:33:8b:b0:
89:3c:a6:fe:06:6e:6a:08:63:42:1b:fd:25:65:e0:
e1:6f:0d:73:f2:5b:88:2b:05:e8:d8:d9:79:9e:bf:
09:52:47:79:df:bb:48:42:6d:2a:62:64:00:31:a5:
82:04:c9:75:ee:4d:d6:f2:83:fb:e6:d1:83:64:d7:
c4:07:7e:7a:7c:43:7b:fd:88:ee:7f:33:93:32:ad:
4b:9f:3b:f3:4b:df:69:94:16:be:da:38:32:eb:7a:
91:6a:35:4d:33:58:5f:37:21:b1:99:45:e5:2a:84:
9e:2b:af:fa:88:09:00:6f:34:a6:eb:25:87:e6:54:
ef:f1:56:41:2d:1b:02:ea:5f:5b:35:99:bf:4b:54:
08:d8:0b:e5:7e:9c:e9:e7:6c:d5:67:14:6b:2d:3a:
71:9d:76:0a:5e:97:58:42:00:b1:1e:36:85:8a:68:
ac:de:c7:57:e8:f8:a3:87:7c:51:fb:9e:4a:bf:0b:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D0:AF:EE:D3:02:89:39:75:10:21:96:FE:EC:34:9B:84:98:0C:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U9Cv7tMCiTl1ECGW_uw0m4SYDJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:f5:b2:bd:7a:e3:57:ea:d6:1f:fd:b1:81:ba:44:9a:1f:99:
79:9a:9f:61:7d:2e:4c:a0:87:c5:57:71:43:65:ab:24:a4:1c:
47:d4:2b:6e:61:91:be:f0:00:7a:88:8a:67:d3:b3:53:31:df:
56:63:fe:28:d4:10:40:5a:1f:f3:49:4c:67:88:83:9e:08:de:
84:7a:91:c0:ec:19:30:ca:ef:5c:f1:09:8a:90:31:65:04:59:
ad:c6:20:4b:06:fe:42:5d:b5:4d:95:76:2d:22:70:9e:9b:4a:
2f:61:b7:31:2c:39:f6:ac:76:3d:14:4c:5b:4f:43:be:6a:81:
ca:35:69:ae:e1:b5:7e:11:32:e9:0f:a9:d9:e4:0c:0b:bd:d4:
e7:b5:5f:aa:63:e1:0c:0f:d5:6a:9b:08:3d:16:99:5b:7c:d4:
20:f0:02:31:43:aa:83:fa:f1:c7:7b:81:a2:5d:21:5a:40:15:
b9:8f:de:5a:16:0a:ed:fd:b0:5a:b6:c6:90:a0:bf:b7:b3:35:
bb:67:cb:ff:33:df:71:df:f2:ac:9f:85:79:6f:14:ae:5e:bd:
88:d1:69:ee:e5:aa:fe:d0:58:7d:40:e5:3c:c4:a6:3a:9b:75:
53:be:97:11:02:b2:65:eb:47:72:bf:67:95:51:b7:c9:8b:d2:
82:9f:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:19:31 2025 by rpki-client