Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UB5OSS1RUyb4JI5PIE0LEQavNL8.roa
File: UB5OSS1RUyb4JI5PIE0LEQavNL8.roa (raw, json)
Hash identifier: StTBnMd4b90PwTvr2N5yaZ6KJKiYA+tBQKYvCrR+PLI=
Subject key identifier: 50:1E:4E:49:2D:51:53:26:F8:24:8E:4F:20:4D:0B:11:06:AF:34:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D846963D4C21623B001D65EA538F709F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UB5OSS1RUyb4JI5PIE0LEQavNL8.roa
Signing time: Tue 20 Jun 2023 10:08:04 +0000
ROA not before: Tue 20 Jun 2023 10:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:46:96:3d:4c:21:62:3b:00:1d:65:ea:53:8f:70:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 10:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=501e4e492d515326f8248e4f204d0b1106af34bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:46:52:ad:89:14:6b:05:d6:ae:e4:f6:57:
6f:56:9b:d6:74:79:bf:73:82:5a:08:0c:15:60:5f:
e0:64:8f:6d:6b:3a:ea:70:b6:4d:ee:18:e4:f5:67:
71:95:0c:ef:1f:a3:0b:c1:c9:58:28:b2:65:3e:fd:
b7:33:43:33:ce:00:5d:07:9a:b4:ff:fa:d6:16:e6:
d4:36:d7:da:14:7d:97:f4:b2:30:01:db:cd:e9:ca:
c7:6c:19:64:1f:22:a0:94:3d:9e:dc:22:a7:7d:22:
3a:2f:83:09:ef:ec:5c:38:5d:6e:c0:4c:fd:24:0f:
5b:9a:6c:62:f5:8e:2a:59:30:a2:f4:6d:f2:35:50:
0f:14:20:ee:98:14:a9:0e:3a:a4:0f:36:6d:87:3f:
7f:2c:ec:0f:9d:53:3b:ef:04:b5:13:1c:ab:77:67:
08:d7:cd:3b:4f:c5:83:7c:21:fd:e5:1e:fd:ac:ec:
b0:44:4a:8f:2b:91:92:92:91:d0:9e:83:3d:43:5c:
59:68:4f:f6:f0:c8:15:66:86:e3:00:f2:ae:38:dd:
06:9a:05:f5:83:b2:7a:eb:53:f7:f8:dc:66:53:83:
ed:b2:35:f1:e2:0b:d4:34:28:c7:c0:12:f6:8e:ae:
e5:20:41:2f:3b:f3:2e:fc:14:1d:3a:e5:c5:03:fe:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:4E:49:2D:51:53:26:F8:24:8E:4F:20:4D:0B:11:06:AF:34:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UB5OSS1RUyb4JI5PIE0LEQavNL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:12:fb:59:1f:04:10:17:42:5a:7b:9d:4c:12:e6:6a:e2:a9:
89:f2:fe:f1:8f:ee:1f:ff:86:06:3a:a4:cf:9d:bb:db:0e:58:
02:c4:ca:16:5a:7e:57:2a:50:3a:0e:9e:65:db:db:8c:5c:65:
4a:65:9c:b6:bc:cd:2e:9d:5b:85:c8:a0:fa:81:78:55:3b:15:
dd:b0:f9:52:9e:82:5e:ad:a8:00:1f:aa:7e:93:da:b0:df:2d:
53:60:f3:b5:2a:38:81:2e:4f:95:16:28:85:79:3a:67:08:1a:
e3:81:5a:4f:fa:bf:bc:c0:ea:58:71:7a:2c:dd:02:a9:ad:71:
77:7c:04:08:6e:b6:11:58:ca:64:1c:a7:0b:da:6e:46:2c:b6:
ab:4a:fa:0e:63:ef:c8:35:d0:3c:c0:85:57:08:87:e5:9e:e8:
7c:09:32:09:fb:ed:bb:6c:00:dc:36:11:a5:2b:fa:3e:7b:64:
60:a4:1b:39:56:51:72:a3:25:43:f3:01:69:49:74:81:8f:86:
be:8b:6e:a6:07:45:05:59:36:9c:01:7d:2f:af:1d:a7:9e:28:
42:2b:98:12:ea:4b:91:c0:03:c4:9a:6f:00:3c:3b:be:ff:87:
25:3e:9d:fc:ff:cf:c5:60:ef:14:96:6c:35:d9:4e:f1:a5:39:
26:1b:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:52:30 2025 by rpki-client