Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UB5tWDSVvRnUt3THv-spMAh6h38.roa
File: UB5tWDSVvRnUt3THv-spMAh6h38.roa (raw, json)
Hash identifier: fuEZM0pwfnwoPXtU6M1AJtUcrqB9gLUpb+2UkDCWowA=
Subject key identifier: 50:1E:6D:58:34:95:BD:19:D4:B7:74:C7:BF:EB:29:30:08:7A:87:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188044808E68DB2EA431B0CDB6B2D2FEC60
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UB5tWDSVvRnUt3THv-spMAh6h38.roa
Signing time: Wed 10 May 2023 06:10:09 +0000
ROA not before: Wed 10 May 2023 06:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:48:08:e6:8d:b2:ea:43:1b:0c:db:6b:2d:2f:ec:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 06:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=501e6d583495bd19d4b774c7bfeb2930087a877f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:37:75:ba:49:d2:55:57:6e:21:54:75:4f:
02:94:8b:66:ec:5d:39:a5:51:c1:69:02:a1:69:50:
4a:30:1b:25:53:9f:f8:96:48:57:4e:79:36:47:9b:
03:63:26:2f:30:d7:b8:cc:be:2e:4a:65:3a:2d:76:
54:e1:c2:71:c4:fb:4a:49:0c:99:bc:1a:c8:e6:75:
83:37:05:b5:f2:4c:d2:7c:7d:6e:0d:c7:a8:1a:e8:
47:57:7e:75:eb:6f:ee:b0:7a:15:09:8a:81:9c:82:
1c:b4:b7:77:a4:2b:b2:d7:44:22:8c:98:24:1a:a7:
cb:e6:e1:62:1d:df:36:2b:74:58:c8:5d:72:6b:ec:
16:47:3e:b8:80:b7:96:52:b5:c7:8f:73:8e:aa:8e:
f1:29:ca:75:ff:68:7a:65:33:dc:b1:1d:ca:65:98:
87:ca:e8:a3:87:0f:71:af:c4:3d:79:dc:e9:96:15:
d8:1b:1b:f5:6f:27:85:ed:2c:92:d1:78:23:f6:41:
35:12:18:5a:f6:0f:03:18:8b:4a:ea:18:b6:35:73:
a8:9b:fa:a5:76:3d:7a:69:a3:71:b3:bf:03:3f:8e:
32:23:74:b3:97:c1:6f:59:0a:77:d1:f3:5d:6b:7c:
65:23:60:1c:fa:4f:e3:a6:01:85:8e:b0:d1:89:2b:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:6D:58:34:95:BD:19:D4:B7:74:C7:BF:EB:29:30:08:7A:87:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UB5tWDSVvRnUt3THv-spMAh6h38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:28:f8:ed:92:7b:d7:9a:e2:85:d0:00:c4:8f:1a:6d:87:d6:
ba:97:dd:5e:76:70:5a:01:97:9b:ff:41:3b:53:c1:0f:48:cb:
20:18:53:73:65:e7:de:34:ae:df:1e:f7:f8:a5:11:a8:02:32:
9e:d4:b9:5c:99:ff:c7:69:ac:4e:4b:35:70:40:b1:88:8e:b6:
71:f6:55:34:00:d4:7d:23:19:5c:4f:50:8b:59:ae:c3:39:ff:
ef:67:8c:70:b1:1d:e5:5a:74:ea:89:93:34:61:40:e6:ac:30:
16:1b:30:57:4d:1d:2a:9c:ea:92:a2:51:2e:84:87:71:d3:8d:
18:e5:52:e0:e7:d1:b8:7a:c8:4e:27:f4:2f:79:57:12:10:34:
87:c7:f2:8b:85:1a:d0:5d:0c:c4:03:89:8e:1e:8f:f9:44:0a:
36:86:a2:1e:2b:20:04:e0:da:35:41:91:f4:5b:93:95:84:26:
70:36:d8:c8:2d:06:f0:38:4d:34:63:23:9f:77:a4:e7:f6:02:
0b:96:91:21:d0:46:ed:b5:3c:6e:fa:dc:67:6a:e0:67:53:16:
3f:e2:68:e9:a1:9c:8a:b9:1e:ca:b9:22:4b:89:8a:b4:95:03:
0d:f8:35:7a:e5:a3:19:f4:44:99:96:50:24:aa:9a:f0:53:ff:
be:97:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:07:30 2025 by rpki-client