Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UDN3cs1x8HIxWiPZWCKxNf7A3IU.roa
File: UDN3cs1x8HIxWiPZWCKxNf7A3IU.roa (raw, json)
Hash identifier: FZvjhkgEIAlVnNTVvai3czVjI64zLxbOi8n+aKexWjg=
Subject key identifier: 50:33:77:72:CD:71:F0:72:31:5A:23:D9:58:22:B1:35:FE:C0:DC:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018374229B1CC0DE19AAD0BAB894C7757E54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UDN3cs1x8HIxWiPZWCKxNf7A3IU.roa
Signing time: Sun 25 Sep 2022 10:12:48 +0000
ROA not before: Sun 25 Sep 2022 10:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:74:22:9b:1c:c0:de:19:aa:d0:ba:b8:94:c7:75:7e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 25 10:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50337772cd71f072315a23d95822b135fec0dc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:f5:f5:2f:e9:a2:d6:2d:fd:0f:42:26:f9:
df:c6:99:0c:fc:8f:c2:5c:b4:41:c4:9f:3d:62:6e:
91:16:c1:80:e9:ea:df:d6:1a:3d:ea:1b:d8:7e:3d:
c2:2a:29:97:09:da:f6:f4:6a:37:dc:f1:5a:ad:a0:
6a:06:83:c1:7f:8e:7e:9a:1c:5c:3c:c1:f0:7c:ec:
17:27:4d:c1:d2:62:4b:96:bd:7c:6b:92:64:89:f2:
7d:8c:a3:d4:f8:07:3e:29:da:58:37:ac:da:56:6d:
ca:9d:53:fe:2b:60:43:6b:e7:e2:04:5e:52:ec:67:
d4:87:6f:84:b8:7c:5c:2d:fc:5e:d6:f7:2d:f4:a3:
e8:22:19:8b:23:08:74:34:ba:46:87:2c:32:c7:67:
17:e1:18:2e:5f:e6:fd:fb:d2:fe:b5:68:a7:8f:0e:
60:62:fa:f4:54:c7:3e:74:a6:30:c5:81:31:a0:c1:
bd:6f:a3:54:db:3b:3e:d1:5b:8d:2b:d4:12:d6:7e:
03:9b:17:d4:21:4e:9a:06:4f:96:fe:68:ed:da:b1:
ad:6c:a2:ae:57:34:fe:81:76:20:11:28:fd:6b:fd:
b8:88:38:2e:e0:fb:79:70:2a:16:c8:3b:0a:b6:82:
6f:c6:4d:0d:1c:7a:55:a7:58:20:a9:1c:95:87:19:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:33:77:72:CD:71:F0:72:31:5A:23:D9:58:22:B1:35:FE:C0:DC:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UDN3cs1x8HIxWiPZWCKxNf7A3IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:87:c6:c3:31:70:10:06:c6:c0:d9:10:d5:a7:ab:7e:b3:e6:
bb:ce:9e:07:33:78:4b:ff:a1:9a:1e:ba:2c:98:1b:bb:0e:e3:
0e:f6:5d:b9:62:eb:49:8a:b7:67:5e:f2:cc:db:fb:26:8f:4a:
a8:64:c1:48:3d:54:80:89:f7:bc:7a:24:7d:1d:90:3b:ee:85:
30:cc:e2:16:69:2b:f2:39:ba:3d:19:85:78:1b:09:2a:0a:be:
41:e2:b8:5e:a1:d5:7a:c3:5c:54:99:de:af:e5:da:bd:93:dc:
59:bc:40:fd:5d:3d:0a:03:9f:86:2d:df:1d:e1:30:7c:ef:b0:
88:77:6d:b5:d0:ed:b7:73:67:02:b9:e7:ee:05:fe:30:3d:43:
ca:45:5c:c9:c2:2e:c9:8b:c9:22:a4:68:fa:fc:de:56:dc:93:
ee:60:98:13:34:65:da:f8:31:8e:ac:88:83:13:3d:78:c3:b2:
85:48:43:d5:d8:d1:8b:a7:3e:f3:dc:2f:75:88:51:f9:f9:f0:
d4:b4:23:de:5f:5c:e3:75:8d:4a:8c:c1:f5:c6:1d:18:3b:b1:
17:c5:08:ee:55:bc:dc:eb:9b:a9:8f:ad:30:7f:ef:9f:8e:ce:
a4:c9:c4:53:a6:e8:86:f7:96:1a:56:06:b2:97:21:cf:ea:8b:
9e:c2:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:40:50 2025 by rpki-client