Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UEX9dUrGz-HwNQlf5wJjAQMERug.roa
File: UEX9dUrGz-HwNQlf5wJjAQMERug.roa (raw, json)
Hash identifier: dDOI7G0hL+V+MsMpokBx/pSTKFKWCX3NhTi9XUZ+y3k=
Subject key identifier: 50:45:FD:75:4A:C6:CF:E1:F0:35:09:5F:E7:02:63:01:03:04:46:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E25E4CEC19CBB44AB941A98EFECE4A48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UEX9dUrGz-HwNQlf5wJjAQMERug.roa
Signing time: Fri 11 Aug 2023 02:12:58 +0000
ROA not before: Fri 11 Aug 2023 02:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e2:5e:4c:ec:19:cb:b4:4a:b9:41:a9:8e:fe:ce:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 02:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5045fd754ac6cfe1f035095fe7026301030446e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:54:fb:ce:fb:e3:6f:64:5b:e6:d4:9b:82:81:
54:1a:16:71:b4:80:c9:2d:99:59:72:9d:ca:95:cf:
e9:a5:f4:ae:e7:36:65:e6:18:26:71:63:b4:f3:77:
0b:27:d8:b2:de:4f:1b:66:e7:56:6e:b9:ce:9b:72:
cc:46:03:28:c9:3d:5a:15:40:39:ed:8c:ba:27:99:
1b:d7:d9:58:55:90:01:74:08:98:1b:4a:40:ab:e2:
6e:ba:c4:18:fd:dd:00:23:2f:5b:63:65:b9:39:fe:
42:50:27:a9:97:4d:c0:4f:e7:bb:f5:c9:1a:6d:07:
1b:ab:5f:e1:4d:d6:ba:ca:cf:a8:9d:ee:f6:65:e5:
d5:f9:2c:9a:00:8b:49:ab:bf:b2:6c:4e:7d:85:cc:
dc:72:55:ee:0f:43:d7:d6:28:3b:34:aa:57:ed:e1:
7f:d6:aa:86:d9:c5:12:3c:8b:28:da:18:d2:b7:eb:
bd:d8:29:f1:da:ea:cd:d3:fe:af:c3:49:e1:75:7d:
96:10:c7:88:ed:58:b5:3f:78:4f:24:3a:5f:6b:53:
3b:96:4c:57:70:27:22:c9:ec:47:7d:69:db:4b:be:
ee:63:00:e7:11:ca:dc:79:eb:b9:7c:92:de:19:d1:
8f:5c:40:68:21:be:dd:35:9d:24:98:44:be:98:01:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:45:FD:75:4A:C6:CF:E1:F0:35:09:5F:E7:02:63:01:03:04:46:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UEX9dUrGz-HwNQlf5wJjAQMERug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:57:cc:01:30:51:89:c7:c2:6f:f2:b9:40:6f:6a:14:0d:94:
bb:50:fc:bf:ea:e4:66:1f:af:91:52:09:fc:89:a0:29:53:87:
d4:26:80:a5:51:db:21:ae:dd:03:58:32:92:d3:e6:48:a3:5f:
6c:da:19:a6:9a:87:ce:07:67:e9:3c:a3:10:30:ee:46:cc:91:
2f:b5:8c:25:ef:e2:67:dc:1b:a7:c2:22:4a:94:bc:1e:7a:76:
54:d7:75:87:98:80:c6:dc:3b:fa:66:46:75:1e:33:10:1f:cc:
c2:84:88:b7:42:64:4d:5b:d6:b9:39:7a:80:a3:73:95:3a:61:
78:89:c0:c0:e8:47:54:dc:31:07:f0:7f:4c:42:d3:d9:06:54:
d6:27:18:61:2e:e1:ba:a1:ce:bf:47:3f:71:88:0c:dc:c6:04:
9f:70:f8:aa:28:74:54:3a:3f:0c:9f:7b:18:47:a3:41:9d:b9:
e1:89:34:a2:68:35:08:93:20:3c:f8:cb:96:71:32:45:76:24:
ee:0b:a3:15:13:29:86:98:4a:25:49:88:58:c7:1c:46:35:87:
62:f5:68:b2:e1:c8:72:af:10:4d:0c:3b:bc:99:ac:4a:ba:bc:
21:1c:ae:63:f2:4b:cb:34:9f:f3:09:36:93:7a:84:98:b9:66:
17:ce:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:54:30 2025 by rpki-client