Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIH98yh2roHcdh1mgSygcp52Jsw.roa
File: UIH98yh2roHcdh1mgSygcp52Jsw.roa (raw, json)
Hash identifier: IRpfvFlw7gWbaZevot2sP52b8D3JWZhS6KkhA84Jxn0=
Subject key identifier: 50:81:FD:F3:28:76:AE:81:DC:76:1D:66:81:2C:A0:72:9E:76:26:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3D893FEE4F89B803E4F92C6E62A6A9D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIH98yh2roHcdh1mgSygcp52Jsw.roa
Signing time: Mon 28 Aug 2023 19:05:19 +0000
ROA not before: Mon 28 Aug 2023 19:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3d88:6218/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:89:3f:ee:4f:89:b8:03:e4:f9:2c:6e:62:a6:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 19:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5081fdf32876ae81dc761d66812ca0729e7626cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:38:d2:af:43:7b:77:22:99:40:a9:0d:3a:
fe:a4:59:b5:3a:51:a7:f7:d9:dc:72:6b:7e:ac:7a:
1b:97:d6:7d:60:6f:8d:62:41:d3:c6:52:54:fc:26:
79:40:fc:6b:e0:52:22:4f:1b:79:c0:15:b9:55:c4:
e2:4e:1d:25:54:56:c1:d5:e3:70:0c:f7:3a:ea:27:
63:52:2d:0c:6e:ba:16:13:4a:76:f4:8a:96:24:c3:
83:fc:94:db:58:10:02:66:28:07:fb:ff:05:9f:22:
c9:be:53:e3:69:a3:51:04:98:5f:c8:6c:19:86:f2:
1e:97:a4:93:f2:dd:c6:00:21:18:f3:89:f1:39:b4:
e2:68:1a:28:dd:bc:a8:65:e0:c6:4a:8a:34:c4:32:
91:1f:bc:11:9e:e8:90:64:b1:30:17:a8:55:ce:3e:
97:1e:96:1f:b3:b2:0f:9d:c7:a3:ab:c0:3a:12:33:
73:9d:6a:12:b9:b5:c0:42:80:ba:5f:cc:a8:96:a1:
84:40:ff:ae:b7:84:c2:ab:21:6f:b1:91:ad:39:bb:
97:bd:19:70:4c:91:77:bb:72:60:37:86:07:b2:fe:
fe:22:3b:f5:5f:49:50:7c:38:4e:03:86:26:b9:e2:
32:76:3a:75:af:de:dd:11:84:b8:7f:1f:be:13:53:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:81:FD:F3:28:76:AE:81:DC:76:1D:66:81:2C:A0:72:9E:76:26:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIH98yh2roHcdh1mgSygcp52Jsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:eb:bc:8c:5e:8c:3b:92:f0:6a:38:5e:cd:dd:74:f2:6d:1a:
b6:10:e2:ab:b1:e3:a3:51:97:50:49:52:6c:91:1c:43:ef:30:
02:e6:0d:4d:da:73:75:15:f8:cc:5e:d3:37:f0:1a:6e:1d:79:
95:8a:48:61:bc:53:91:ee:73:4d:05:c1:1e:ea:a7:6b:03:f2:
e0:b7:78:bc:a0:15:ab:5a:8f:1a:35:cf:d8:76:94:05:c5:6d:
2b:a7:21:57:1f:e0:8c:c0:8e:bb:cc:a5:7e:8c:bd:fa:ee:92:
f0:d8:d1:8a:bb:16:ef:8c:38:2c:d5:ec:9f:15:d3:49:12:5d:
c8:78:6c:3a:53:5b:4d:96:c3:0a:f8:b8:bf:5d:a6:44:42:97:
06:91:64:fb:b0:a0:14:1c:4e:2c:3b:f4:8b:25:8a:bd:7c:38:
d4:a2:e3:16:79:a8:8b:c9:a1:a1:d0:3a:4c:7d:1c:41:bb:e0:
ac:e3:ed:b2:fd:bf:b9:7a:b4:6b:df:0d:c1:4c:7e:59:2d:c0:
79:7a:4a:77:a1:c0:72:b6:38:9b:f7:7b:83:04:5c:b1:5b:9a:
6d:12:71:1b:2e:40:e7:ca:7f:a6:a7:88:98:ce:ba:6a:d6:9d:
72:52:90:c2:39:75:ab:5a:74:83:5b:26:85:18:a6:74:dd:8d:
c8:d4:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:13:18 2025 by rpki-client