Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULKgJVoyBmOsGBEn717u-TI9RDU.roa
File: ULKgJVoyBmOsGBEn717u-TI9RDU.roa (raw, json)
Hash identifier: LzDyrs0moEf+szpeVVTDbruKrExR5Hylu8VAZ3JNJAc=
Subject key identifier: 50:B2:A0:25:5A:32:06:63:AC:18:11:27:EF:5E:EE:F9:32:3D:44:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869114F579568E9CD9EA5E078D5753AE63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULKgJVoyBmOsGBEn717u-TI9RDU.roa
Signing time: Mon 27 Feb 2023 04:15:15 +0000
ROA not before: Mon 27 Feb 2023 04:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:14:f5:79:56:8e:9c:d9:ea:5e:07:8d:57:53:ae:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 04:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50b2a0255a320663ac181127ef5eeef9323d4435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:20:7b:1d:91:eb:46:f5:60:25:82:ba:8d:
6c:ad:69:c9:5d:ed:a8:15:d3:e6:08:1e:01:ff:20:
91:c1:ec:11:7e:9a:c7:ae:d0:17:a5:86:33:51:85:
c9:78:66:4f:02:90:5b:13:19:83:e6:cd:85:d4:30:
31:8b:0a:58:1c:9b:48:17:12:ad:c5:21:5a:66:54:
92:9c:1b:f8:fa:7f:2e:e2:4d:46:5e:66:7a:fd:ed:
e2:1b:78:66:18:56:94:b3:85:83:70:bb:e4:0a:c9:
de:c6:60:65:ea:eb:62:29:55:7e:82:cb:94:70:f1:
ea:c1:13:4f:70:92:49:35:12:8e:c4:cd:51:d1:12:
2b:cc:b7:5d:f0:22:3c:6a:ff:4e:13:17:c0:17:df:
c0:48:77:ef:36:ac:48:ee:e0:b6:81:48:b0:b9:9b:
b1:09:09:fe:a9:a2:ac:f5:26:25:f1:ee:0e:77:09:
a9:b3:8f:94:c9:e9:bc:f1:a1:9a:3d:69:5b:95:66:
86:df:f0:40:1e:a6:a4:0b:8b:12:9d:45:99:13:70:
56:83:19:ec:cb:86:08:12:61:c9:1f:7b:2c:c5:48:
67:5d:4b:a9:40:34:e2:3c:6f:ff:44:87:df:3e:b7:
9c:5f:45:25:c8:5d:46:b6:60:45:b3:1c:9e:86:f9:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:A0:25:5A:32:06:63:AC:18:11:27:EF:5E:EE:F9:32:3D:44:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULKgJVoyBmOsGBEn717u-TI9RDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:e6:07:cf:3f:12:6b:e8:42:47:81:68:24:a9:16:5d:32:e2:
40:4c:82:ee:b3:2c:78:a5:00:da:bb:84:40:5d:65:75:a8:d0:
70:0b:50:79:71:15:d0:4b:53:07:39:90:38:50:30:f2:9c:c1:
be:39:9f:df:0a:ea:c3:41:0a:e2:76:c1:eb:33:ec:58:e9:6b:
a6:a4:5a:b1:ef:35:cb:52:a4:1e:19:65:ba:76:ed:07:98:b8:
ee:08:ab:c6:d9:ab:e8:44:76:e5:47:69:8e:46:42:c2:fa:0a:
3d:3a:a0:05:5c:4e:fe:09:05:7f:8f:92:32:dc:87:5c:fb:24:
1c:2e:ec:a6:c8:ac:9d:eb:bc:fb:c7:ca:d2:f9:ed:16:95:81:
b8:20:10:42:76:d3:3d:37:28:b1:75:e3:2d:ec:94:b3:3a:c3:
cb:6c:48:08:7d:8b:10:4c:81:73:b3:b3:00:33:3d:cb:55:b6:
49:e5:74:f4:2c:d9:9b:a6:bd:1c:2a:7b:a0:bb:ae:8e:e8:5d:
ad:40:20:e7:7a:31:c4:ca:06:a8:dc:07:68:ba:0f:66:a2:c3:
8c:fe:e3:91:3d:e7:88:d4:ca:cb:19:c3:af:29:fc:c4:ec:4d:
7f:4f:5d:16:77:8c:96:50:34:aa:0c:3f:31:9a:e1:c0:ee:79:
b8:62:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 03:50:46 2025 by rpki-client