Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULeJiAaUxm3ptbWJ3TRJa7VefPY.roa
File: ULeJiAaUxm3ptbWJ3TRJa7VefPY.roa (raw, json)
Hash identifier: 08LYhD8mn58sPB0ROFXc6XJuokrrRNJVMMqHIjX+KMk=
Subject key identifier: 50:B7:89:88:06:94:C6:6D:E9:B5:B5:89:DD:34:49:6B:B5:5E:7C:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893CB7DEEC21B081E9412FDE4B97571EE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULeJiAaUxm3ptbWJ3TRJa7VefPY.roa
Signing time: Sun 09 Jul 2023 22:13:50 +0000
ROA not before: Sun 09 Jul 2023 22:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3c:b7:de:ec:21:b0:81:e9:41:2f:de:4b:97:57:1e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 22:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50b789880694c66de9b5b589dd34496bb55e7cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:05:94:8f:51:07:d5:f8:a4:09:a5:62:cc:
3d:67:8b:40:f8:01:78:1d:6e:49:f6:c1:81:9e:15:
e6:ef:f3:5f:61:f3:0d:73:d7:4e:b3:6c:45:79:5d:
36:e1:9e:79:d1:1d:3f:77:77:54:75:4d:29:b8:89:
80:77:90:56:c6:fa:a5:e7:4a:fc:66:cf:6a:62:66:
f0:33:b1:a6:c1:ce:57:c0:05:12:0e:78:93:bc:ec:
d0:7e:91:a7:41:0c:b4:9a:3c:f9:1a:85:d5:31:d6:
f6:d0:c4:db:fb:0f:60:1d:b1:23:20:a6:50:0c:4d:
d9:6d:2b:49:7d:bd:2f:81:9a:2e:d3:da:d8:0a:d2:
ac:d5:c8:5a:a2:df:de:95:65:9d:57:bb:18:9a:34:
0b:51:80:70:9f:95:0f:1c:66:ad:23:3f:5e:a8:17:
5f:66:ed:18:8f:04:e5:fe:c8:0c:15:05:50:a3:b8:
a4:1b:bd:af:d2:78:76:cb:da:0d:c6:21:31:9e:00:
57:cc:f2:92:e6:3d:87:c0:07:bd:53:7c:a1:23:0d:
83:7b:b1:8e:ef:f9:76:bd:e7:64:3a:e6:d1:35:df:
f7:81:d0:d8:2a:80:ad:3a:dc:f7:fd:35:c4:ca:74:
f1:4e:2b:f5:0a:8e:8d:57:29:02:11:48:1b:bb:8a:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B7:89:88:06:94:C6:6D:E9:B5:B5:89:DD:34:49:6B:B5:5E:7C:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULeJiAaUxm3ptbWJ3TRJa7VefPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:35:86:c2:fb:24:3e:f0:fa:78:71:f0:85:44:db:76:1e:a7:
91:62:c3:f3:63:9c:e3:c0:42:75:98:4f:8a:2c:ce:cc:14:02:
99:91:51:e4:14:e6:93:88:b6:90:70:7c:ae:97:7c:f3:b3:8a:
2a:90:f2:62:50:4e:b1:2d:f6:d3:ac:c8:d0:16:ca:ca:2a:86:
4a:3c:2c:ce:b1:f8:0f:0e:d0:22:37:3f:14:e9:94:15:0b:b9:
70:55:7d:a2:02:78:46:8a:d6:cb:cf:43:0e:7c:1b:4e:ff:ca:
5b:23:20:24:74:7b:66:52:aa:0c:55:c6:8b:08:9b:72:48:39:
90:15:ab:60:60:d3:04:30:28:95:f0:96:44:b0:31:a7:7e:e6:
c7:2f:2f:5b:17:dc:eb:7b:bb:07:1e:9a:89:e0:99:ac:53:6f:
bc:e3:fc:bc:62:e9:9b:42:d5:28:a3:a8:d0:97:38:54:5e:75:
cf:2a:28:de:93:e9:fc:3e:0f:aa:e0:25:28:ef:08:7f:1a:60:
40:d0:31:39:36:1b:e5:5c:43:23:e4:d1:7f:80:9c:42:d3:2a:
44:85:f2:e1:1a:28:27:71:14:91:4f:a4:e3:d3:c8:98:fd:b7:
d4:46:b5:49:84:a0:59:ff:20:95:69:bf:31:9c:62:e6:0f:1a:
81:ef:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:27 2025 by rpki-client