Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UP3bmhsPMmysgEUhXOfn5n15er8.roa
File: UP3bmhsPMmysgEUhXOfn5n15er8.roa (raw, json)
Hash identifier: B0QL3nVesG7GfYizrB9xIV15WW56jhhIbyZqXfrQIYw=
Subject key identifier: 50:FD:DB:9A:1B:0F:32:6C:AC:80:45:21:5C:E7:E7:E6:7D:79:7A:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A5382639E4330178EB84AAADCAF05AC1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UP3bmhsPMmysgEUhXOfn5n15er8.roa
Signing time: Sun 30 Jul 2023 05:14:27 +0000
ROA not before: Sun 30 Jul 2023 05:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a5:38:26:39:e4:33:01:78:eb:84:aa:ad:ca:f0:5a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 05:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50fddb9a1b0f326cac8045215ce7e7e67d797abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:92:51:68:1d:25:fa:0b:bd:4a:33:dc:37:
c8:69:95:c0:03:07:ff:5b:5e:8c:22:3f:10:b2:fb:
5e:50:d8:ad:87:3c:12:89:c6:12:c7:b9:eb:5a:c5:
cd:d5:65:4b:94:1f:6a:65:d9:62:1a:0b:f5:00:8b:
e4:53:8b:ae:ca:13:cd:0f:c3:6c:73:c8:0b:2d:38:
d3:f2:c2:f2:01:d6:34:a0:26:92:db:ce:6e:c2:cd:
69:bd:73:c2:f0:45:59:ed:13:ad:2b:bd:22:3b:7c:
e8:a9:63:05:e0:fa:2f:e0:c5:b7:29:75:60:b1:a8:
36:7c:cc:a4:83:d5:0e:99:97:1b:35:e5:d9:54:8a:
9b:f6:95:7f:b4:f5:6c:9f:00:44:52:53:06:a8:71:
4d:dd:3f:15:fd:2e:4b:08:75:39:34:65:f0:d5:2c:
b1:3f:b1:30:8b:62:3d:2b:d7:7a:34:32:f0:e5:6d:
29:43:f6:cd:35:3b:7e:50:d2:42:9d:a6:51:dd:04:
9f:e9:42:73:76:52:7b:c7:95:7f:7b:8f:7e:b2:d2:
fc:42:b8:9a:fb:bf:bc:ca:ec:d7:78:9e:b4:a3:aa:
8e:5f:78:04:ba:25:74:85:c9:86:f7:0c:f0:00:24:
4c:ee:91:b1:6d:20:0a:0c:d5:f9:dc:22:6e:aa:d0:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FD:DB:9A:1B:0F:32:6C:AC:80:45:21:5C:E7:E7:E6:7D:79:7A:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UP3bmhsPMmysgEUhXOfn5n15er8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:82:14:63:d2:29:b1:f6:4e:c0:92:ea:e2:d9:1d:e5:dd:d3:
5b:44:4d:95:c1:46:ee:b3:38:c3:13:2d:e8:b0:41:c5:9b:29:
c8:f3:2f:7a:5f:55:7c:3e:83:c1:28:9e:84:b5:16:37:bb:04:
9a:75:3d:12:39:c0:23:e9:8b:b5:2f:a9:c0:bf:a7:c1:f0:9a:
e8:67:d0:4d:ff:40:65:68:2e:8c:a4:f0:db:03:53:95:ee:2e:
1b:3e:cb:a0:1f:4b:12:e6:6f:b4:bf:50:6e:d8:99:0f:c9:7b:
ff:9f:07:97:4f:48:fb:cc:e8:8e:09:61:1c:e2:2a:2d:b6:07:
ca:fc:0e:00:b9:8f:56:e9:3d:d6:5e:67:c5:1a:f6:e6:5e:53:
c9:b6:31:d6:9d:47:f7:1e:c9:9f:ad:ff:3f:a3:38:a2:92:13:
88:22:6f:dd:d9:31:8f:07:f2:60:7a:01:1b:1e:f2:53:93:3b:
95:35:ff:16:05:f2:ed:c4:ae:eb:ca:3a:a0:83:8b:6c:67:54:
23:c3:21:dc:e9:0d:ed:77:cf:3d:a1:3d:03:63:98:d3:6c:f7:
95:ab:d5:e3:df:3a:fc:7b:7f:c7:74:38:0e:cf:60:16:40:be:
16:9a:95:14:85:57:dd:eb:e5:82:34:57:20:ce:a2:e8:48:de:
00:c0:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:32:34 2025 by rpki-client