Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UQ9QF7ZSE2O9h8OCW82E6lNbx_Y.roa
File: UQ9QF7ZSE2O9h8OCW82E6lNbx_Y.roa (raw, json)
Hash identifier: 7Dv11ihw8kf2JHOdFSW3z1m5Q7nG4Mek0wetqiB3fuw=
Subject key identifier: 51:0F:50:17:B6:52:13:63:BD:87:C3:82:5B:CD:84:EA:53:5B:C7:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018980BBED13DFD1105C00B51DBD9C9E2155
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UQ9QF7ZSE2O9h8OCW82E6lNbx_Y.roa
Signing time: Sun 23 Jul 2023 03:12:26 +0000
ROA not before: Sun 23 Jul 2023 03:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:80:bb:ed:13:df:d1:10:5c:00:b5:1d:bd:9c:9e:21:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 03:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=510f5017b6521363bd87c3825bcd84ea535bc7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:a2:0b:09:cc:08:8b:31:8d:29:0b:c9:03:
b4:48:3b:ca:f3:c0:f3:a8:52:74:06:95:15:f1:79:
af:f0:a2:9a:1f:73:e8:99:14:0f:52:72:55:1c:c4:
5b:ea:88:e9:1a:32:6c:89:26:53:46:a8:ef:0a:6c:
1b:5a:c5:76:41:30:a9:79:81:12:97:8b:6b:04:79:
9c:02:0e:71:ba:14:7c:5c:27:d8:97:a6:bd:c5:b3:
1f:5b:d7:3f:23:23:fc:04:b1:c9:1a:ba:33:b4:07:
dd:33:31:f1:aa:14:72:01:ae:cf:b6:80:2b:31:e6:
27:1e:56:9b:7b:16:9c:17:97:63:04:59:c2:6d:07:
35:a0:fb:af:d3:1f:61:90:23:f9:5d:f7:3d:63:b6:
45:b9:7a:1a:84:c6:e2:09:ee:d2:2e:0b:63:96:2d:
c9:ea:c6:52:69:ac:ef:35:d9:ab:3f:04:7b:51:f5:
9f:2d:5c:96:09:f3:8b:16:7d:60:ef:11:ec:90:2a:
4c:50:78:54:5e:41:2e:1a:09:7d:21:18:91:ed:1b:
06:4d:56:8b:85:02:ba:57:24:cf:30:81:ea:80:04:
5d:6a:1e:60:a0:a1:c2:d4:3e:b9:f4:ff:95:5a:e2:
f6:21:05:da:97:a6:7f:3d:8c:2e:ab:61:e5:9f:ea:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0F:50:17:B6:52:13:63:BD:87:C3:82:5B:CD:84:EA:53:5B:C7:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UQ9QF7ZSE2O9h8OCW82E6lNbx_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:07:3e:85:a2:ac:83:30:12:dc:3c:db:77:62:d9:a7:61:4b:
2d:9c:87:19:f6:c9:93:ab:85:88:20:51:5f:d5:9b:5e:44:f5:
f0:93:ef:5f:6d:33:00:b1:cb:bf:15:62:55:79:5e:9f:0d:b1:
24:7e:1b:e0:3f:b8:aa:6c:02:43:d2:29:26:68:d9:01:41:52:
d9:a9:77:8a:b2:7c:63:03:ed:8f:90:fe:20:58:a1:a1:7d:fa:
16:65:b6:7f:43:68:32:e8:b9:3a:26:48:6c:af:c9:5b:4e:57:
18:31:1c:a3:ce:f2:c8:b6:57:eb:cd:b3:4d:f1:be:a2:7d:91:
7e:e3:71:90:61:4d:42:7f:42:bf:5b:96:40:65:3f:8b:4b:3c:
89:1d:f5:5b:05:8e:73:a2:3b:3a:3b:24:3c:a7:41:53:e2:c5:
13:84:58:eb:90:d2:68:5b:27:0b:3a:35:c9:8a:c2:50:0f:dc:
fd:81:27:78:12:87:68:ba:db:e7:48:42:ed:d2:28:9c:fb:d0:
7a:95:5a:4e:c6:df:ef:72:cd:fe:57:2a:b1:60:b0:a1:c0:35:
db:40:44:76:38:f1:5a:64:0a:89:dc:37:65:57:c7:0a:7a:6f:
45:f5:3e:e2:18:08:b7:03:43:66:b1:73:9d:fb:0e:8f:32:9e:
e3:29:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:10:56 2025 by rpki-client