Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UUYPDOL7BUY5yn6pcTihAX7qHCg.roa
File: UUYPDOL7BUY5yn6pcTihAX7qHCg.roa (raw, json)
Hash identifier: UT0b4UIbl8LDa5HHK5BB63KxYqwxJaCcJEimUS1Qqjk=
Subject key identifier: 51:46:0F:0C:E2:FB:05:46:39:CA:7E:A9:71:38:A1:01:7E:EA:1C:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C7557ACB50CBC65CBE4BA3280D78D444
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UUYPDOL7BUY5yn6pcTihAX7qHCg.roa
Signing time: Thu 09 Mar 2023 17:05:13 +0000
ROA not before: Thu 09 Mar 2023 17:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:c754:a90c/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:55:7a:cb:50:cb:c6:5c:be:4b:a3:28:0d:78:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 17:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51460f0ce2fb054639ca7ea97138a1017eea1c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:e4:6c:e0:52:54:95:24:38:bd:e2:d6:b5:
f3:26:0e:91:7e:0c:43:13:de:b9:c6:9a:67:c9:e9:
d4:3e:76:21:66:89:13:8a:51:07:6d:dc:73:28:13:
fa:61:b9:62:ef:b7:41:c3:8a:4e:a3:21:97:a5:86:
43:c4:31:65:e5:2f:92:33:e3:97:f6:af:ad:4b:3c:
bf:2c:d9:f9:02:e1:04:d9:f4:46:97:9a:76:ae:5f:
e6:99:6f:48:19:5a:a8:90:28:98:fb:9a:90:b2:f2:
23:bc:9b:17:1e:aa:2e:63:f8:84:4f:11:ad:b4:60:
55:41:4f:7c:56:1b:49:97:73:b6:94:00:77:b3:4f:
a8:f6:73:17:bc:db:83:8b:8c:22:47:1e:b2:fc:19:
61:f6:ee:01:1e:cc:ea:e0:33:46:bf:64:a4:2e:1f:
60:7e:ef:7a:81:8c:35:59:0f:0e:fb:b5:e8:02:ff:
9d:ce:e2:41:8d:9a:5a:c9:00:43:98:bb:6f:e4:0c:
f1:0b:14:67:36:b0:25:72:47:8e:36:71:80:3e:76:
20:97:59:31:c8:cf:65:d9:eb:26:cf:9c:69:ca:3c:
44:57:18:73:d9:ab:77:53:5d:65:5d:be:3f:6e:77:
a6:91:1e:8c:81:37:55:80:e5:ba:d1:89:77:08:f8:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:46:0F:0C:E2:FB:05:46:39:CA:7E:A9:71:38:A1:01:7E:EA:1C:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UUYPDOL7BUY5yn6pcTihAX7qHCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:3a:6a:52:37:39:e9:e7:27:25:b3:c9:dd:f1:29:62:fe:ef:
90:9f:03:4d:b0:25:f7:5d:a0:83:68:b2:fb:03:1b:c2:27:e5:
23:9c:f7:18:8b:f0:5f:d7:06:b7:77:bc:82:72:8f:a6:85:85:
aa:c6:84:23:cd:b9:53:c0:b3:13:a6:86:54:38:39:d3:52:16:
60:f6:c5:d4:8e:04:a9:f4:63:6f:78:40:3e:5f:3d:d4:b5:94:
4f:6c:35:5f:29:f5:93:ae:c0:af:6c:02:fe:74:71:5d:f4:84:
6e:4a:32:87:cb:cd:fa:1b:dc:e2:53:01:92:89:20:fe:78:8e:
f8:41:c7:39:e7:47:5d:85:a7:df:e4:4b:45:aa:3a:c2:a7:1b:
36:74:0f:ca:3c:96:8d:70:66:d2:40:bd:40:c5:25:1a:52:da:
1e:26:4a:5f:d1:da:10:85:db:63:d3:b1:f0:3c:25:31:d5:42:
20:41:8f:11:bc:c1:12:22:ea:85:7c:57:e8:ad:9f:78:46:23:
9d:42:e0:9d:8d:7c:3a:32:9f:eb:04:22:c3:6e:a7:bd:ab:0f:
e9:f4:de:3b:c0:f7:3a:21:ca:0e:94:27:e5:c5:4e:ae:b7:5e:
c8:73:83:b7:a2:5d:c6:8e:39:2f:c5:b5:78:fe:80:08:06:c6:
e7:51:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:28:34 2025 by rpki-client