Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UW3Q9uNuPb6Apa61sAE8NBaw318.roa
File: UW3Q9uNuPb6Apa61sAE8NBaw318.roa (raw, json)
Hash identifier: a6Kn4sxel9vjdokWXvnbEXtzjUNjJsql7YMBXnYLJtc=
Subject key identifier: 51:6D:D0:F6:E3:6E:3D:BE:80:A5:AE:B5:B0:01:3C:34:16:B0:DF:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DD3C1B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UW3Q9uNuPb6Apa61sAE8NBaw318.roa
Signing time: Sat 26 Feb 2022 09:09:30 +0000
ROA not before: Sat 26 Feb 2022 09:09:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842594226 (0x6dd3c1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 09:09:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=516dd0f6e36e3dbe80a5aeb5b0013c3416b0df5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:80:e4:1e:10:2c:99:d1:62:68:d0:90:9e:24:
13:60:f6:72:6b:68:3e:59:7f:cf:5d:ee:45:31:ec:
ad:4b:fa:d0:aa:f8:bb:7c:7b:ca:84:f0:3b:df:b7:
b1:f8:74:36:83:76:78:a1:65:af:2d:7e:67:67:74:
c5:4e:79:64:31:b1:08:33:a2:f0:8d:6a:f9:95:3f:
fd:a6:1b:3c:fd:16:fb:17:3c:3a:58:7c:a0:41:09:
62:8e:a0:1e:bf:7d:8e:9b:83:30:64:57:a9:d7:d7:
5c:c3:9d:34:c8:b2:d0:ea:90:af:62:e9:6f:36:67:
99:e9:c8:45:74:71:8e:fc:59:eb:f5:d4:4c:71:60:
d9:3b:06:aa:2e:d1:d2:ec:8b:e3:fd:ef:fd:ba:69:
14:ac:e8:26:6a:2e:d8:65:b3:99:fe:1d:41:11:e6:
ef:1a:2a:9e:97:fe:ee:b7:e8:8b:f6:bc:61:7b:01:
9e:b3:1d:06:41:46:db:83:66:b1:7c:53:ed:1f:16:
97:4f:d9:da:f3:e8:a9:d2:03:f9:be:7e:bd:5f:e8:
3a:08:c0:e1:89:44:6d:d6:37:47:7d:f9:fb:57:22:
a9:70:f6:77:b5:39:cc:38:d2:58:c5:72:6f:68:22:
24:c6:f0:a5:12:c8:31:63:00:fd:f5:7d:77:75:28:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:D0:F6:E3:6E:3D:BE:80:A5:AE:B5:B0:01:3C:34:16:B0:DF:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UW3Q9uNuPb6Apa61sAE8NBaw318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d2:31:b5:f7:2c:4e:84:da:40:31:72:24:c9:8b:13:df:4b:
7e:95:63:ae:b2:39:e2:1c:e3:0b:4c:da:83:74:3d:dd:42:6c:
e1:86:5d:11:e9:57:9e:76:7a:8c:29:70:54:94:05:19:60:50:
ea:eb:c7:e6:00:9a:b1:8e:f0:a8:a9:1f:9f:d6:ab:39:a2:f7:
a6:2b:c0:02:1e:cb:83:88:53:68:36:80:2d:2b:a2:05:ce:3f:
67:1f:2a:95:19:35:b8:97:d0:7b:91:f2:42:ad:af:6a:06:44:
17:67:b9:43:ef:52:62:4f:26:ac:5c:d1:0d:c5:77:2f:34:33:
00:b7:2b:4b:e3:e1:4a:27:4c:87:5f:34:49:c0:7d:4c:02:7b:
8b:e2:4a:e7:eb:bd:01:df:62:77:0f:71:63:46:ea:85:39:c1:
72:b3:80:58:89:6b:11:61:05:94:e9:c1:30:28:85:5d:0a:b7:
5a:8e:e0:8a:00:aa:33:76:2a:9a:57:dc:29:04:cb:c2:82:27:
fe:44:4b:86:0c:95:18:12:26:cc:56:c6:cd:4c:de:81:ad:9a:
fd:18:ff:31:55:c9:b1:58:89:7b:02:71:99:34:67:78:77:4e:
e8:ae:6c:82:fc:d0:a1:53:44:30:c1:90:60:38:b1:98:9c:a4:
9f:8d:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:47:20 2025 by rpki-client