Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UWQfR_XA6gqdDe_faJqTxHr74nY.roa
File: UWQfR_XA6gqdDe_faJqTxHr74nY.roa (raw, json)
Hash identifier: 97/tQVqB0lWQWKiyXBexaUVLbgAIWn/113Bh9pIxLog=
Subject key identifier: 51:64:1F:47:F5:C0:EA:0A:9D:0D:EF:DF:68:9A:93:C4:7A:FB:E2:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E9D9967756F278AB0DFCCCF458D3B2A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UWQfR_XA6gqdDe_faJqTxHr74nY.roa
Signing time: Sat 12 Aug 2023 13:04:58 +0000
ROA not before: Sat 12 Aug 2023 13:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:e9d8:fb46/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:d9:96:77:56:f2:78:ab:0d:fc:cc:f4:58:d3:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 13:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51641f47f5c0ea0a9d0defdf689a93c47afbe276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:7b:fb:e7:a7:d3:4d:74:17:d4:7d:6a:91:
2c:75:3e:32:0f:2c:54:14:d7:6f:8a:66:79:f2:3f:
13:de:cd:ba:87:85:f3:64:86:a8:0e:60:c3:5a:f0:
50:34:9c:4f:6d:0c:1b:b2:8d:e7:57:27:8b:d8:78:
8a:1c:79:e0:c0:fa:21:be:b6:df:00:42:73:60:16:
e0:61:9a:e1:b6:c0:12:3a:07:3d:fa:40:a8:e1:8d:
8a:a6:fe:73:f5:cc:87:89:1b:ff:46:ae:bc:79:a5:
6a:5c:98:ce:6d:5c:04:87:74:68:fd:5c:dd:42:a6:
4d:84:bb:0f:ae:e0:d4:c5:1d:27:e2:f3:96:ce:a1:
08:ae:37:bf:0d:d3:3a:3c:13:99:83:ab:e9:41:42:
c6:f8:c5:de:9a:7c:21:46:f2:2e:b7:b5:f5:58:69:
95:45:e6:9b:42:f0:c1:f8:41:44:21:c3:4c:5d:8d:
e8:e8:10:17:7c:ce:cb:dc:8f:67:30:a2:5b:5b:47:
96:f7:2d:cc:87:60:03:99:94:8e:19:cd:dc:a5:6e:
39:cb:9e:23:01:06:fd:01:53:6e:e7:76:29:4c:6d:
24:2a:02:9e:9e:dd:cb:d5:f7:83:89:3f:a0:a9:ea:
6b:f5:c6:2c:09:91:6c:e0:29:db:a6:a2:0a:7f:b8:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:1F:47:F5:C0:EA:0A:9D:0D:EF:DF:68:9A:93:C4:7A:FB:E2:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UWQfR_XA6gqdDe_faJqTxHr74nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:55:b1:fd:43:bc:f9:95:73:b4:60:10:89:de:d7:f0:ae:d7:
52:c5:fc:f1:9e:89:56:2b:55:53:ae:07:3d:22:d0:3f:6a:35:
ec:1c:7f:f7:f7:ee:a7:67:1c:b4:44:6f:7d:37:76:22:e9:be:
74:f0:07:7a:98:94:f1:9a:b0:58:c7:66:97:52:8b:b4:2a:d4:
0d:51:ab:f6:b6:9b:28:12:d9:0a:60:36:80:11:b7:06:a1:01:
6d:86:69:f9:33:42:78:a0:0d:6f:a5:92:e9:5d:ed:5c:33:e6:
5c:e4:68:81:d3:c0:03:f7:d5:59:82:c9:80:bb:9e:d8:8e:27:
cc:d3:ed:04:e1:64:cb:66:08:6a:8f:ba:04:33:d8:17:35:36:
0d:9b:6c:ee:27:51:ef:04:52:4f:ca:cb:37:e6:b3:8b:54:50:
7d:25:28:02:8d:a0:ae:88:1f:1b:7c:dc:53:8d:e0:00:7d:5f:
4b:f9:61:42:7a:a5:69:85:62:59:8c:9d:60:61:78:23:5b:1b:
2b:28:0a:c3:2c:42:ee:d5:40:b3:0d:09:f4:66:f2:2c:a4:88:
af:fb:73:1d:c4:c6:36:80:fd:0b:8f:50:af:d5:56:1c:2b:f0:
99:3b:7f:e1:c1:94:d7:62:1a:92:18:31:b4:4c:5b:be:0c:51:
be:61:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:34:27 2025 by rpki-client