Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UWccZbYYhSUStKIcOMAL3cU-2tY.roa
File: UWccZbYYhSUStKIcOMAL3cU-2tY.roa (raw, json)
Hash identifier: 4ie6kv5Bz+cTplYbqWmV1Zf73ieFfmP/YkEdu6FbNwQ=
Subject key identifier: 51:67:1C:65:B6:18:85:25:12:B4:A2:1C:38:C0:0B:DD:C5:3E:DA:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A01B3A469F37B6216C0D1E17426D239C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UWccZbYYhSUStKIcOMAL3cU-2tY.roa
Signing time: Thu 17 Aug 2023 04:14:24 +0000
ROA not before: Thu 17 Aug 2023 04:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:01:b3:a4:69:f3:7b:62:16:c0:d1:e1:74:26:d2:39:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 04:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51671c65b618852512b4a21c38c00bddc53edad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:36:6d:5f:45:bd:89:79:16:e0:b8:0d:d8:
2a:87:d0:e9:ee:fe:9c:8c:f6:a5:f0:fd:1e:19:30:
6a:78:0a:09:93:4f:1a:6d:28:9b:d1:ad:18:bc:61:
4e:28:69:00:09:c9:36:4e:6b:88:6e:99:b9:6c:80:
91:da:e5:b3:5b:b2:95:5c:f2:46:c9:42:05:a1:87:
cb:c6:63:01:66:bc:d3:85:48:ee:43:ad:30:fb:e4:
8a:ea:07:76:4a:97:2b:b2:ff:e8:97:e7:ba:d3:bd:
f5:db:6f:dc:83:ad:48:e9:01:8e:5b:f5:09:52:ab:
34:a3:c6:08:3e:ce:d7:1f:eb:90:d3:96:96:b0:48:
b8:e1:2f:7f:2f:8e:91:00:30:10:c4:eb:fa:ca:58:
fc:36:a0:62:1f:23:e0:cc:2f:0a:c5:b2:d1:27:22:
48:39:a6:8b:5b:9d:1c:e5:da:55:54:fa:14:6a:31:
9d:c1:0a:48:b5:11:98:cb:a9:e5:14:9e:66:a8:11:
30:c2:f6:47:4b:d4:ad:c3:82:66:d9:78:d2:6d:79:
a8:a0:1a:a4:ae:f6:18:9a:27:fe:a2:f6:07:1e:12:
38:7d:8d:2c:1e:77:8c:25:3a:60:a2:a8:82:92:37:
37:6b:79:91:f1:4b:d6:13:92:f8:b2:82:14:18:24:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:1C:65:B6:18:85:25:12:B4:A2:1C:38:C0:0B:DD:C5:3E:DA:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UWccZbYYhSUStKIcOMAL3cU-2tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:7c:ad:bf:f6:95:92:7d:11:cd:8a:33:9f:74:a3:e3:5b:1f:
17:69:c1:ed:e5:2a:0a:6a:b7:ad:90:f7:0f:5d:97:92:a9:68:
6b:4a:37:c0:6a:d7:4e:92:5b:1e:c1:e5:f9:d4:dd:32:48:07:
a3:5e:b9:aa:75:db:d0:f7:ac:b8:4d:6a:9f:44:bb:6d:15:68:
d2:0c:1e:30:12:9f:95:9c:26:be:0f:62:40:41:da:f1:11:6d:
0c:08:be:ba:92:ac:d8:94:52:c0:34:27:07:c6:a6:f6:08:02:
da:d8:50:57:12:44:3d:22:68:6b:81:2e:d4:a9:34:d7:b4:1f:
5b:ba:69:5c:0a:31:38:30:a6:a7:fc:95:df:5b:50:36:72:9c:
9f:db:bc:45:33:ce:10:e3:aa:2b:dc:36:cf:a2:9f:3a:b6:7d:
4f:a3:04:10:17:f8:bf:cd:9b:ba:2a:42:be:0c:5c:38:75:8f:
51:d3:d7:1a:7a:a4:b3:c5:6f:8c:d0:97:e3:37:a5:ae:a0:9a:
2d:2d:60:0e:f0:c7:9c:b3:b0:38:97:12:71:13:51:6e:77:95:
a1:9b:fc:85:69:23:75:40:8f:51:d4:68:50:42:0e:1e:fd:49:
c4:f6:30:e1:86:61:4d:31:9d:47:cb:1b:9d:e3:43:dc:89:12:
63:11:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:47 2025 by rpki-client