Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UWn-c2NEKSrqwAJOEdrtEXMQ7iw.roa
File: UWn-c2NEKSrqwAJOEdrtEXMQ7iw.roa (raw, json)
Hash identifier: C4q1/ctbH4iI+jYWiR6lWSKJOhjT36eaVaJfvTQQWqk=
Subject key identifier: 51:69:FE:73:63:44:29:2A:EA:C0:02:4E:11:DA:ED:11:73:10:EE:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186748BFF594F4CE19B702054D1455B95A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UWn-c2NEKSrqwAJOEdrtEXMQ7iw.roa
Signing time: Tue 21 Feb 2023 15:16:17 +0000
ROA not before: Tue 21 Feb 2023 15:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:8b:ff:59:4f:4c:e1:9b:70:20:54:d1:45:5b:95:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 15:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5169fe736344292aeac0024e11daed117310ee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:61:ff:7f:af:9a:ba:f5:81:56:42:2b:39:
08:96:ef:c6:be:d5:40:24:8a:3c:3c:f8:fd:22:4c:
8c:9f:c7:df:d5:f5:02:3a:96:46:15:da:f7:2c:22:
be:51:a4:cb:ce:1c:0f:8d:d8:74:cf:19:3a:0c:ee:
38:80:84:0e:c6:65:71:b7:a2:cd:69:ed:00:7b:19:
61:1d:75:88:45:a1:14:29:08:ed:ed:18:18:37:31:
c0:03:aa:f2:a9:2a:d9:bc:80:41:f1:d6:93:cd:13:
96:eb:5c:2d:bd:81:65:37:0e:8d:0e:f5:6b:3b:38:
5f:da:c8:22:ad:11:e8:36:01:17:e8:0e:fe:08:24:
19:3d:bf:0b:d3:b9:6c:f0:a9:c6:50:06:02:d3:a8:
e1:e4:4c:08:6d:c6:7f:e4:f1:89:cd:d9:0e:e1:12:
e7:9b:0e:ac:2a:0f:31:01:f6:9e:c9:c3:c9:ea:64:
56:e9:7b:27:d4:9a:9d:1b:cf:36:70:b1:cf:a6:f9:
d2:b2:d0:20:24:52:86:b9:fe:54:99:9e:57:d9:98:
8d:e6:83:70:65:9c:27:c6:3e:c0:10:61:b8:00:5b:
c0:ba:dd:36:7c:74:0c:c0:d4:ca:c3:a8:99:a5:5c:
31:6a:d3:63:ae:0f:25:33:c8:67:9a:43:ae:d3:ae:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:69:FE:73:63:44:29:2A:EA:C0:02:4E:11:DA:ED:11:73:10:EE:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UWn-c2NEKSrqwAJOEdrtEXMQ7iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:6b:fe:38:70:22:d2:80:2e:1f:1f:2e:2b:5b:c3:02:bc:44:
7c:2f:f0:2c:3e:8b:a3:c9:21:fe:f6:31:ef:eb:be:01:ff:9f:
a0:ac:f2:22:02:3a:de:4a:c6:4a:32:20:54:b6:4a:4a:fc:00:
73:54:0a:c0:f8:fd:0c:a1:6d:a9:bf:7b:cd:53:ad:09:01:b1:
2a:ed:b0:db:38:e3:0e:64:43:7e:49:2e:42:1e:45:c6:38:b1:
90:4e:3c:59:e0:9d:37:b7:0d:e3:26:bc:3a:83:00:0f:ac:1f:
88:87:d4:2c:74:22:ec:62:8e:e6:00:36:6e:82:a7:47:fe:93:
ae:7f:c1:20:9e:37:71:7c:07:74:ea:5a:8e:bb:11:02:8d:eb:
d4:79:b8:5f:b6:bd:67:e6:75:6b:35:c5:85:6b:eb:43:8c:b4:
e5:35:0c:e9:35:1d:20:14:65:bd:6d:72:b0:2e:fa:20:bc:d2:
e0:eb:11:bc:8e:a7:81:90:5a:c6:f4:85:53:4e:50:b4:62:a8:
3a:4e:70:a5:c0:9d:79:47:2b:2f:08:29:ac:90:86:33:d1:2b:
e8:a4:16:68:db:39:38:f5:e2:f7:45:1e:30:d6:f5:f4:40:be:
41:33:39:66:69:79:bb:76:40:63:a1:16:00:f0:45:1d:22:20:
6c:29:b7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:12:27 2025 by rpki-client