Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UXGP9CVZhDEgPcre8AuDmxG5scc.roa
File: UXGP9CVZhDEgPcre8AuDmxG5scc.roa (raw, json)
Hash identifier: R+F4NB3S01aTLKWh0/yncOs7R4ffXi7l/ILFORGQMJA=
Subject key identifier: 51:71:8F:F4:25:59:84:31:20:3D:CA:DE:F0:0B:83:9B:11:B9:B1:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189940ADDDF02BF7D078B550F34AB83DFAF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UXGP9CVZhDEgPcre8AuDmxG5scc.roa
Signing time: Wed 26 Jul 2023 21:11:27 +0000
ROA not before: Wed 26 Jul 2023 21:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:0a:dd:df:02:bf:7d:07:8b:55:0f:34:ab:83:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 21:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51718ff425598431203dcadef00b839b11b9b1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:f4:95:8d:64:52:61:0b:cf:2a:40:94:c4:
a3:e1:ea:7a:3c:36:55:df:a8:b9:7d:b9:9d:46:87:
fe:f1:54:b9:99:28:04:cf:c4:b1:e8:ac:ec:28:19:
c5:8d:64:ee:6a:d5:b4:c7:ae:5d:29:84:78:6b:c6:
f7:b1:c3:b9:a7:57:48:0b:52:09:2b:4b:c4:de:dd:
e4:6e:d4:5f:f8:6e:64:4b:5f:63:f2:2d:20:53:89:
1d:8c:e7:01:c6:4e:e8:37:06:a3:d0:1e:4e:39:40:
2f:05:93:a3:5a:40:c7:48:9d:7a:c9:d4:10:6a:82:
ba:a5:f3:ae:34:1a:6d:a6:00:04:83:15:9f:31:a5:
46:47:4c:72:88:47:93:49:98:a3:ae:5c:bf:5c:73:
51:b3:e8:59:bf:04:b9:e3:9d:24:9b:de:6b:87:6c:
f4:a3:3d:6b:18:9e:5d:14:d3:58:27:8a:3f:54:91:
b1:ff:41:bd:67:e8:46:51:04:e2:b1:3e:ad:1f:b8:
0b:f7:93:26:16:ab:34:ba:3d:bf:b9:d6:7e:56:81:
e0:bc:a9:4d:c2:9c:1a:31:7b:73:1b:66:c1:40:a0:
8f:33:f2:38:53:dc:e4:a2:19:b0:45:08:e3:4d:71:
1b:b0:04:f2:06:ef:71:5e:6b:5c:64:04:c3:1d:c8:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:71:8F:F4:25:59:84:31:20:3D:CA:DE:F0:0B:83:9B:11:B9:B1:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UXGP9CVZhDEgPcre8AuDmxG5scc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:40:66:82:5a:8e:3d:b5:85:e4:ce:d7:8a:c5:d5:93:cc:fe:
99:20:01:81:10:90:0e:a5:82:fb:76:75:eb:2e:49:18:66:45:
6a:23:23:a5:8b:f4:67:38:c4:c9:5d:93:d9:a4:48:d2:38:6e:
65:0a:03:79:0a:81:b6:b0:57:5a:db:57:de:5b:50:e1:40:47:
03:84:99:1b:05:53:52:0d:0a:36:ea:85:fd:7b:65:0a:12:22:
6b:ac:c1:77:bb:72:32:6f:81:3b:b5:ef:b7:bd:19:7f:e8:d8:
aa:69:91:65:4a:27:73:56:6c:c2:1a:0d:41:96:de:22:9d:0a:
03:10:26:b6:d1:47:01:80:3b:4e:09:d9:c0:a6:dc:73:8c:fd:
2d:77:48:3c:64:69:7d:e8:68:c8:3f:c6:a3:8a:70:3a:29:58:
ce:7c:60:dc:cd:be:b3:12:b9:1e:e4:99:90:0d:1d:39:7d:db:
59:69:57:03:b4:6b:94:c0:c5:6c:8a:52:99:18:f6:be:af:a0:
06:3b:98:c4:f3:6c:39:55:1d:32:0f:71:0a:88:4c:58:b5:38:
c9:cf:d6:6c:b1:7b:c5:23:70:65:b1:f4:15:c3:20:22:9d:6a:
75:ea:38:9e:81:c3:02:ed:ed:4f:11:cb:eb:50:b6:70:3f:1d:
e5:fa:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:01:41 2025 by rpki-client