Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UYBT5s7lDQdHEU9tqB2b1hgE4uY.roa
File: UYBT5s7lDQdHEU9tqB2b1hgE4uY.roa (raw, json)
Hash identifier: BqvX6KTZ7iR+hB+W58hyOcvr/Umq4wdoCuQzJ6Vk4II=
Subject key identifier: 51:80:53:E6:CE:E5:0D:07:47:11:4F:6D:A8:1D:9B:D6:18:04:E2:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866CFF54C9DC08212E3F787D8B76E4FF18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UYBT5s7lDQdHEU9tqB2b1hgE4uY.roa
Signing time: Mon 20 Feb 2023 04:05:18 +0000
ROA not before: Mon 20 Feb 2023 04:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6cff:1362/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6c:ff:54:c9:dc:08:21:2e:3f:78:7d:8b:76:e4:ff:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 04:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=518053e6cee50d0747114f6da81d9bd61804e2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3f:67:82:f2:10:20:95:22:3c:c3:64:9a:75:
44:cc:2e:1e:a5:c7:70:78:cf:52:90:f5:1a:e6:b6:
9f:1c:02:35:22:2e:d1:bf:d0:3e:b6:d8:66:d5:f6:
10:f1:cf:11:e4:f8:b3:0f:3e:b0:60:6c:7f:73:d7:
4d:e1:06:13:20:b5:de:d8:9f:83:08:e3:32:61:74:
ad:c0:47:65:c2:79:8a:cc:18:b7:93:c1:fb:b3:77:
42:a2:dc:4f:1b:9a:d1:83:e8:6e:49:f2:d2:e5:ce:
25:df:8c:17:2c:98:17:51:86:3f:e3:97:7b:3f:05:
68:1e:86:10:3b:3f:6e:e0:41:5b:75:41:c4:a6:61:
3c:a1:1e:3a:5b:0b:2f:7e:38:85:62:e1:8b:45:58:
0d:f2:51:5d:f1:25:7e:1c:a0:90:3c:6c:46:02:7b:
81:3b:de:02:26:0b:83:69:7c:c2:dd:08:a7:f6:70:
1a:9b:e7:dc:7e:c9:2c:1c:e3:11:45:35:14:e4:d6:
02:27:1b:fa:20:d8:ca:49:a3:f6:33:87:b5:38:30:
86:fb:8c:e4:e3:fb:50:a0:2c:9c:72:22:2c:5d:44:
d8:09:c6:3b:cb:15:45:8c:44:f3:e0:4d:39:22:05:
98:72:9a:79:17:0d:de:d9:38:f6:a0:e5:15:b5:4c:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:80:53:E6:CE:E5:0D:07:47:11:4F:6D:A8:1D:9B:D6:18:04:E2:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UYBT5s7lDQdHEU9tqB2b1hgE4uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:c1:47:89:cb:6e:5a:3a:b6:27:d4:3b:0f:2e:b1:64:3e:9f:
4f:0a:15:d5:35:ab:be:40:eb:ac:81:d1:36:f9:37:73:1b:1e:
25:ec:2b:ef:3b:f2:c6:54:ca:f0:bb:ad:87:bf:85:e1:00:54:
ca:80:b5:93:61:ab:62:fc:ac:d5:a6:4f:8e:74:78:01:d3:ac:
c2:d2:0d:e5:6c:6e:0b:46:5f:1b:ab:6b:81:8b:c9:af:e2:88:
22:f2:d6:8f:46:b3:53:bf:d7:64:28:5e:28:c1:46:2f:bc:bf:
7c:b2:46:97:b5:a8:a8:22:f4:17:05:61:73:c1:02:12:08:89:
03:f1:4a:62:20:4b:99:16:d8:97:f6:3f:d6:06:09:98:85:df:
71:45:06:f4:ea:8e:a0:99:29:21:fb:d7:f8:f1:0e:d9:01:3c:
fa:b6:13:92:4b:eb:54:ed:a0:b7:14:2c:6d:10:61:3e:ee:ae:
a9:2c:54:36:5e:51:c9:29:ac:ce:04:3b:d0:08:3f:0c:f4:04:
e8:38:0c:07:f3:ce:d5:6a:93:4f:7e:b3:8f:18:21:9d:0f:b7:
3c:ef:10:47:89:2f:b2:7a:44:f9:ae:b2:81:06:a7:2d:17:bb:
b5:04:af:6c:2f:d2:5e:75:04:c3:c2:d5:7e:26:b9:b9:5d:68:
e6:67:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:36:14 2025 by rpki-client