Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UYISLDSAaUVZHqIdmiVV78bTsuI.roa
File: UYISLDSAaUVZHqIdmiVV78bTsuI.roa (raw, json)
Hash identifier: AiOBTz/ZbuPXqXvoIbWIMEYwI9maJhtUnYgIEo1ueAM=
Subject key identifier: 51:82:12:2C:34:80:69:45:59:1E:A2:1D:9A:25:55:EF:C6:D3:B2:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879EC8F05C16E4BC45A8BC5F435414B46B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UYISLDSAaUVZHqIdmiVV78bTsuI.roa
Signing time: Thu 20 Apr 2023 13:09:41 +0000
ROA not before: Thu 20 Apr 2023 13:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:c8:f0:5c:16:e4:bc:45:a8:bc:5f:43:54:14:b4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 13:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5182122c34806945591ea21d9a2555efc6d3b2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:6b:18:9e:3b:a9:8b:3b:39:49:a7:81:a9:
bf:6b:e7:d5:49:ed:09:54:7f:01:a2:34:56:a9:52:
8a:83:b8:ba:56:7c:73:42:2f:46:fd:d6:b2:03:f2:
48:b2:28:7b:49:ac:ec:04:ee:36:8f:e2:16:c6:0b:
0d:82:6c:24:ae:70:07:dc:46:78:86:07:de:f9:ee:
38:ec:04:7e:81:6f:6d:8d:31:b2:fe:9a:eb:2a:a3:
24:8d:ec:b8:bf:42:85:a4:45:8d:83:ff:25:17:e0:
23:63:e2:01:44:81:68:2c:6c:d7:64:e4:99:75:2f:
42:98:d7:d5:6c:6b:8f:47:85:5f:20:b6:93:b0:2f:
a6:95:70:6a:17:9c:ad:cb:43:56:d8:1e:8d:f3:29:
4f:b9:80:3d:94:9b:1b:10:96:dc:a7:fa:28:cf:4b:
d6:5c:b1:ef:49:aa:a9:7c:1a:4c:b1:58:21:7f:75:
e0:8f:22:5b:1e:ad:73:48:2d:38:5a:0b:61:ed:1a:
82:ce:e5:be:8e:83:a3:aa:55:f5:21:23:5b:4d:f8:
6f:8c:4c:ab:05:53:63:9c:05:3f:cc:d2:91:1e:05:
75:ab:e4:2b:c3:cc:1f:df:5d:5d:43:b0:57:23:da:
75:9a:17:e9:28:41:ac:51:68:39:5d:24:6b:d7:75:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:82:12:2C:34:80:69:45:59:1E:A2:1D:9A:25:55:EF:C6:D3:B2:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UYISLDSAaUVZHqIdmiVV78bTsuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:3b:d9:35:da:72:c0:c5:19:78:c9:8f:47:40:aa:36:a3:24:
1f:1e:25:26:c9:07:53:71:e2:a2:da:e0:85:5a:53:80:ca:61:
83:ed:c6:cc:c3:c1:79:bb:d6:8c:e4:5e:91:22:00:1c:b1:fb:
28:43:96:10:ce:87:e7:f8:db:16:72:4e:70:06:16:9a:b5:2c:
72:94:2d:0d:99:fb:7d:4e:49:ff:65:28:92:c8:2b:65:78:51:
1a:e3:a7:7c:80:0f:ee:32:a5:7b:85:00:13:63:6d:1b:f9:66:
60:d8:62:40:87:69:49:82:6d:58:4a:18:5b:63:0c:67:1a:cd:
6e:bd:c4:93:52:e6:2f:92:8d:34:41:b6:9f:a4:51:94:41:8c:
ba:fc:d0:93:87:c9:52:ba:5b:e0:f7:ff:5e:a4:d8:05:04:97:
98:f0:42:29:7b:72:0f:81:b0:f0:0b:b0:24:6f:cc:04:0f:33:
89:cc:ea:54:98:41:0a:22:61:f7:77:1b:a5:15:e6:95:9a:3a:
ce:a4:42:07:10:83:99:16:ef:d2:b6:c2:61:63:61:19:73:98:
90:52:29:4c:21:c7:e9:90:99:a7:54:d2:56:19:0e:22:8d:1f:
f0:65:01:0f:55:15:a9:2b:57:60:94:5f:39:e1:68:46:aa:69:
52:72:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:58 2025 by rpki-client