Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UbpPpj4ijrOvRzc-p5lXdcENUtk.roa
File: UbpPpj4ijrOvRzc-p5lXdcENUtk.roa (raw, json)
Hash identifier: x/8m0+/K+zmIqkuoh5EGUhbBKBiaIOWKzZgy7tpF4Jw=
Subject key identifier: 51:BA:4F:A6:3E:22:8E:B3:AF:47:37:3E:A7:99:57:75:C1:0D:52:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182AF20CEE3712E6638978CD3B676548ECC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UbpPpj4ijrOvRzc-p5lXdcENUtk.roa
Signing time: Thu 18 Aug 2022 04:05:39 +0000
ROA not before: Thu 18 Aug 2022 04:05:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:af20:6811/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:af:20:ce:e3:71:2e:66:38:97:8c:d3:b6:76:54:8e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 04:05:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51ba4fa63e228eb3af47373ea7995775c10d52d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:20:32:82:95:e0:a5:2d:35:3a:0a:65:77:
f9:20:2a:89:09:f0:8d:74:14:85:4b:f0:5f:0d:b1:
02:8a:84:0d:30:47:8a:d0:5c:93:36:6a:9c:ff:fb:
4f:81:b6:40:56:34:aa:89:92:6a:ae:9d:59:1e:11:
58:f1:ae:17:0a:d1:58:ca:00:fa:b5:32:80:9c:24:
b8:de:b3:c9:e9:7a:08:f3:85:3e:c6:e2:53:b7:ab:
dd:1f:3f:72:c2:69:39:f8:69:2c:22:2b:38:c5:5f:
62:3b:71:0e:9d:3d:cf:58:fa:ad:21:aa:28:c9:8a:
4b:58:94:95:f7:20:41:95:f3:07:ec:f4:63:4c:ba:
f6:f7:1f:3b:f9:ae:63:22:bb:e6:b5:65:04:83:5d:
bb:a8:22:de:b8:7b:e3:82:80:47:f0:11:da:88:8d:
31:f6:ec:1c:8e:c1:82:4e:b3:44:81:3a:bb:3d:15:
f9:0a:74:73:60:4a:2e:b4:0a:19:35:03:69:c0:e3:
17:4c:9c:66:f2:fb:95:b9:12:8c:c6:12:90:c3:fc:
4d:88:ea:20:77:64:cf:52:77:3c:0b:1b:be:3c:22:
99:f6:67:a2:a2:82:cc:55:06:ed:e1:05:8b:34:8e:
dd:9f:ce:2a:5d:4e:31:21:31:9a:61:cd:17:ff:dc:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BA:4F:A6:3E:22:8E:B3:AF:47:37:3E:A7:99:57:75:C1:0D:52:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UbpPpj4ijrOvRzc-p5lXdcENUtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:94:6a:09:f2:a2:b6:1d:69:1f:45:3d:bb:08:3b:6e:5e:27:
a9:9f:ab:23:bf:bf:41:c1:73:c1:c0:c8:f1:fb:cd:08:61:20:
b6:85:13:3f:f3:4a:72:60:05:b0:6b:af:7e:d9:8b:ce:0d:27:
92:dc:b1:e0:bd:c4:5e:57:77:d1:d3:69:d4:79:29:57:c9:61:
c2:96:e1:f4:39:80:ed:e8:cb:dc:5e:18:14:37:d9:19:44:2d:
5e:d9:c9:72:67:d4:e7:ae:a4:13:6d:71:c5:d9:e8:f6:d6:da:
4c:7b:e5:21:65:91:6f:83:5c:81:83:78:4e:7e:39:b0:f6:f6:
9b:c7:17:7d:78:fe:7a:6c:71:55:d4:48:d3:6a:82:3f:6b:a2:
55:6f:b9:c6:2b:c1:1a:54:c7:d2:3d:a6:eb:e8:89:17:48:d2:
5e:02:61:73:50:fe:ad:e7:c7:53:11:c4:75:9a:bc:ff:f4:cb:
6d:26:54:9b:7d:93:b1:1f:d8:84:47:3e:41:25:12:92:47:80:
d1:db:0c:1a:ec:57:da:e5:71:c1:53:e7:2d:be:74:64:14:1a:
21:62:ed:22:fa:ad:73:e2:cb:6a:22:75:79:f8:b6:e3:2d:33:
3b:6c:aa:58:25:b9:af:0c:62:1a:ed:b9:03:11:06:9b:0a:35:
cb:6d:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:16 2025 by rpki-client