Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UcZD0LEqmo06Eug4ZFx8HHhzQKs.roa
File: UcZD0LEqmo06Eug4ZFx8HHhzQKs.roa (raw, json)
Hash identifier: s2Pm6JsMOywswnavFVRX75vlbdnm03L8I208fAg0Sds=
Subject key identifier: 51:C6:43:D0:B1:2A:9A:8D:3A:12:E8:38:64:5C:7C:1C:78:73:40:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018700A5053EA8E5BA413E58126A74AEDBB5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UcZD0LEqmo06Eug4ZFx8HHhzQKs.roa
Signing time: Mon 20 Mar 2023 20:10:27 +0000
ROA not before: Mon 20 Mar 2023 20:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:a5:05:3e:a8:e5:ba:41:3e:58:12:6a:74:ae:db:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 20:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51c643d0b12a9a8d3a12e838645c7c1c787340ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:39:3d:e0:8b:ed:2a:ec:15:7b:fc:da:54:
1f:16:c5:40:40:a3:31:c7:96:a8:ac:a9:09:ba:0f:
74:33:80:10:f6:9f:f6:5d:cd:0f:ba:6b:6f:2f:63:
ff:9d:72:f7:81:fe:02:b4:b9:9e:d8:55:23:85:c4:
4e:73:3a:c1:a2:a4:6e:2c:d2:db:a1:05:04:eb:69:
4d:96:81:fe:ad:6a:66:97:b7:4f:ee:da:37:d7:5a:
af:ae:e0:f8:67:9a:d9:b8:2e:0a:44:d0:5f:57:f2:
c2:a5:88:85:f4:40:1c:dc:51:8a:86:e4:f5:92:24:
b1:2f:84:06:51:7f:fb:d1:b1:ec:fe:6c:38:39:bb:
ca:c1:5d:5e:d3:82:64:55:75:b6:0b:e3:29:af:01:
7f:35:ac:fb:38:a8:e5:cc:91:fc:86:91:f2:51:09:
c7:c9:44:7c:4e:c9:ef:d7:31:fa:e1:92:ac:c0:6e:
6b:db:ba:42:4e:18:84:37:3d:a6:28:c5:1b:e7:6d:
52:9a:70:a9:e2:54:ae:05:6d:26:69:96:5b:54:da:
b7:2f:e1:85:55:43:f9:ee:13:56:c0:c7:25:30:62:
e0:f0:9d:ea:28:46:fe:ac:85:21:cf:d1:e6:47:d1:
de:b2:0b:20:4a:6e:8d:69:54:ac:ad:d5:7a:e9:f8:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C6:43:D0:B1:2A:9A:8D:3A:12:E8:38:64:5C:7C:1C:78:73:40:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UcZD0LEqmo06Eug4ZFx8HHhzQKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:74:ca:72:d7:06:3f:78:59:3b:85:00:2f:34:2d:a1:2b:3d:
c8:35:40:2a:f7:17:ed:5b:8e:7c:47:a2:e9:50:e9:49:0d:1a:
0b:49:81:52:23:53:02:6d:ba:bd:84:df:bc:be:07:88:b5:a6:
3c:75:45:b7:10:ec:30:40:f5:51:07:75:a1:15:1b:e9:66:f9:
18:68:60:b6:70:91:11:74:0d:45:c8:b7:2b:d1:07:1c:66:0a:
88:32:e6:42:da:25:bf:bc:4f:61:e2:23:1b:f3:ef:f2:fb:50:
ee:8f:99:1f:ff:f8:03:95:20:80:fc:cc:50:80:b0:ee:73:3c:
da:f7:64:ce:c7:84:ed:8f:b5:32:c4:8d:07:12:57:2f:09:5c:
f1:59:c7:80:27:d2:56:26:7e:19:b5:65:07:32:6b:f0:3e:04:
80:a7:22:56:74:f4:5e:ae:a0:a7:dc:56:bf:e6:a8:ce:b9:6b:
cc:98:37:0e:27:d9:06:82:28:0f:a6:37:e1:a0:db:df:0b:99:
7f:e3:9c:bf:06:2c:7e:a7:dc:5d:bc:1a:96:f8:32:33:58:cf:
ac:26:2c:f2:c6:51:9b:55:ed:22:ae:53:2d:d8:21:18:31:fc:
2f:a3:2c:4f:04:b5:22:d4:b1:1c:c1:f4:ea:d7:e6:e0:3a:0e:
4c:bb:a7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:08 2025 by rpki-client