Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UhnhU1uXleEXDo4y286SG5YSlqw.roa
File: UhnhU1uXleEXDo4y286SG5YSlqw.roa (raw, json)
Hash identifier: bEZJWeWTIA5mO2gxgjrMcw/OzlJ2oJFQSMG74E46zFo=
Subject key identifier: 52:19:E1:53:5B:97:95:E1:17:0E:8E:32:DB:CE:92:1B:96:12:96:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018355AC2E32928F70BEA61345B320C84F38
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UhnhU1uXleEXDo4y286SG5YSlqw.roa
Signing time: Mon 19 Sep 2022 12:14:50 +0000
ROA not before: Mon 19 Sep 2022 12:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:ac:2e:32:92:8f:70:be:a6:13:45:b3:20:c8:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 19 12:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5219e1535b9795e1170e8e32dbce921b961296ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:74:70:64:dd:04:38:a0:c9:7d:30:bb:3d:
2c:0b:1c:96:de:0b:cf:66:86:71:14:6e:03:11:02:
0a:7e:cf:e1:ea:6c:af:f7:fd:5a:0f:65:52:bc:36:
9f:15:e1:f2:e2:f6:a1:ab:75:50:8f:0d:0d:39:f9:
93:a8:49:33:ef:91:16:63:d9:30:14:c7:03:e0:05:
de:bd:f9:7a:a5:51:31:34:8f:87:1b:34:a1:67:2a:
8c:9b:aa:ea:09:69:b1:6d:4e:34:0c:12:d4:74:c9:
51:98:60:8d:65:58:67:4d:52:32:c1:1b:b4:8a:32:
50:25:21:03:15:d5:c4:9e:a6:a5:e9:0e:6e:47:ce:
8d:46:eb:6b:dd:fc:a9:88:89:cd:6b:7e:47:2e:f9:
b4:e0:bf:12:2e:1b:d9:0a:67:09:89:c6:b3:69:6d:
52:d9:39:77:03:63:01:d2:70:2f:87:54:ea:da:08:
83:94:59:6b:5a:73:27:40:34:42:43:60:c2:3d:52:
5f:ac:24:2f:9f:19:85:8c:fe:6c:bd:26:ee:73:15:
dc:b7:81:41:8c:15:a3:e0:8b:e8:b8:12:54:ba:c9:
f8:10:0c:7b:7f:16:ca:9a:c6:0a:d8:74:ef:2c:40:
a5:cb:d4:79:56:c4:14:94:58:4b:6d:18:e6:a2:48:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:19:E1:53:5B:97:95:E1:17:0E:8E:32:DB:CE:92:1B:96:12:96:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UhnhU1uXleEXDo4y286SG5YSlqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:0c:87:f9:d9:f0:20:12:9d:91:a8:13:d3:13:f2:d6:57:ab:
08:fb:b9:9c:a3:f7:ab:88:76:60:6a:22:c6:af:25:0c:18:2a:
72:59:96:05:55:aa:cb:6a:da:4f:f5:dd:c5:d8:d7:ef:35:8c:
d7:82:87:e5:1d:cf:d1:96:3c:a9:07:21:b1:6d:72:82:74:e0:
bd:fc:f8:30:17:50:07:e0:ad:49:a8:09:d6:11:d7:fb:0f:9f:
77:ff:3e:a0:8f:8f:f6:8f:34:dd:27:e2:94:9c:10:1d:75:ed:
0f:8f:b3:16:85:37:20:c2:34:43:92:ca:e0:fb:83:cd:04:7a:
dc:08:79:f9:e8:79:04:48:a2:9a:1b:ac:fd:1b:2b:de:60:c0:
5c:45:05:b2:91:0f:c4:48:b6:36:38:bf:b3:1e:9e:b9:8c:73:
82:c6:15:40:81:f2:b6:95:93:c8:03:1a:ea:67:8d:e0:bd:d3:
51:70:99:fb:85:db:e8:84:e8:66:23:ff:87:36:74:d7:f8:e7:
75:73:95:9b:26:c7:a1:7b:9c:b2:ce:b8:5e:5a:e9:0a:74:24:
c0:8d:05:36:e4:4a:22:98:96:d0:05:c8:d5:3d:c5:3c:96:54:
00:8b:70:e6:26:e7:80:1e:c9:88:ee:70:8d:a6:cb:43:3f:3c:
ab:a9:f9:3e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYNVrC4yko9wvqYTRbMgyE84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTE5MTIxNDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjE5ZTE1MzViOTc5NWUxMTcwZThlMzJkYmNlOTIxYjk2MTI5NmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN10cGTdBDigyX0wuz0sCxyW3gvP
ZoZxFG4DEQIKfs/h6myv9/1aD2VSvDafFeHy4vahq3VQjw0NOfmTqEkz75EWY9kw
FMcD4AXevfl6pVExNI+HGzShZyqMm6rqCWmxbU40DBLUdMlRmGCNZVhnTVIywRu0
ijJQJSEDFdXEnqal6Q5uR86NRutr3fypiInNa35HLvm04L8SLhvZCmcJicazaW1S
2Tl3A2MB0nAvh1Tq2giDlFlrWnMnQDRCQ2DCPVJfrCQvnxmFjP5svSbucxXct4FB
jBWj4IvouBJUusn4EAx7fxbKmsYK2HTvLECly9R5VsQUlFhLbRjmokgWBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFIZ4VNbl5XhFw6OMtvOkhuWEpasMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVWhuaFUxdVhsZUVYRG80eTI4NlNHNVlTbHF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJkMh/nZ8CASnZGoE9MT
8tZXqwj7uZyj96uIdmBqIsavJQwYKnJZlgVVqstq2k/13cXY1+81jNeCh+Udz9GW
PKkHIbFtcoJ04L38+DAXUAfgrUmoCdYR1/sPn3f/PqCPj/aPNN0n4pScEB117Q+P
sxaFNyDCNEOSyuD7g80EetwIefnoeQRIopobrP0bK95gwFxFBbKRD8RItjY4v7Me
nrmMc4LGFUCB8raVk8gDGupnjeC901FwmfuF2+iE6GYj/4c2dNf453VzlZsmx6F7
nLLOuF5a6Qp0JMCNBTbkSiKYltAFyNU9xTyWVACLcOYm54AeyYjucI2my0M/PKup
+T4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:06:38 2025 by rpki-client