Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ukb6PJG1s2Y7NPeTVAEFD0FaXc4.roa
File: Ukb6PJG1s2Y7NPeTVAEFD0FaXc4.roa (raw, json)
Hash identifier: soEOSpuRdoGKOrJ9UMgYagi+8m3BMvg+yMeXQxTC3Cc=
Subject key identifier: 52:46:FA:3C:91:B5:B3:66:3B:34:F7:93:54:01:05:0F:41:5A:5D:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867FE0646D0B132B064E94DE0523365F31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ukb6PJG1s2Y7NPeTVAEFD0FaXc4.roa
Signing time: Thu 23 Feb 2023 20:04:17 +0000
ROA not before: Thu 23 Feb 2023 20:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7fe0:5280/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:e0:64:6d:0b:13:2b:06:4e:94:de:05:23:36:5f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 20:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5246fa3c91b5b3663b34f7935401050f415a5dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:8a:47:9c:19:83:fb:75:4f:a3:75:cf:e8:
c0:c0:72:f2:22:4d:3c:8b:97:dd:34:95:06:6f:14:
54:0a:93:a7:38:d2:fb:6c:cc:27:3d:8f:0f:c0:9e:
f0:91:bc:7f:a9:f9:15:25:0d:95:40:5c:30:21:bb:
60:f6:8b:91:a8:3b:58:ac:c2:89:f3:7c:1b:e1:c5:
a4:4d:05:6e:a5:7e:82:fb:66:d1:a2:ad:6b:11:72:
87:95:61:27:c4:5c:43:4e:dc:9d:77:e8:b2:b8:7d:
e0:e0:59:2f:b5:10:de:60:9d:52:ef:6b:fe:4b:31:
63:2c:35:85:fa:26:94:5a:42:63:d8:27:82:b0:83:
14:57:21:49:9d:4f:04:f7:0c:e1:e4:c1:91:a5:89:
2b:8d:e0:32:23:83:8a:c9:76:85:8c:28:45:43:99:
ac:ef:97:e2:9e:35:0f:a1:0d:de:ea:05:83:f4:e4:
09:23:7b:c5:50:95:36:41:97:4a:49:79:1a:4d:51:
cf:14:90:98:d8:a1:27:b0:47:ab:a2:36:da:8c:db:
65:e7:e7:03:d6:8d:bb:89:ec:37:ed:c6:96:df:73:
82:f1:3c:47:85:07:51:d5:3a:c7:02:c8:15:1b:39:
fb:b0:ca:4f:ce:ef:d5:88:e6:1b:56:c8:9c:16:ba:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:FA:3C:91:B5:B3:66:3B:34:F7:93:54:01:05:0F:41:5A:5D:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ukb6PJG1s2Y7NPeTVAEFD0FaXc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:46:72:47:26:f7:4c:61:46:66:87:e0:83:84:0c:86:e8:10:
ed:15:69:90:2a:58:56:e2:2a:fb:ff:b8:e9:76:ef:be:3f:8f:
bc:a9:00:41:5b:63:6b:8d:64:34:43:1c:63:55:4b:d2:96:10:
b7:d8:f0:67:7d:e2:3d:27:6a:57:3d:72:42:21:de:3e:34:7b:
fa:52:80:db:3e:09:db:bb:90:73:6f:61:9e:86:23:70:da:09:
49:6e:d9:60:7e:a0:1f:c4:e1:3b:a2:d2:08:8e:8f:3e:7e:60:
60:7a:08:c7:49:31:5d:1c:7f:9a:0d:8b:11:65:fc:1c:09:45:
5b:f2:69:22:c8:e5:d0:a2:85:7f:c6:f5:ac:0b:e4:92:41:12:
35:7c:ca:b4:e1:1f:12:14:f7:da:cd:73:3d:44:a5:3d:8d:60:
5a:46:a6:8b:3f:30:b0:14:9f:77:0d:71:62:8a:2d:b7:55:09:
f2:d2:64:ca:6e:61:6d:dd:d6:89:17:81:a3:46:eb:c2:10:ab:
d1:eb:89:28:71:84:93:1f:b1:eb:a1:71:f8:1f:3b:78:4f:fa:
46:bb:a0:a2:41:b6:0b:d4:b5:e4:df:f5:77:cd:7d:86:db:77:
9c:1a:3c:6b:0e:f0:c0:57:e8:52:c5:6e:85:94:46:a6:90:97:
a5:d2:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:10 2025 by rpki-client