Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UkhDr1bA5aBxCQ03tMk1yjjMMs0.roa
File: UkhDr1bA5aBxCQ03tMk1yjjMMs0.roa (raw, json)
Hash identifier: 1fTIMzdckYMoUstpN/+GOHgzDwdsMRW03Gzk6kg+mOE=
Subject key identifier: 52:48:43:AF:56:C0:E5:A0:71:09:0D:37:B4:C9:35:CA:38:CC:32:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BB511D3ED6A5FF438231BB0DC671A2E3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UkhDr1bA5aBxCQ03tMk1yjjMMs0.roa
Signing time: Tue 07 Mar 2023 09:05:00 +0000
ROA not before: Tue 07 Mar 2023 09:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:bb50:7f63/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:51:1d:3e:d6:a5:ff:43:82:31:bb:0d:c6:71:a2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 09:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=524843af56c0e5a071090d37b4c935ca38cc32cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:ae:5b:5b:64:4d:f8:ca:1d:85:1b:76:cd:
a7:43:18:0a:26:cf:8c:07:11:2c:a4:0b:e6:38:6d:
6d:3d:65:78:f1:4f:f6:64:fe:2c:41:47:2f:3b:3b:
01:3b:3e:0c:bf:9c:e3:21:e1:9c:ae:d8:58:88:47:
da:b4:2a:44:33:83:b6:16:57:c4:8a:cc:ff:6a:3f:
48:25:17:32:91:56:ea:c5:1c:03:51:20:26:a4:6f:
b3:d6:17:19:4f:32:01:a1:6b:05:59:69:fa:bd:71:
ff:b1:b8:59:ce:4b:5d:d2:eb:bb:20:9e:9d:87:8d:
47:20:9b:f8:8c:69:56:d6:40:21:6d:8a:e6:5a:81:
d7:81:3e:b0:1b:ad:63:5e:f0:64:1c:dc:4c:c0:57:
d8:d5:9e:1e:1d:99:2d:6a:15:68:bf:ca:a8:80:4d:
90:f5:98:21:36:2d:85:69:19:8b:4e:f8:26:15:d4:
9b:6f:b7:55:49:bb:42:18:05:8e:50:28:3f:c9:82:
38:cc:18:cf:c9:a0:0e:f4:5d:b4:82:89:73:c7:88:
c1:24:c0:1f:84:d1:69:68:ed:3a:71:20:51:ee:45:
d3:88:0b:ed:23:91:ac:f4:8e:bf:3c:65:df:75:ce:
5b:94:d0:a2:b6:61:e7:3f:4b:8f:c8:de:ea:a1:44:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:48:43:AF:56:C0:E5:A0:71:09:0D:37:B4:C9:35:CA:38:CC:32:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UkhDr1bA5aBxCQ03tMk1yjjMMs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:95:2f:0e:c1:90:db:d8:23:84:8a:92:01:50:a0:08:1b:b7:
96:27:86:8a:56:51:56:98:4f:8a:ee:1a:25:22:76:31:bd:a0:
24:80:ab:f2:ca:e1:5a:b2:f7:ad:1b:7d:83:af:a0:11:8b:6f:
a3:36:63:cc:4d:08:f7:12:92:02:59:89:0b:4f:7e:09:61:5a:
47:a2:ef:54:27:29:94:55:af:b2:be:09:a4:7b:ad:d3:08:57:
34:a5:fa:be:4a:0f:58:64:e6:c1:60:43:69:2c:0f:8b:81:38:
2e:00:05:99:6e:23:c2:2a:05:8a:7c:c9:16:1c:97:4f:e7:90:
9a:c7:46:36:17:ae:a8:56:02:f5:6b:5f:0a:96:d9:1d:75:c8:
8f:15:a6:69:6e:4d:bc:ba:fe:93:f6:6e:db:27:34:45:06:f1:
1a:c4:b1:10:83:a8:8e:b6:f0:4e:15:52:ac:4b:bf:88:02:93:
fb:d1:8e:1f:09:e7:b7:d8:25:93:04:f3:6b:5e:0f:3a:e2:60:
a2:94:e8:e8:aa:03:3d:09:05:7b:4a:43:82:cc:9d:ad:1d:f6:
ce:6c:80:f8:6a:68:aa:d0:c7:3b:12:bb:12:f1:61:ea:88:98:
74:51:fd:90:44:fd:d3:06:96:ff:0a:a0:79:cd:b8:ce:1f:c2:
cf:33:f3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:19:03 2025 by rpki-client