Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UmqBIbfiFkUkjVGvTKLTpIzFVQ4.roa
File: UmqBIbfiFkUkjVGvTKLTpIzFVQ4.roa (raw, json)
Hash identifier: rROJ94lHhO+eSJMR6xvjH9neySyzs06+ahik4e/CYyA=
Subject key identifier: 52:6A:81:21:B7:E2:16:45:24:8D:51:AF:4C:A2:D3:A4:8C:C5:55:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A20C81DA1316A23DF4CFB9F61F673D0F4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UmqBIbfiFkUkjVGvTKLTpIzFVQ4.roa
Signing time: Wed 23 Aug 2023 05:05:00 +0000
ROA not before: Wed 23 Aug 2023 05:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:20c7:e3e8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:c8:1d:a1:31:6a:23:df:4c:fb:9f:61:f6:73:d0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 05:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=526a8121b7e21645248d51af4ca2d3a48cc5550e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:95:79:a0:d0:cd:4e:35:9f:b3:4b:f9:a0:
6a:a5:40:e4:c6:e5:06:0e:85:2b:66:bb:b4:c8:c7:
21:3c:47:cb:63:ed:e9:e8:a5:db:fe:23:22:c8:6d:
db:bf:55:f0:d0:a6:f0:d1:cf:62:98:23:9f:32:f6:
19:d7:07:88:a1:e1:e7:51:6b:c5:5f:f3:36:d8:3f:
8a:e1:a0:2f:a7:31:46:60:84:69:23:b8:71:14:49:
56:1b:e3:23:79:e7:8f:53:4b:31:9a:52:e6:e5:84:
d3:d8:42:a0:7e:f9:b2:4a:fb:1d:9a:a3:c2:9d:30:
b7:c5:bf:f7:27:0e:15:44:35:64:a1:9d:55:5f:ec:
5f:dd:ce:53:7d:fa:30:91:27:f2:c3:06:6c:d6:c7:
50:79:21:a7:15:43:c1:14:1d:57:4f:d1:50:ac:e7:
b5:09:d6:2b:88:fd:b5:f8:ab:db:17:12:34:74:92:
07:43:33:83:2c:8d:a6:04:3f:a5:66:1f:64:08:0c:
79:8a:4f:5a:a8:a8:d7:da:5a:4e:11:f3:b6:86:01:
5b:d6:2a:ec:80:d0:41:ae:e1:e8:61:c1:9a:99:5c:
4c:59:16:82:e9:47:ea:5c:10:26:f5:5a:7b:fa:17:
28:ac:26:47:0f:98:81:70:0a:00:64:11:a8:61:0d:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:81:21:B7:E2:16:45:24:8D:51:AF:4C:A2:D3:A4:8C:C5:55:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UmqBIbfiFkUkjVGvTKLTpIzFVQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:11:c8:ac:7d:43:4c:8f:f6:2b:75:52:a7:21:52:8a:4c:6a:
2b:1e:68:2a:27:79:1d:da:bc:30:9f:d0:c5:c6:32:0a:31:a7:
e8:84:c1:8a:3f:a2:61:bb:9b:70:73:36:e8:fd:5f:3d:d1:d9:
5a:8c:00:64:b8:5a:13:6e:49:30:3d:49:80:c4:18:24:a0:8c:
16:e7:c3:20:34:21:07:27:33:51:31:68:86:d8:a9:51:fa:66:
24:c1:96:3e:05:f8:90:62:20:93:9f:11:0d:2f:a8:2e:65:75:
32:b5:d6:fd:d3:a7:b6:3a:d5:cf:dd:7a:19:76:7b:42:b8:2b:
fe:34:11:41:66:46:48:4e:1b:c0:df:b8:b3:b2:0e:2d:6f:dd:
9f:06:7d:4c:53:51:69:48:af:58:ec:00:ab:a2:46:61:b8:9b:
ca:1c:2c:08:ce:90:d2:d1:bc:f8:63:ac:56:7d:16:5f:1a:93:
45:f9:6e:f3:79:2c:7d:c1:52:bf:6e:4f:08:91:a3:e9:36:f8:
4d:fa:54:b2:37:91:39:79:9c:7f:0a:b2:d9:47:d2:19:bf:b9:
aa:44:09:62:6f:13:5a:9b:6a:73:f0:83:c3:fb:e3:0a:49:62:
12:06:f5:19:03:af:c8:8f:d7:f1:21:51:17:49:60:1c:da:d3:
af:f2:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:10:03 2025 by rpki-client