Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uoar0C5dBuHSS3IXjJyNkUE-NXg.roa
File: Uoar0C5dBuHSS3IXjJyNkUE-NXg.roa (raw, json)
Hash identifier: WmgdW2WLl5tg6KWZ0+c6RoL4BQPW3xV00xGXA+horBw=
Subject key identifier: 52:86:AB:D0:2E:5D:06:E1:D2:4B:72:17:8C:9C:8D:91:41:3E:35:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018891E648AB50121E4FEB6FA9AAE3EAC1CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uoar0C5dBuHSS3IXjJyNkUE-NXg.roa
Signing time: Tue 06 Jun 2023 18:09:28 +0000
ROA not before: Tue 06 Jun 2023 18:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:e6:48:ab:50:12:1e:4f:eb:6f:a9:aa:e3:ea:c1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 18:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5286abd02e5d06e1d24b72178c9c8d91413e3578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:f7:a1:ad:90:8d:53:2a:ca:af:16:7a:36:
ea:f6:09:42:5a:18:01:c1:12:f3:27:e9:bd:ca:0a:
69:6c:e9:a7:d5:99:7e:47:db:65:51:9e:82:b5:c0:
1b:a6:8b:e7:49:c5:1e:bb:e7:d1:d2:fa:2c:9d:26:
8a:d9:3c:0c:b0:21:f4:74:a4:f4:44:a1:b8:3a:35:
37:ca:52:ef:b9:af:18:f1:79:d5:e2:04:bc:0d:69:
24:60:46:9e:5e:56:a6:23:32:22:6f:13:8b:0b:5a:
94:3d:fb:a9:a4:77:53:14:22:22:e9:11:91:c0:70:
c3:09:b1:55:1e:b8:fb:34:14:5f:ce:f3:c4:a4:2d:
f0:44:7c:da:7a:d2:d0:88:b7:cc:0b:07:99:69:07:
cf:49:02:a9:7b:de:0b:1c:0f:e4:26:a7:11:e6:16:
c6:8f:cd:4c:dd:ec:9f:73:85:df:d2:6a:da:f9:db:
7a:cd:20:7d:b4:56:f5:99:9c:ee:b7:9c:a9:69:96:
e3:76:7c:bb:b8:1a:33:b6:0b:75:6a:8f:55:57:90:
62:49:6b:35:e8:8e:44:77:f2:02:a3:d7:34:cc:20:
14:09:ad:5e:64:1e:22:dd:39:90:15:8e:e1:ba:99:
95:9c:4a:8f:5c:56:62:d7:72:cd:08:e3:84:4e:91:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:AB:D0:2E:5D:06:E1:D2:4B:72:17:8C:9C:8D:91:41:3E:35:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uoar0C5dBuHSS3IXjJyNkUE-NXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:ce:02:9f:99:97:89:1a:c9:aa:6b:b6:99:75:97:d2:dd:39:
c9:02:70:3b:8c:6e:5f:0c:be:0d:6a:30:71:4d:07:6e:2f:51:
ad:75:bf:95:44:47:8d:d7:ff:bf:fe:eb:dd:09:99:8f:e1:bd:
59:54:2d:28:bc:ab:2b:09:e0:b8:97:53:6c:8c:68:ba:9c:6f:
27:74:65:8a:bb:52:91:69:fd:45:b8:3d:27:1b:b1:2f:ab:0e:
e6:22:f9:e3:8f:fb:23:73:52:3f:ad:69:b3:09:52:57:ae:4c:
06:8f:67:cf:04:38:e7:a3:5a:d0:dd:d5:3f:33:17:6e:cc:08:
5f:a5:e0:41:34:ce:e0:1d:cf:85:0c:19:8d:e8:1f:cd:75:f0:
4a:4c:8c:3e:b1:e2:6a:d8:f1:c7:b5:1c:8b:0e:d2:86:92:e4:
3b:06:65:69:5c:8b:39:82:23:22:5e:fa:13:12:e4:56:70:09:
61:ab:1b:c7:72:5a:6b:98:76:80:4b:fb:7d:ed:87:b9:7f:3e:
44:d6:15:89:4b:7f:29:a7:34:a2:43:26:a4:1c:b0:e2:da:ea:
45:43:05:77:3f:db:bf:bc:e0:65:00:db:73:32:6b:bb:ec:16:
b3:50:f2:07:4c:5c:da:bb:9b:5e:c6:0b:ad:f7:52:ee:31:ca:
eb:36:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:41 2025 by rpki-client