Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UqJ6HeAnCAGz6cryC1clgUTJ1WA.roa
File: UqJ6HeAnCAGz6cryC1clgUTJ1WA.roa (raw, json)
Hash identifier: +k6feee0V9qS2L5Ed9YbmkTy8+Cb95PNbukwsob+YVU=
Subject key identifier: 52:A2:7A:1D:E0:27:08:01:B3:E9:CA:F2:0B:57:25:81:44:C9:D5:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C30D4D62F0A6A257CFE48F9FBE4F5180
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UqJ6HeAnCAGz6cryC1clgUTJ1WA.roa
Signing time: Thu 27 Apr 2023 14:10:41 +0000
ROA not before: Thu 27 Apr 2023 14:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:0d:4d:62:f0:a6:a2:57:cf:e4:8f:9f:be:4f:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 14:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52a27a1de0270801b3e9caf20b57258144c9d560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:a7:db:ed:aa:42:d4:2b:8b:4f:9d:a5:cd:
70:e7:2a:10:f4:f0:36:04:ce:f4:90:d5:91:26:6c:
84:06:ba:ef:09:c1:eb:2c:c8:8e:5d:14:eb:f5:2e:
5f:8c:0a:03:c5:40:b0:68:09:d5:08:8c:bf:8f:a1:
3d:b8:12:af:54:27:2b:53:06:7d:87:80:45:1c:d2:
82:a1:84:ee:f2:cc:e0:b0:ac:24:04:76:b4:c0:05:
ca:f2:68:60:dc:aa:84:8c:3d:94:7b:81:83:41:fa:
30:11:83:a7:cc:c1:17:18:26:1a:7e:d3:0c:98:4e:
af:9e:3e:bf:c0:9c:11:cb:93:f1:0d:4b:be:71:6e:
15:75:7a:b6:cb:73:3a:32:0e:be:21:32:60:0b:3b:
5d:df:9d:64:9b:3d:c4:23:1f:eb:d1:7a:9e:8c:08:
10:a7:4d:bc:d6:bb:aa:67:2b:b6:77:91:76:37:fc:
0b:3a:4f:2a:04:f9:4d:ca:3a:08:10:26:06:7f:79:
f0:c4:2a:1e:5b:50:27:ff:1a:92:b7:7c:98:1a:2c:
9a:a3:15:76:66:1f:91:d5:74:de:3a:e4:78:5d:a0:
5b:d3:a3:19:5b:78:1f:8d:7b:1b:66:53:f2:cf:1e:
ae:92:56:04:9c:12:68:9f:d1:c2:a4:dd:fe:09:4d:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:7A:1D:E0:27:08:01:B3:E9:CA:F2:0B:57:25:81:44:C9:D5:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UqJ6HeAnCAGz6cryC1clgUTJ1WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:e2:ad:e3:fb:a4:08:bc:52:cb:26:52:36:3a:14:e9:f4:60:
7d:c1:17:cb:f7:e0:fe:5c:78:43:b6:32:a6:45:b1:f2:c8:0e:
ec:71:2b:9b:16:e2:ce:64:84:d1:66:8b:93:40:eb:f3:45:9c:
e7:17:9b:34:94:a1:21:44:99:a7:6b:c9:df:dd:60:88:a6:aa:
49:fc:b9:cb:01:f9:83:76:d1:5c:d6:55:74:ab:49:1e:61:f6:
90:2b:2e:61:a6:24:52:66:03:52:6e:c1:c0:93:26:4c:0d:64:
4e:ba:3b:35:82:01:0e:59:ef:4d:f7:9b:4b:15:26:29:dd:2b:
64:d4:05:7b:69:09:77:ac:88:2c:a7:54:32:35:b2:2d:2d:ea:
98:fd:13:67:7d:ee:af:e0:de:d3:c4:c0:70:07:40:dc:a2:10:
08:76:49:f6:17:6f:8a:c1:e7:32:56:67:c2:35:4c:04:98:fa:
d6:77:4f:4b:74:47:19:78:5c:49:48:7f:6b:82:dc:48:1b:f8:
63:a8:60:15:37:33:8e:e7:a7:0c:cb:84:5f:87:93:aa:21:a1:
eb:c2:b3:da:bc:41:4b:99:89:d4:01:56:8c:71:cd:64:70:e5:
a6:70:a6:cb:0b:e1:7f:8b:5c:34:5e:24:f0:7d:51:97:49:c2:
77:7d:ee:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfDDU1i8KaiV8/kj5++T1GAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI3MTQxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmEyN2ExZGUwMjcwODAxYjNlOWNhZjIwYjU3MjU4MTQ0YzlkNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59Sn2+2qQtQri0+dpc1w5yoQ9PA2
BM70kNWRJmyEBrrvCcHrLMiOXRTr9S5fjAoDxUCwaAnVCIy/j6E9uBKvVCcrUwZ9
h4BFHNKCoYTu8szgsKwkBHa0wAXK8mhg3KqEjD2Ue4GDQfowEYOnzMEXGCYaftMM
mE6vnj6/wJwRy5PxDUu+cW4VdXq2y3M6Mg6+ITJgCztd351kmz3EIx/r0XqejAgQ
p0281ruqZyu2d5F2N/wLOk8qBPlNyjoIECYGf3nwxCoeW1An/xqSt3yYGiyaoxV2
Zh+R1XTeOuR4XaBb06MZW3gfjXsbZlPyzx6uklYEnBJon9HCpN3+CU1Y5QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFKieh3gJwgBs+nK8gtXJYFEydVgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVXFKNkhlQW5DQUd6NmNyeUMxY2xnVVRKMVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALDireP7pAi8UssmUjY6
FOn0YH3BF8v34P5ceEO2MqZFsfLIDuxxK5sW4s5khNFmi5NA6/NFnOcXmzSUoSFE
madryd/dYIimqkn8ucsB+YN20VzWVXSrSR5h9pArLmGmJFJmA1JuwcCTJkwNZE66
OzWCAQ5Z7033m0sVJindK2TUBXtpCXesiCynVDI1si0t6pj9E2d97q/g3tPEwHAH
QNyiEAh2SfYXb4rB5zJWZ8I1TASY+tZ3T0t0Rxl4XElIf2uC3Egb+GOoYBU3M47n
pwzLhF+Hk6ohoevCs9q8QUuZidQBVoxxzWRw5aZwpssL4X+LXDReJPB9UZdJwnd9
7lI=
-----END CERTIFICATE-----
Generated at Fri May 2 17:33:02 2025 by rpki-client