Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uv92vtJioouKAp7HBQ9GiWz0PFw.roa
File: Uv92vtJioouKAp7HBQ9GiWz0PFw.roa (raw, json)
Hash identifier: wj5Gz+XbnpSLwy4Ys/SLHT+Z7vrunK5MgjdGdbQgx58=
Subject key identifier: 52:FF:76:BE:D2:62:A2:8B:8A:02:9E:C7:05:0F:46:89:6C:F4:3C:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187868A941E586C36CAB6DA125DCC7F4471
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uv92vtJioouKAp7HBQ9GiWz0PFw.roa
Signing time: Sat 15 Apr 2023 20:10:41 +0000
ROA not before: Sat 15 Apr 2023 20:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:8a:94:1e:58:6c:36:ca:b6:da:12:5d:cc:7f:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 20:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52ff76bed262a28b8a029ec7050f46896cf43c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:f9:b6:6b:07:16:3f:cc:9b:77:e4:de:d2:
d7:56:05:21:a0:e9:d2:3f:f6:d9:8e:45:f4:24:2b:
47:8a:08:23:70:d7:c8:7b:a0:8d:8b:2f:22:9b:0c:
1e:4f:a1:bd:73:8f:06:44:e9:cd:93:c7:14:65:ad:
52:f7:f8:dc:44:52:ea:74:e6:47:db:bc:4e:6d:ce:
de:25:1d:94:aa:0f:e5:8c:7c:ce:cc:61:0c:e1:c4:
39:bf:89:e0:6a:aa:68:bb:fe:7a:5f:8c:48:70:84:
d3:5a:fc:fc:e7:cb:c7:51:2a:77:d9:e2:81:95:dc:
ad:4f:c1:1c:89:42:5d:23:df:e1:2d:47:ce:d4:68:
2c:d8:97:6c:cd:59:2f:ec:d3:40:58:94:cb:c9:5a:
76:7f:87:0f:d4:3d:6f:22:ec:f0:8a:62:dd:99:0f:
79:9c:6e:a2:2c:42:04:bc:5a:a2:1f:12:62:ef:e0:
6d:4c:6c:85:18:aa:e6:2f:47:01:d5:8c:ed:c3:6f:
ae:7b:71:7b:b1:fe:7e:01:4b:19:de:0e:5e:16:34:
d9:81:d9:a9:a6:cb:d5:05:a1:0e:ca:72:d1:42:0c:
18:23:99:48:16:d7:c7:c0:59:0a:37:79:a7:24:5b:
73:c0:e4:be:30:77:d5:df:ac:73:28:6e:7a:7c:d4:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FF:76:BE:D2:62:A2:8B:8A:02:9E:C7:05:0F:46:89:6C:F4:3C:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uv92vtJioouKAp7HBQ9GiWz0PFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:9f:fb:4f:cf:15:58:71:2b:23:86:27:78:d2:93:94:81:f2:
60:4e:8d:c6:48:6d:13:2c:0b:ce:cb:ea:19:7d:d1:02:1e:9e:
c3:5f:9e:ee:b2:f4:52:3e:e1:e0:6b:26:54:b1:96:2f:b1:c0:
2e:90:3d:54:ac:72:a4:d6:94:27:89:61:38:d9:c5:02:7a:15:
44:a8:3a:fd:1f:3e:f3:1f:bf:68:39:08:f7:5f:5c:04:ee:55:
ca:8e:df:c6:e2:99:62:17:93:2c:b2:c7:85:03:87:d7:be:47:
00:35:5e:c4:19:70:27:55:44:1a:1c:cf:1b:93:21:f9:76:06:
75:b6:b7:4b:88:7c:f8:78:1d:78:10:04:46:5e:1c:59:84:3c:
46:0c:95:52:a2:c0:ff:64:d6:35:18:3a:be:61:9b:8e:f3:60:
1c:41:79:b4:dd:6d:e8:60:2a:c0:5b:fb:7a:a1:e2:3a:47:30:
5b:7f:4a:6f:c4:af:a3:d6:6c:fd:28:bf:97:fd:c3:04:e3:ea:
70:f0:95:d9:8f:90:60:3e:33:10:75:fe:06:6a:61:75:e4:3c:
fb:63:57:e9:ac:8e:47:b4:9e:bc:af:6d:03:86:9c:00:cb:81:
59:28:a6:df:df:a7:c5:3b:00:a1:1a:e9:4b:5f:bb:ff:f6:11:
2a:c6:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:33:01 2025 by rpki-client