Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UvUWel8e_byUQoiwY4fyCKaEVss.roa
File: UvUWel8e_byUQoiwY4fyCKaEVss.roa (raw, json)
Hash identifier: PQ/krRbH3moxTzW7ARvVUSJp8ajSFbZdnlupcWrUIKA=
Subject key identifier: 52:F5:16:7A:5F:1E:FD:BC:94:42:88:B0:63:87:F2:08:A6:84:56:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871766D18E4638AB989C0049944E31C6BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UvUWel8e_byUQoiwY4fyCKaEVss.roa
Signing time: Sat 25 Mar 2023 06:13:46 +0000
ROA not before: Sat 25 Mar 2023 06:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:17:66:d1:8e:46:38:ab:98:9c:00:49:94:4e:31:c6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 06:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52f5167a5f1efdbc944288b06387f208a68456cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:99:c5:0f:39:93:ac:5d:08:81:2d:68:6d:
c9:6d:64:71:95:fd:47:6b:47:22:5a:b6:03:ed:df:
96:e6:96:b9:7d:d8:d7:0e:42:c2:5c:91:02:55:ea:
cc:e8:ca:a7:f8:32:cc:7c:90:0e:de:74:76:4a:02:
ba:12:5b:03:62:ff:ae:fb:bf:33:bc:6b:bb:2d:88:
86:01:d7:a4:1b:97:d7:23:cc:3a:34:e3:21:63:44:
4f:8c:d7:82:86:f4:03:3b:31:9c:09:54:f0:bb:ec:
f4:a8:6b:74:59:1e:25:73:00:0e:8c:45:b6:a0:50:
e5:84:5e:db:58:32:c9:8c:8e:32:77:5a:8a:3c:07:
47:16:6c:53:b3:93:2b:56:3d:5f:eb:9e:88:82:07:
8d:8c:25:0e:2b:69:8c:ff:40:d8:59:f7:c3:6d:d9:
04:07:81:30:b1:87:f2:a6:c9:ee:63:b8:68:20:33:
f4:0d:5b:7a:e1:60:08:dd:07:9f:ad:c7:3a:44:40:
01:50:c4:50:f2:9d:66:a3:3f:4c:9a:04:b4:8d:03:
5c:91:19:5b:71:b2:bd:07:b4:bf:30:fe:e6:4e:a4:
75:31:ef:fb:fa:03:39:87:88:5d:06:07:68:c1:0d:
1d:0e:33:5c:37:98:ad:62:ef:af:32:33:8f:f8:9b:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:16:7A:5F:1E:FD:BC:94:42:88:B0:63:87:F2:08:A6:84:56:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UvUWel8e_byUQoiwY4fyCKaEVss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:3a:e3:b6:cc:76:34:d7:41:5e:c4:a0:e8:6a:31:9b:5d:90:
8b:99:13:7c:b8:d1:ed:64:b6:86:78:a2:ec:65:96:f2:ad:a0:
8c:a6:c5:6c:a4:4c:01:6e:1e:9d:6c:db:f4:84:9c:5c:d2:06:
e4:6b:30:5b:9c:5e:c2:72:61:90:81:f6:4f:91:d2:4e:40:f7:
7b:42:d6:65:29:8b:73:96:93:3d:19:0e:2a:68:c2:20:31:75:
9c:21:90:9e:5b:44:bf:04:6d:8f:ba:56:b3:e3:40:2f:04:f8:
fa:c3:b3:95:0b:13:9a:2c:64:fa:f9:e8:43:c4:d6:09:ec:1c:
2e:1a:91:14:4d:2c:60:2b:b3:af:d0:37:d0:6d:83:00:8a:8e:
e5:96:2f:0d:d4:6a:c9:12:58:fb:4b:db:8e:3c:6e:88:28:73:
b0:ef:32:a7:e1:3c:b8:ed:ad:cc:6b:80:4d:ec:2f:7c:0c:bb:
f6:7b:ee:3a:fe:b4:74:cd:a8:6f:26:a2:24:17:22:ae:fb:e9:
ef:21:d5:3b:59:c0:24:5f:81:fb:c8:64:0b:bd:9d:83:79:23:
8a:2a:42:1f:e6:e5:e9:5b:1f:8a:fc:85:62:f9:a7:a1:42:95:
42:36:db:83:4d:17:f1:8e:f2:bd:c8:77:3a:87:d6:d9:3a:25:
d2:c3:29:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:09:38 2025 by rpki-client