Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UwU2fJCdFccqPSc5TGE5ewt_6os.roa
File: UwU2fJCdFccqPSc5TGE5ewt_6os.roa (raw, json)
Hash identifier: 0VpSDix3KEewFs/rw5N1flCH25K1l5iYaUL6T97FBpM=
Subject key identifier: 53:05:36:7C:90:9D:15:C7:2A:3D:27:39:4C:61:39:7B:0B:7F:EA:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876E4E110CD1685CF62469052D6736DFC9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UwU2fJCdFccqPSc5TGE5ewt_6os.roa
Signing time: Tue 11 Apr 2023 03:13:42 +0000
ROA not before: Tue 11 Apr 2023 03:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:4e:11:0c:d1:68:5c:f6:24:69:05:2d:67:36:df:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 03:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5305367c909d15c72a3d27394c61397b0b7fea8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:52:c1:1e:47:c5:5a:8d:81:5b:88:a4:e8:
f7:29:b2:95:8f:b0:f2:15:8f:04:5e:58:86:93:27:
76:b1:11:22:62:c6:63:dd:25:d5:87:a8:4d:b2:c4:
81:7d:f4:33:e6:8e:25:3c:9d:39:1f:b0:2d:2b:2a:
f6:c0:dc:a2:2b:da:f3:37:43:8b:7b:f9:cf:f9:5c:
b0:8d:1f:3b:d1:5d:7b:f4:ad:5d:a5:72:a0:77:29:
a0:73:54:c4:ef:4e:09:d5:5d:f8:ef:ec:e0:4e:bb:
7e:96:7c:8d:86:36:98:fb:db:98:52:dc:4e:f0:63:
5e:e1:03:68:3f:b4:d1:c1:c8:2b:68:1c:fa:c3:fa:
94:af:49:75:ea:e9:4b:6f:c1:d6:97:ce:60:e8:3d:
04:76:08:db:a1:a8:dd:fe:e8:bf:6b:c1:80:f2:b3:
9e:77:dc:9a:1a:5f:86:0f:b2:20:7a:42:36:d7:1f:
39:63:18:15:d9:d0:92:0a:18:8d:50:e4:6e:70:da:
9a:65:e0:ef:fc:a1:dd:7a:0c:a9:2d:c1:c2:d1:c6:
72:2c:30:be:e2:37:12:8e:2f:ab:5f:1e:c2:6d:d5:
e7:35:42:00:cd:6a:3a:e1:9a:35:a1:93:aa:53:e7:
19:ee:98:2d:ab:82:12:6c:f8:62:0d:44:df:81:eb:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:05:36:7C:90:9D:15:C7:2A:3D:27:39:4C:61:39:7B:0B:7F:EA:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UwU2fJCdFccqPSc5TGE5ewt_6os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:57:eb:ed:08:44:73:61:5a:1e:53:e9:d4:e4:74:f3:c2:a7:
b7:a1:71:55:1b:7c:d4:bf:22:9a:56:6c:57:bd:f4:bc:10:6f:
b2:0f:bc:15:00:92:bd:3d:df:a8:4d:9e:38:f9:03:c3:56:94:
8c:f2:9a:d4:96:a0:bb:df:c7:7d:88:2c:6c:f9:ea:79:dd:bb:
be:dc:4a:8a:c3:0d:58:fb:06:a5:41:b6:46:b5:e4:e6:08:85:
72:d3:57:c9:41:42:c2:ef:96:33:cb:52:c3:30:35:fe:0d:d2:
90:91:15:c2:50:eb:0a:9c:18:20:14:12:92:b7:97:7a:6e:50:
5b:4b:90:76:53:7b:00:ea:b5:fd:42:92:9a:5e:52:c1:0e:e2:
42:37:71:a6:a5:83:5f:b4:a7:73:fb:6c:c6:dd:8a:ba:3c:ea:
d3:02:bc:4b:d5:cf:a9:0c:1e:41:b7:14:5a:c9:2c:28:0b:83:
c2:5d:0b:97:11:19:64:14:fe:de:c0:59:a0:26:11:1b:87:2b:
a7:f5:0d:2e:ba:3f:52:a9:5b:4d:89:32:9a:ed:e9:3b:6a:d8:
40:81:f2:6e:d0:c0:b5:b3:67:97:ac:68:cd:a3:74:c3:96:c1:
7a:a5:06:4d:c3:a1:2d:24:00:2d:1c:12:41:ce:1a:26:f7:4a:
23:1a:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:35:04 2025 by rpki-client