Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UyS07RAnF0hN_pmwJ7dq08MLdyg.roa
File: UyS07RAnF0hN_pmwJ7dq08MLdyg.roa (raw, json)
Hash identifier: G8B9sQdC1lf9KrxKhjPmoR07sdxOOWowAdHrPkn4nUk=
Subject key identifier: 53:24:B4:ED:10:27:17:48:4D:FE:99:B0:27:B7:6A:D3:C3:0B:77:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018741B10B5F70E5194EF722BD3288685AB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UyS07RAnF0hN_pmwJ7dq08MLdyg.roa
Signing time: Sun 02 Apr 2023 11:18:54 +0000
ROA not before: Sun 02 Apr 2023 11:18:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:41:b1:0b:5f:70:e5:19:4e:f7:22:bd:32:88:68:5a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 11:18:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5324b4ed102717484dfe99b027b76ad3c30b7728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:1b:3f:5f:3f:02:d7:ba:b7:c1:e2:32:df:
45:26:e9:ce:16:4f:b4:b8:76:df:4b:8d:4c:75:ae:
17:16:e5:ae:1c:ca:09:de:57:80:5a:6f:49:82:d0:
19:41:f3:bf:8a:1d:54:5b:fb:86:a5:e5:76:f8:bd:
d4:13:e4:36:d5:1f:e2:00:db:c6:b1:1c:f9:28:33:
8f:75:48:0b:e2:8e:a9:6f:a0:b8:e8:cc:2a:6c:33:
93:38:d8:b7:79:93:9e:b9:d7:55:c1:6a:f9:66:31:
23:65:c8:20:0a:2b:af:8f:b7:79:cb:18:07:e9:45:
08:b6:46:2a:21:30:e6:b8:9e:57:1c:72:96:a9:26:
a9:27:6d:14:f1:9f:ad:71:0f:af:bf:3e:f9:35:4d:
9b:74:5e:92:a6:16:3c:75:64:05:b9:5e:61:50:b9:
92:fa:57:58:5d:00:6f:8d:88:7c:c9:4b:9e:59:31:
32:54:b4:01:47:68:93:c1:6a:7e:a0:35:38:5c:ec:
b7:4c:48:bb:e6:41:e3:2a:b5:14:31:a0:49:50:44:
5c:5f:a7:94:fe:c1:19:c9:69:33:3d:9a:f5:11:22:
59:74:5b:f2:d4:7c:9b:2c:d7:42:2f:dd:33:bc:55:
d4:81:57:68:11:a7:38:66:ed:95:b6:d2:08:64:6b:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:24:B4:ED:10:27:17:48:4D:FE:99:B0:27:B7:6A:D3:C3:0B:77:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UyS07RAnF0hN_pmwJ7dq08MLdyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:a8:08:c5:ec:52:cd:2a:8d:1e:5e:40:2e:cf:cd:dc:ac:02:
aa:3a:73:d5:32:1e:2f:99:4c:59:15:d4:9f:ce:18:28:cb:7e:
d4:70:27:e3:d6:55:97:67:11:27:f9:21:bd:7a:42:f1:79:87:
ca:94:85:bd:60:c0:88:51:2d:47:a5:7a:81:de:a5:9b:d0:c9:
7d:c8:ce:87:d0:cd:54:97:e3:45:02:91:ab:5b:f0:8f:5d:06:
f0:17:c1:8c:b3:68:16:2e:14:74:a5:8c:c3:16:09:69:ea:57:
da:50:e4:db:9b:9b:07:0a:1d:b9:b3:7a:fe:ca:44:58:fc:2d:
8a:30:e6:3b:57:f6:37:cf:72:a1:7a:fd:a0:1a:44:97:c8:59:
a4:e8:f3:ba:39:a6:a2:e2:54:88:2e:48:65:dd:b8:58:56:11:
4b:6d:5c:c3:19:71:c8:a8:c9:6e:4f:67:9f:95:9d:1a:76:e4:
55:95:25:b4:48:7f:97:92:71:7f:d1:1e:cb:c3:80:de:0f:d4:
43:21:66:73:79:e4:9b:0e:fc:b0:26:51:9e:fd:00:fe:28:a6:
bd:d9:a5:f2:7d:0a:ed:fb:67:ad:6b:8e:a9:c8:df:43:f2:01:
c9:6b:5d:60:f6:52:79:0f:82:02:67:45:ef:b0:23:17:ad:67:
76:fa:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:00:22 2025 by rpki-client