Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_uqmZDWd23-51bMzKperk2XznZ0.roa
File: _uqmZDWd23-51bMzKperk2XznZ0.roa (raw, json)
Hash identifier: WtfVPwR5ozdvNkkThO37+XbzOovAZaW3u7j1uRjBqO8=
Subject key identifier: FE:EA:A6:64:35:9D:DB:7F:B9:D5:B3:33:2A:97:AB:93:65:F3:9D:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FD31393D163BE37B48D83BFF96C56090
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_uqmZDWd23-51bMzKperk2XznZ0.roa
Signing time: Wed 16 Aug 2023 07:13:28 +0000
ROA not before: Wed 16 Aug 2023 07:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:31:39:3d:16:3b:e3:7b:48:d8:3b:ff:96:c5:60:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 07:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feeaa664359ddb7fb9d5b3332a97ab9365f39d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:d3:a3:0e:56:ad:24:c8:83:b8:a9:5d:0a:
4d:49:f9:6a:1c:e6:7e:3b:e9:af:12:61:ae:0a:5c:
35:d7:46:61:56:46:e8:36:c6:e2:2f:e0:f3:9e:33:
c5:63:58:0e:91:3f:56:a9:0a:4d:64:01:45:b6:6a:
68:32:38:d9:77:05:7e:ca:6a:4e:71:4e:90:a0:7a:
f6:50:0a:39:b9:81:ae:98:b8:f3:19:70:2a:fe:ba:
b0:80:a6:01:f5:5b:25:3b:74:df:09:c7:83:37:ce:
0e:82:87:fc:ca:f1:7d:b1:7a:61:49:20:a5:83:da:
9b:2b:69:be:b3:ed:f1:d9:2a:f9:2f:ed:05:77:b2:
9b:71:b0:52:df:61:85:62:2d:c8:97:8c:3c:2d:0e:
9a:50:28:57:53:32:a7:f5:98:bd:c0:e0:d8:7f:7a:
52:09:1d:be:43:90:43:b7:c8:db:50:f1:2d:64:04:
83:83:70:a3:99:5f:07:d1:11:e4:55:6c:8e:78:b9:
ee:d5:7b:cd:e9:59:86:30:2e:ef:16:97:17:79:99:
e8:13:b1:63:6c:f4:fe:7b:55:3b:e1:97:99:27:53:
6e:e8:9a:d3:6e:dc:54:bc:b3:46:50:80:fa:18:73:
34:eb:ed:1c:2a:56:5e:ac:c5:02:d5:b7:b6:77:b9:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:A6:64:35:9D:DB:7F:B9:D5:B3:33:2A:97:AB:93:65:F3:9D:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_uqmZDWd23-51bMzKperk2XznZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:fd:6f:08:fd:94:ea:12:7c:5c:bb:10:e6:61:6a:86:42:47:
04:64:6a:4a:b1:8e:a1:59:ea:53:96:ce:8b:4c:a2:6f:34:0f:
09:8a:68:fa:f0:f2:b0:0f:c1:24:8a:fe:00:8a:10:bc:f1:98:
89:ce:04:2c:dd:cd:1f:07:2c:9f:7e:1f:9f:d9:64:23:7d:a9:
65:89:0c:0b:cd:fd:12:e0:6b:96:be:7e:eb:07:4c:72:2c:b4:
64:3d:f1:d0:53:5e:d1:0e:b6:bd:5b:56:e0:cc:a3:3a:47:6f:
94:83:c0:8a:88:46:e3:dc:21:45:ac:3b:6d:09:0d:4c:ee:25:
3f:d6:63:fa:e2:89:cf:a4:7e:f7:c2:3a:fa:b1:66:60:7b:5e:
7f:ea:55:c4:c2:8b:54:8d:35:92:4c:16:ab:7a:86:54:ad:6b:
77:61:25:75:d6:7a:89:45:71:ae:90:de:8d:c9:1a:88:a3:68:
c3:5c:08:9a:63:15:b4:32:98:db:2f:fd:fb:a2:99:d6:95:d7:
bb:3c:29:20:e4:0c:25:e1:b8:11:57:14:50:d6:19:c6:f4:ef:
41:ee:04:79:a4:57:3c:7d:24:2b:83:85:58:46:68:16:44:cb:
ee:5e:16:29:f7:b1:96:bf:32:6b:45:d3:5d:6a:c5:c4:cf:05:
08:5a:7f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:45:41 2025 by rpki-client