Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rUhI5LXY9munMeJ64SnASanpXN4.roa
File: rUhI5LXY9munMeJ64SnASanpXN4.roa (raw, json)
Hash identifier: XoCnPr21BC/XwHgWbk5d92JFsHrDAx6+/UXMWYVckZs=
Subject key identifier: AD:48:48:E4:B5:D8:F6:6B:A7:31:E2:7A:E1:29:C0:49:A9:E9:5C:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B06A9AEC80C13ED887D438A1588564D2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rUhI5LXY9munMeJ64SnASanpXN4.roa
Signing time: Sun 05 Mar 2023 06:17:01 +0000
ROA not before: Sun 05 Mar 2023 06:17:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b0:6a:9a:ec:80:c1:3e:d8:87:d4:38:a1:58:85:64:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 06:17:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad4848e4b5d8f66ba731e27ae129c049a9e95cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:2d:39:59:66:97:3c:cd:41:38:84:1a:f1:
14:95:bb:68:99:bc:95:00:7f:d3:79:76:76:ec:e2:
7e:80:fd:84:06:0c:9b:d1:74:fe:a2:a8:33:dd:8d:
bd:ce:ae:50:b1:c7:93:86:82:32:32:b1:f3:05:a5:
73:ee:58:a4:7d:d7:9d:da:fe:d2:fa:88:09:e9:67:
14:a5:50:e3:f7:b7:bd:58:ba:da:27:a8:46:2e:1f:
1c:42:a8:23:8a:69:20:4b:07:45:a9:c3:4e:c8:e6:
ae:b9:c1:ce:bd:36:48:28:f6:e7:d5:40:9f:a7:a4:
79:ba:74:d5:af:23:c3:05:7c:de:b4:22:75:47:16:
ba:92:65:fd:47:e9:02:dc:18:22:2b:69:3d:91:76:
b1:5a:38:d2:8a:94:90:74:e0:21:96:ea:67:4d:60:
11:55:90:69:66:de:5e:db:fb:f4:6b:d5:ea:9c:2d:
5e:93:c8:47:cd:43:d2:1c:9e:cf:a0:2d:3b:e8:e8:
12:f2:e8:fc:ff:41:70:28:2d:45:b5:06:73:82:c2:
e4:e9:b7:38:60:ed:5f:bd:5c:e8:8d:43:35:21:d2:
74:56:55:64:09:da:e9:7d:7e:fc:6c:8a:d3:72:c0:
44:5a:91:f0:8e:fa:5a:4f:74:83:22:ff:61:0c:c7:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:48:48:E4:B5:D8:F6:6B:A7:31:E2:7A:E1:29:C0:49:A9:E9:5C:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rUhI5LXY9munMeJ64SnASanpXN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:aa:85:66:e4:80:37:24:4a:7e:59:04:e1:b6:8f:20:9f:b0:
99:e6:9c:37:54:66:9b:30:bb:c1:67:ba:a6:f9:ab:81:38:af:
bb:e1:85:c5:f9:91:78:4a:ff:3c:be:a4:3a:d0:48:93:8b:3f:
c6:d1:76:6b:04:3f:6b:d8:87:39:48:83:7d:8e:40:63:dd:b2:
6b:0f:1e:ef:0a:47:5e:af:b3:6b:32:9d:ee:24:4a:42:49:7d:
8f:fc:37:79:91:76:b6:5a:be:5d:e9:69:18:65:84:ac:33:47:
45:c9:1d:70:e3:38:9e:ea:7b:02:74:f4:f5:0b:14:32:14:5c:
4d:f8:63:5f:e1:92:a6:59:01:08:b6:ff:35:e5:08:de:42:a7:
b1:b2:f7:6e:ae:bb:c8:a3:11:49:11:7f:d4:e7:e8:41:ee:e1:
be:57:8e:ca:15:a8:7d:08:b8:f6:cf:30:0e:ce:ed:8d:9a:7d:
12:fd:5e:9a:86:19:9d:87:ee:7f:58:ed:56:96:3b:e8:3c:de:
5d:82:6e:8a:25:79:27:79:03:ec:9f:4c:2f:d2:49:7b:b1:4f:
f4:62:6f:03:7a:b2:c6:ee:04:13:43:6c:af:74:5a:9f:9f:b6:
a6:3c:12:18:cf:56:29:29:d1:85:e7:54:b5:42:9c:96:30:f5:
6f:bc:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:58 2025 by rpki-client