Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uBD6zYn1BV2llj5lPu7ioKdvDpU.roa
File: uBD6zYn1BV2llj5lPu7ioKdvDpU.roa (raw, json)
Hash identifier: ZA0ygzWOIiSpy5ZhddjpvTKPPQaXgzuBsjh0+6RoqA0=
Subject key identifier: B8:10:FA:CD:89:F5:05:5D:A5:96:3E:65:3E:EE:E2:A0:A7:6F:0E:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187665559DF8EACFFA19458600A26A429EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uBD6zYn1BV2llj5lPu7ioKdvDpU.roa
Signing time: Sun 09 Apr 2023 14:04:42 +0000
ROA not before: Sun 09 Apr 2023 14:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:6654:e371/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:66:55:59:df:8e:ac:ff:a1:94:58:60:0a:26:a4:29:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 14:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b810facd89f5055da5963e653eeee2a0a76f0e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:29:77:03:d4:bd:8a:50:d1:11:d7:bf:5f:12:
23:7a:63:99:36:70:f0:ef:4a:11:8d:35:51:93:da:
4e:79:14:25:4e:6e:4e:db:f4:32:09:21:54:d7:7b:
c9:bc:23:b3:ec:3d:cb:1b:15:51:20:aa:0a:e5:39:
6f:a9:d8:7c:7e:e0:d2:2e:7e:3b:e0:50:91:b6:38:
15:33:40:88:83:c2:60:ab:5e:82:bf:e2:07:73:00:
98:d5:97:90:97:ab:88:1a:54:de:d5:48:14:c6:b2:
7b:3a:83:be:5e:72:e2:23:0c:51:f6:4c:4e:f8:a4:
4b:d4:c2:72:3a:6a:64:e4:44:3e:76:a5:5e:2f:87:
21:90:89:ee:6f:35:29:1a:25:68:ca:5b:29:5d:54:
3f:13:0b:56:d5:e6:65:17:c4:e7:e6:2b:de:85:cd:
49:4a:ee:45:68:de:57:16:91:99:40:00:4b:3e:9e:
5b:e8:df:6c:90:74:8b:e5:0e:f7:a0:b1:9a:a2:53:
75:97:26:8b:04:13:65:37:dc:e4:98:42:65:04:83:
f1:41:47:f0:d9:6a:7d:05:c4:48:33:2a:b1:94:fe:
d7:d5:1e:33:2d:36:5f:48:a1:34:c5:ab:01:98:e9:
b5:34:5a:f1:7f:bd:d1:34:3f:44:a6:02:b5:04:9d:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:10:FA:CD:89:F5:05:5D:A5:96:3E:65:3E:EE:E2:A0:A7:6F:0E:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uBD6zYn1BV2llj5lPu7ioKdvDpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:a3:2d:70:c8:bc:c4:23:71:9b:93:9a:4f:45:d9:3d:2e:09:
d4:b4:9f:c7:7d:00:9a:62:77:e1:63:f7:d9:48:db:de:7f:6d:
9a:29:91:38:96:66:0f:5c:e9:f9:f5:5b:6b:06:c0:55:38:16:
9e:a9:15:1b:f0:dd:e3:fa:ee:ab:d9:37:cc:f3:e7:d4:ce:76:
29:7b:88:e5:ee:cf:37:5c:06:cc:80:91:fc:cb:7e:1c:69:c0:
f6:22:f3:e4:3a:00:b4:47:f1:44:9d:a4:7d:0f:8c:d5:8b:6c:
4c:06:60:bf:9e:c8:bf:8e:28:68:9b:cc:a9:a1:7b:c8:b4:a3:
30:ca:2f:44:5d:6c:9b:ed:c1:e3:28:ee:b2:28:e6:09:dd:8c:
89:16:48:50:8f:1e:38:b3:20:59:0d:d0:4b:d8:6c:2e:59:cc:
ee:31:af:35:a2:f7:de:2e:36:70:36:47:f9:ca:e6:3b:67:fe:
37:89:54:3d:47:23:2c:e4:21:56:e0:4f:15:a8:0f:79:e4:79:
b1:96:8f:d9:25:f9:3a:fc:d6:4b:19:55:43:c6:c4:c0:7a:be:
6d:2c:3a:1c:a6:e1:96:71:d8:06:1d:b1:10:eb:4b:26:9f:2d:
18:84:08:a7:48:46:42:53:68:a0:90:25:e9:46:cf:c3:2f:0c:
4a:80:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:11:12 2025 by rpki-client