Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uCAPbcKVv_vlj-15rcSuIUPr8gQ.roa
File: uCAPbcKVv_vlj-15rcSuIUPr8gQ.roa (raw, json)
Hash identifier: nne9YUOiQw1k7n7Vo443t1OeLw/EHaBaHSkXfmNeoWQ=
Subject key identifier: B8:20:0F:6D:C2:95:BF:FB:E5:8F:ED:79:AD:C4:AE:21:43:EB:F2:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888FBD467C9617785AD01239D303691A43
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uCAPbcKVv_vlj-15rcSuIUPr8gQ.roa
Signing time: Tue 06 Jun 2023 08:05:26 +0000
ROA not before: Tue 06 Jun 2023 08:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:8fbc:6b0d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:bd:46:7c:96:17:78:5a:d0:12:39:d3:03:69:1a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 08:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8200f6dc295bffbe58fed79adc4ae2143ebf204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:e5:f8:6b:b4:9b:9f:e6:8c:3b:57:de:2e:
24:4e:4e:2e:9e:0e:59:66:ca:b0:24:28:2b:eb:1b:
f9:49:58:47:02:a6:31:90:61:f4:57:23:e9:e7:c2:
96:61:11:43:d9:c6:9a:d6:0f:50:24:10:c1:78:88:
cb:cc:9d:17:e5:b3:2a:e9:3e:e0:c1:9e:e8:1f:e5:
42:79:7c:10:2b:46:03:4f:48:6f:fe:c2:d9:be:45:
9a:e1:fd:e6:b7:d7:fc:ea:7a:39:9c:2c:62:42:80:
82:42:a7:63:1e:50:01:ed:bb:a1:47:bb:f9:55:96:
06:88:4a:f5:d7:63:35:d2:ed:50:40:dd:13:4b:8b:
ef:a4:2b:ab:13:34:24:ee:48:9c:65:4b:bd:7c:60:
7d:65:d8:de:f8:aa:cb:72:1f:be:92:b3:45:f2:95:
cf:29:ac:d7:f9:1c:b4:b9:40:b2:c2:3d:ec:50:d6:
ad:f6:71:5d:1d:c5:93:70:04:4b:c4:74:4e:1e:3d:
85:62:5a:79:e2:cf:47:2c:23:3b:c8:74:f0:a1:7d:
56:46:4a:f4:71:fb:b4:98:b2:6f:0d:e2:ac:03:88:
09:f9:9f:0c:81:c4:0c:27:ed:98:87:fc:e5:4b:da:
96:f9:44:c6:9a:e4:5d:eb:90:3b:29:ec:75:fd:30:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:0F:6D:C2:95:BF:FB:E5:8F:ED:79:AD:C4:AE:21:43:EB:F2:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uCAPbcKVv_vlj-15rcSuIUPr8gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:54:83:28:a3:75:fa:a1:fd:97:9b:37:bc:35:f8:d0:15:a7:
1b:3d:21:07:16:f3:e7:1d:f1:97:b6:6e:fa:e4:47:f6:0a:ed:
c8:db:ac:3b:1c:ee:cb:8b:37:82:0b:6e:fa:59:17:e6:8c:0a:
df:2a:d8:7f:79:60:ab:82:e9:63:db:5a:c3:52:78:c3:ed:f3:
16:b1:e6:06:2c:58:2d:63:73:9d:ec:da:ac:8d:10:e9:7e:a8:
f0:85:be:06:db:06:f3:c5:98:c3:af:67:9e:3b:06:8f:f8:cf:
a9:7b:ce:62:e1:7b:cd:f1:38:79:f0:8a:2e:4b:33:35:97:23:
a4:e8:80:6d:be:63:ac:5a:a4:75:a3:4a:c4:a3:2a:26:18:6d:
ab:52:12:c4:5e:1b:76:b5:59:54:34:40:de:0d:15:da:3f:87:
90:81:35:55:9d:e6:92:43:ff:1d:7b:36:72:76:c6:e2:51:80:
19:e0:bb:a5:80:67:4e:15:13:9a:9b:ec:3f:9f:eb:95:42:cd:
cc:59:df:3c:86:c6:09:14:9c:8e:f3:d2:71:08:80:57:a1:9c:
37:f3:68:93:91:40:2b:46:16:fd:12:9e:d1:c9:e2:ca:0e:35:
7f:e0:be:e6:32:b7:07:fa:34:37:9b:93:cb:a3:cb:ab:e0:9b:
65:7d:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:56:23 2025 by rpki-client