Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uCEVdhGgLsUcwsKpyYa1IrdZu4A.roa
File: uCEVdhGgLsUcwsKpyYa1IrdZu4A.roa (raw, json)
Hash identifier: VgvMcWVsNU0KqsV8Tgeib3p4IIqMBkcFoU8mW1NrSsQ=
Subject key identifier: B8:21:15:76:11:A0:2E:C5:1C:C2:C2:A9:C9:86:B5:22:B7:59:BB:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889932A117F41F7D6B6F80394621901C31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uCEVdhGgLsUcwsKpyYa1IrdZu4A.roa
Signing time: Thu 08 Jun 2023 04:10:12 +0000
ROA not before: Thu 08 Jun 2023 04:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:32:a1:17:f4:1f:7d:6b:6f:80:39:46:21:90:1c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 04:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b821157611a02ec51cc2c2a9c986b522b759bb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:0e:7b:1c:72:01:74:27:2a:65:de:bd:15:
b9:48:40:90:33:a2:10:10:26:6d:6c:da:0b:51:64:
c8:f2:da:59:d4:c5:52:a1:e1:9e:3c:b2:c6:66:58:
98:22:c9:94:3c:6c:e6:7d:53:a5:13:e3:9c:32:4c:
c8:de:7b:43:c8:20:df:ce:c9:ea:fa:2c:4c:2d:f1:
9f:9a:85:47:42:27:b8:97:cb:c4:85:b1:65:b1:bd:
3e:10:f9:ba:6d:5a:02:0d:fa:c1:03:cb:c0:d5:4e:
ce:a2:cb:20:72:a4:bf:6e:fb:07:cf:41:bf:0d:09:
0b:06:be:86:45:95:e8:9c:43:af:f1:85:c1:7a:3a:
f0:85:16:91:69:f1:89:cd:55:e7:50:3a:33:60:16:
e6:85:7b:51:27:42:19:41:7d:79:1d:41:6b:a2:99:
aa:fc:64:13:7b:55:b9:0c:ba:44:88:c7:60:d6:1c:
ba:10:67:82:c0:64:2e:94:4a:4c:9a:1f:d3:58:32:
3b:c8:b9:b9:d1:bf:30:ba:3a:84:77:2c:6d:b5:ee:
01:a6:50:e4:a3:6f:fd:a9:f5:fc:87:d5:26:e9:a7:
0d:83:82:10:69:3a:82:76:b2:16:6f:68:d2:51:23:
93:29:41:05:e5:00:a9:00:ad:85:05:42:7b:4b:c7:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:21:15:76:11:A0:2E:C5:1C:C2:C2:A9:C9:86:B5:22:B7:59:BB:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uCEVdhGgLsUcwsKpyYa1IrdZu4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:47:8c:7b:12:7c:27:40:ea:6a:c0:66:98:6c:fa:b0:04:43:
a0:c4:b7:62:fb:fa:7c:96:27:6f:7b:17:e9:86:a7:18:22:48:
88:37:07:70:e7:22:96:66:e5:9b:42:51:ce:c6:9b:e8:4b:24:
83:01:4e:e6:e2:4d:3d:d3:8a:86:62:bf:54:80:c4:23:22:98:
75:61:6b:9a:56:b1:55:76:ea:9d:af:b5:2a:c9:57:91:c6:ba:
ac:38:a0:a5:1a:48:9a:2a:41:b0:6d:2a:36:ef:34:10:97:d2:
07:8e:25:92:52:f3:77:c6:e0:25:70:35:59:f0:f2:d1:ce:a5:
6c:13:a1:93:d7:dd:74:ae:52:77:8f:df:4c:f8:3a:ec:44:cd:
ed:e0:10:db:7c:9b:82:84:0d:98:a6:7e:c3:ed:2a:14:01:1e:
28:26:58:5a:45:48:94:15:10:0c:86:94:89:9c:87:a4:3b:cf:
43:bf:e6:3b:3b:59:0c:c5:1f:de:11:02:5d:3f:a3:c7:3c:38:
19:42:8b:d0:c8:d8:1a:1f:59:2a:2b:65:ef:32:63:4e:1d:9d:
22:32:59:35:7b:1c:4b:46:7a:20:bf:a9:16:6f:3e:63:ed:41:
0d:5c:02:a8:9e:a9:47:05:b0:69:8c:12:57:99:82:c2:c4:35:
4b:dd:d9:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiZMqEX9B99a2+AOUYhkBwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA4MDQxMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODIxMTU3NjExYTAyZWM1MWNjMmMyYTljOTg2YjUyMmI3NTliYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFIOexxyAXQnKmXevRW5SECQM6IQ
ECZtbNoLUWTI8tpZ1MVSoeGePLLGZliYIsmUPGzmfVOlE+OcMkzI3ntDyCDfzsnq
+ixMLfGfmoVHQie4l8vEhbFlsb0+EPm6bVoCDfrBA8vA1U7OossgcqS/bvsHz0G/
DQkLBr6GRZXonEOv8YXBejrwhRaRafGJzVXnUDozYBbmhXtRJ0IZQX15HUFropmq
/GQTe1W5DLpEiMdg1hy6EGeCwGQulEpMmh/TWDI7yLm50b8wujqEdyxtte4BplDk
o2/9qfX8h9Um6acNg4IQaTqCdrIWb2jSUSOTKUEF5QCpAK2FBUJ7S8fxAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLghFXYRoC7FHMLCqcmGtSK3WbuAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdUNFVmRoR2dMc1Vjd3NLcHlZYTFJcmRadTRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALNHjHsSfCdA6mrAZphs
+rAEQ6DEt2L7+nyWJ297F+mGpxgiSIg3B3DnIpZm5ZtCUc7Gm+hLJIMBTubiTT3T
ioZiv1SAxCMimHVha5pWsVV26p2vtSrJV5HGuqw4oKUaSJoqQbBtKjbvNBCX0geO
JZJS83fG4CVwNVnw8tHOpWwToZPX3XSuUneP30z4OuxEze3gENt8m4KEDZimfsPt
KhQBHigmWFpFSJQVEAyGlImch6Q7z0O/5js7WQzFH94RAl0/o8c8OBlCi9DI2Bof
WSorZe8yY04dnSIyWTV7HEtGeiC/qRZvPmPtQQ1cAqieqUcFsGmMEleZgsLENUvd
2TE=
-----END CERTIFICATE-----
Generated at Thu May 1 06:23:21 2025 by rpki-client