Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uIAq-pO286bSXog2liDV5X5O6lE.roa
File: uIAq-pO286bSXog2liDV5X5O6lE.roa (raw, json)
Hash identifier: V9QpHd9TgKrQB1fZe47O4Quu8kGDHarZp2izJeNwdeQ=
Subject key identifier: B8:80:2A:FA:93:B6:F3:A6:D2:5E:88:36:96:20:D5:E5:7E:4E:EA:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B5F26BF2260B24A537EA9DAAF661C708
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uIAq-pO286bSXog2liDV5X5O6lE.roa
Signing time: Tue 13 Jun 2023 18:09:03 +0000
ROA not before: Tue 13 Jun 2023 18:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:f2:6b:f2:26:0b:24:a5:37:ea:9d:aa:f6:61:c7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 18:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8802afa93b6f3a6d25e88369620d5e57e4eea51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:55:eb:73:b5:32:dc:b4:4f:57:92:60:70:
92:3d:b8:e6:79:18:b7:7e:43:fe:ba:74:93:eb:59:
11:74:8c:ac:ce:c3:dd:8c:8f:84:e0:ae:1a:d0:5e:
85:dd:94:3d:21:28:eb:69:a9:35:68:1c:ac:6d:8d:
91:5a:cd:fa:44:0a:0f:63:ff:13:4e:1a:cb:37:7f:
68:f8:81:a6:63:ce:ec:ce:69:4d:7d:9a:c1:d6:ec:
ca:79:07:74:db:46:c9:d1:e8:3e:7b:2b:9e:0c:03:
81:f6:13:48:bb:61:8e:17:25:93:7a:87:82:93:8f:
a5:01:82:f7:90:41:13:2e:58:ca:59:26:5b:e1:51:
33:32:82:39:a5:5f:41:5a:26:10:7d:26:d7:09:5c:
13:9f:51:61:6c:a3:2e:34:22:e7:f8:45:fe:71:fc:
63:eb:6a:7f:8d:75:b8:25:d1:4c:50:3e:cf:4d:db:
16:3a:72:3b:18:e6:71:52:48:0d:05:78:b2:54:8a:
cc:cc:be:97:2c:d9:bb:2e:95:f1:5b:3c:87:49:7a:
2a:44:e2:58:ab:d1:76:5b:1e:1d:fc:a3:67:d7:37:
aa:6b:3f:70:5a:3a:0a:af:35:6f:10:f0:0e:12:df:
1b:2d:3d:78:94:f1:8e:59:02:6c:95:ee:f4:24:fc:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:80:2A:FA:93:B6:F3:A6:D2:5E:88:36:96:20:D5:E5:7E:4E:EA:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uIAq-pO286bSXog2liDV5X5O6lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:5a:ae:e3:ea:d4:b1:7d:5c:fd:91:6d:9e:35:cb:0b:d4:92:
b6:cc:b5:d4:68:21:cf:f8:68:61:5b:22:4e:c7:f0:80:a7:0a:
e5:8d:ca:0b:9c:39:b9:db:0f:82:13:19:47:34:c6:0b:74:f3:
8b:a3:ea:a0:e7:c2:d4:15:ad:7b:aa:13:2e:46:9e:f5:99:08:
bb:d5:1f:6d:b2:3c:33:e1:7d:3f:ec:43:42:4b:06:04:7a:e5:
12:d1:38:92:32:42:b8:a2:fb:8d:3a:d5:0a:67:88:d6:8f:86:
26:f4:0a:ad:44:b5:b5:28:16:03:af:48:3e:28:c8:2a:ce:16:
cc:da:22:41:f7:1b:80:42:f7:7f:45:d8:18:55:f5:d6:56:37:
90:71:1c:e4:6d:e8:69:d0:33:23:c5:d8:27:98:7d:ff:ca:05:
b2:40:23:bb:69:8f:30:ba:86:d1:5d:fa:2f:64:8c:b3:f6:9b:
0e:38:8a:bb:5e:24:52:bf:bf:91:12:79:01:7f:40:ae:d1:da:
a0:3e:99:41:cf:97:eb:5a:57:96:79:01:65:0d:5d:20:a3:f3:
59:84:52:33:ad:5a:ee:08:ad:b1:02:9e:e6:88:97:57:aa:13:
e1:08:b0:d8:a6:f1:72:a9:fb:39:48:78:dc:ed:89:ea:5d:88:
cb:cf:5a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:40 2025 by rpki-client