Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uNltIeTjRasczItDVitkcGmYXr8.roa
File: uNltIeTjRasczItDVitkcGmYXr8.roa (raw, json)
Hash identifier: AeOIfXxXbydYyz1g/stjfEVuLNcciSYXdccGwFlxqJc=
Subject key identifier: B8:D9:6D:21:E4:E3:45:AB:1C:CC:8B:43:56:2B:64:70:69:98:5E:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D469D313EC415839AE9334C420FA9820
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uNltIeTjRasczItDVitkcGmYXr8.roa
Signing time: Mon 19 Jun 2023 16:08:05 +0000
ROA not before: Mon 19 Jun 2023 16:08:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:69:d3:13:ec:41:58:39:ae:93:34:c4:20:fa:98:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 16:08:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8d96d21e4e345ab1ccc8b43562b647069985ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:d5:8e:ea:69:28:2c:fa:64:fc:73:00:af:
80:8e:7a:18:47:66:66:e0:1b:67:e9:95:35:f1:ca:
8d:53:4e:30:2e:ad:08:46:7e:9b:9b:57:4d:a3:7e:
51:ae:46:e5:a1:34:11:e3:0c:98:a0:c9:58:f0:1b:
a9:4c:16:be:55:f8:a7:9f:ed:97:c8:1b:d1:05:da:
96:8e:22:f4:d5:d6:49:9c:a6:6e:b3:25:57:be:81:
b7:53:43:55:0a:ca:39:23:3e:b1:05:01:5f:4d:31:
27:01:e3:46:02:74:9c:69:39:c2:4f:a0:56:07:f3:
4a:d4:2c:d9:95:b4:72:15:60:9c:b2:35:4a:61:09:
82:02:10:ec:ab:2c:b7:d5:16:20:db:42:8d:a8:29:
25:a9:64:12:09:40:04:7d:b9:e5:b1:d8:c7:3a:30:
60:28:49:02:fb:75:fd:d7:9d:29:23:df:30:1e:f5:
9b:6c:ae:fa:73:6f:b5:64:3f:e9:53:a4:4c:87:50:
b6:b8:99:32:06:1a:0e:97:81:ab:fe:81:18:3e:c5:
86:ed:04:22:b9:f7:18:68:0d:c1:f4:ab:95:30:e0:
19:0d:8b:fa:48:3c:46:2b:da:68:e6:ba:9d:36:0a:
d8:3d:e2:2e:04:14:56:a5:5b:8c:ca:e9:42:5b:2d:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D9:6D:21:E4:E3:45:AB:1C:CC:8B:43:56:2B:64:70:69:98:5E:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uNltIeTjRasczItDVitkcGmYXr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:26:83:c9:b6:69:25:c1:6d:08:62:cb:eb:a2:ad:10:ea:7e:
cb:9a:db:11:51:7e:0d:6a:24:2a:34:d6:96:f3:2f:6e:77:3b:
7e:dc:90:4a:07:e7:96:8b:f5:90:a2:38:1f:4c:05:f1:af:32:
d5:2c:ec:d2:4f:19:03:4c:f8:39:07:ce:39:a5:5f:74:6e:d6:
36:39:f6:37:49:af:01:2e:5f:7c:89:e1:ef:07:ab:c7:21:30:
0d:4c:4a:31:66:64:a7:aa:71:c1:63:47:7c:77:73:67:b9:65:
12:74:1a:d2:4a:c7:f9:92:3c:1f:31:c7:4c:b2:b1:40:97:f4:
68:38:ae:27:65:1b:c4:49:1c:61:f6:e9:b3:74:b3:96:c4:ae:
7f:94:3e:75:10:f5:e3:d6:04:71:28:4b:cd:0e:4d:36:11:3e:
76:fb:6a:3a:20:fc:53:f2:cc:e6:d6:89:77:fe:33:2a:c2:7f:
5c:5f:3a:bc:e5:6d:1b:e4:7c:fd:46:03:c2:c9:a4:0b:07:c9:
fd:98:23:36:f8:3e:0c:5c:fe:d8:8a:4a:8f:8e:d3:37:e2:48:
8a:e4:f5:a9:69:62:d6:a3:e0:23:d7:cd:cf:f9:10:fc:bb:fc:
92:17:87:a9:22:86:d8:5a:a1:66:73:2c:3e:ea:bf:21:5d:ee:
bb:8d:34:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:10:38 2025 by rpki-client