Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uOOTX2o2qZYSOcZYuny5rKXFmDc.roa
File: uOOTX2o2qZYSOcZYuny5rKXFmDc.roa (raw, json)
Hash identifier: tM31enX0cJv8ocftgBbrz4CfPZnZMTkn3IqpBEIx6fA=
Subject key identifier: B8:E3:93:5F:6A:36:A9:96:12:39:C6:58:BA:7C:B9:AC:A5:C5:98:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188668EF48BB5D47FDD827C0C8B08261591
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uOOTX2o2qZYSOcZYuny5rKXFmDc.roa
Signing time: Mon 29 May 2023 08:10:24 +0000
ROA not before: Mon 29 May 2023 08:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:8e:f4:8b:b5:d4:7f:dd:82:7c:0c:8b:08:26:15:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 08:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8e3935f6a36a9961239c658ba7cb9aca5c59837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:5b:eb:fa:40:4a:50:9e:22:8b:94:9c:d3:
f3:66:21:a4:d8:0c:f6:96:77:82:49:01:86:ac:22:
c9:3d:25:03:91:73:25:77:17:d5:87:9e:17:14:0f:
49:36:8c:95:72:11:a0:c4:8c:0d:f5:36:09:41:eb:
35:6c:46:2c:6d:c6:4f:6b:e0:d4:e5:bc:44:9d:1d:
65:06:0b:5b:d7:36:86:11:5e:ed:06:b8:1a:48:87:
8e:7e:eb:f2:c8:b4:33:7c:07:47:33:d8:d7:e0:f6:
54:5d:31:92:df:5b:26:ae:07:81:e1:82:13:f6:6f:
e5:3e:1c:a1:f6:1d:e1:3d:df:e8:b5:49:bf:56:ae:
bf:6d:f9:f5:47:c4:ae:1d:f9:20:30:84:82:5a:cc:
09:18:f7:3c:9f:d8:0b:65:fc:f4:98:05:76:f2:f9:
d2:8e:3e:b0:a8:18:ff:42:0f:71:d4:18:c9:7b:b9:
ae:9c:cb:01:cd:08:1c:da:63:a3:b0:5a:e8:44:a6:
0a:91:b1:f2:c9:5e:96:10:25:5b:6b:fb:fe:ce:0b:
93:b9:59:30:dd:3d:29:d0:2c:ef:a4:ac:0a:35:d4:
98:22:52:36:ff:ea:bb:f4:8e:b6:cd:02:a6:2d:94:
ed:a7:a6:45:75:fb:dc:ee:37:17:8b:fc:90:40:a2:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:93:5F:6A:36:A9:96:12:39:C6:58:BA:7C:B9:AC:A5:C5:98:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uOOTX2o2qZYSOcZYuny5rKXFmDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:54:80:bb:7e:4f:8d:7f:d5:11:e5:1c:f3:39:47:db:88:f8:
e2:b1:d1:99:e3:b5:8c:f0:71:40:4d:25:0f:90:ee:d1:11:77:
36:06:54:27:79:7e:94:5c:36:e9:06:3d:81:77:60:27:60:ef:
48:ae:17:bf:cc:03:54:d4:ce:cb:cc:7c:76:b0:35:f0:42:24:
92:a5:89:f6:f3:22:15:64:73:7b:5b:29:9d:02:aa:99:a0:de:
b7:5f:eb:80:78:ed:79:8b:c8:7c:ca:a7:f5:ae:cd:de:c9:62:
79:df:87:86:87:9f:cc:e0:bb:bb:d9:70:72:4a:b6:bc:0a:6b:
27:68:69:3d:f3:4d:46:12:d6:83:d4:68:64:25:8a:b5:dd:62:
cd:e5:7b:5a:74:22:44:7c:51:1c:ff:c6:de:30:08:3f:78:ec:
2c:85:2b:40:df:bb:ee:91:a9:82:cb:93:51:ce:91:64:89:a7:
f4:a0:87:dd:57:42:35:2a:2f:50:52:71:4e:2d:cc:0c:b7:79:
7f:c3:05:3e:62:cf:94:1d:5e:32:9a:41:df:b0:be:ac:65:eb:
4c:f5:42:9e:02:b4:2c:9c:03:77:45:5b:7a:e7:36:65:1e:f1:
81:1e:aa:55:59:ce:ca:94:81:6f:9f:38:68:e5:32:00:01:47:
5b:b0:12:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:13 2025 by rpki-client