Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uQ1qDA3lPvuW8GBrrFIk7GAzxkc.roa
File: uQ1qDA3lPvuW8GBrrFIk7GAzxkc.roa (raw, json)
Hash identifier: kNx7u7XoLEy9wgndxj59TM/IuSEmjUi5L96s0lGmmhk=
Subject key identifier: B9:0D:6A:0C:0D:E5:3E:FB:96:F0:60:6B:AC:52:24:EC:60:33:C6:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A121B3DB71DDF1901DD5B5272388990F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uQ1qDA3lPvuW8GBrrFIk7GAzxkc.roa
Signing time: Sat 29 Jul 2023 10:11:27 +0000
ROA not before: Sat 29 Jul 2023 10:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a1:21:b3:db:71:dd:f1:90:1d:d5:b5:27:23:88:99:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 10:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b90d6a0c0de53efb96f0606bac5224ec6033c647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ed:cd:27:80:c9:82:cf:fc:6d:36:a5:c7:05:
64:81:32:d7:f1:a5:66:7c:c0:b8:11:09:d8:23:4b:
eb:08:ee:83:fb:2e:6f:13:cb:d3:15:05:1f:75:f8:
59:72:ac:06:e1:a9:87:b4:b0:64:c0:3c:c7:7e:32:
62:86:ba:e5:72:6e:17:4a:02:21:a2:82:42:2f:c0:
81:e6:1e:0b:75:f1:36:f4:3d:e8:35:0e:2d:75:75:
15:1f:7c:fd:71:c8:24:0e:e8:69:bb:e3:91:df:d4:
c3:c1:d1:49:b7:9e:b0:2e:f9:5d:c6:58:d8:13:5e:
2a:20:fa:fe:66:ea:16:8f:f9:14:09:a9:03:3f:8d:
52:cd:ec:27:83:da:8d:03:12:b3:24:80:53:03:60:
d7:f5:96:69:80:bb:f1:22:58:97:5b:c5:7e:ba:46:
f8:e8:b1:df:43:40:3f:86:69:9e:fa:f9:55:8e:10:
18:fb:7e:59:ae:8b:85:24:84:af:6c:57:0b:84:75:
a8:6a:09:73:6b:db:7b:e6:45:fe:f0:48:2b:95:f4:
73:72:9d:6e:06:4f:9f:7a:27:ad:56:c4:6e:44:99:
ab:10:d1:72:76:d4:eb:45:e3:60:cb:76:d0:13:69:
20:c2:47:27:8b:09:b4:9b:31:f7:92:e3:f9:38:54:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0D:6A:0C:0D:E5:3E:FB:96:F0:60:6B:AC:52:24:EC:60:33:C6:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uQ1qDA3lPvuW8GBrrFIk7GAzxkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:86:82:a1:8c:c9:35:a8:19:e4:63:3e:ff:a7:71:40:8b:88:
63:d9:9b:95:04:31:b0:d6:f9:dd:e9:e7:95:4e:dd:c6:af:0d:
74:24:c2:e0:c6:a2:10:a5:5a:3b:7a:17:ba:e5:c0:38:be:df:
5a:13:15:eb:11:39:2c:8e:27:0e:53:e0:b6:e3:f8:4c:c0:ba:
37:21:f0:04:bc:79:20:4c:cd:7e:e6:a5:e1:5c:30:92:69:12:
dc:f0:8f:02:99:4a:c7:fa:a7:6f:a6:32:7d:98:89:10:b3:ba:
72:bc:a1:dd:ad:13:34:f8:68:38:eb:4a:ad:50:c7:7f:8a:d1:
e4:13:69:7c:61:2e:45:71:39:79:65:4c:1c:fc:38:59:ef:1f:
31:ef:3c:54:ad:3d:06:06:8d:01:3c:48:63:af:b0:13:60:93:
85:e5:b4:13:e1:23:6d:58:b6:a5:e5:b0:a2:3f:79:9c:80:5e:
a7:95:2d:e8:91:d1:bd:6d:d4:f8:45:c4:a5:34:d5:65:75:fb:
8a:aa:39:67:76:8d:78:84:a6:a2:cc:c5:58:18:b4:1c:3b:d8:
42:08:d9:fb:9c:b8:16:43:1b:95:29:92:8e:bd:9e:c0:bf:3c:
43:db:30:58:96:ff:55:27:64:2b:80:8c:c4:00:c4:f7:d9:91:
5a:bd:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:19:36 2025 by rpki-client