Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uT1beVHlo_2EEKdjUHI35i4_eTY.roa
File: uT1beVHlo_2EEKdjUHI35i4_eTY.roa (raw, json)
Hash identifier: Wlr7h+UKzCoKTHoJrEtwA49Wy09atjy9l6YuSSZTtFw=
Subject key identifier: B9:3D:5B:79:51:E5:A3:FD:84:10:A7:63:50:72:37:E6:2E:3F:79:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018552D3ABCBB45D883869E9466FA9590CA9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uT1beVHlo_2EEKdjUHI35i4_eTY.roa
Signing time: Tue 27 Dec 2022 09:04:41 +0000
ROA not before: Tue 27 Dec 2022 09:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:52d3:31f3/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:d3:ab:cb:b4:5d:88:38:69:e9:46:6f:a9:59:0c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 09:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b93d5b7951e5a3fd8410a763507237e62e3f7936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:71:e3:97:61:06:46:3d:f7:81:f8:1d:2b:
c4:41:8b:ea:13:5c:66:fe:c3:b0:b3:b6:64:a6:b4:
04:14:2c:e0:9b:ce:08:2f:54:da:d0:b1:14:43:58:
60:bd:4b:e2:6e:1e:ed:c4:bc:7c:b3:31:7e:6f:06:
80:f5:4b:95:bc:ef:ac:44:2a:d7:43:6d:e0:c3:33:
57:11:2e:f8:74:e9:69:7b:ea:3a:95:8e:53:f8:89:
ee:6f:f6:06:a2:ac:e8:13:f9:34:54:b7:5d:1d:1e:
2c:65:95:9b:94:81:9b:aa:4e:61:22:02:89:b9:e7:
26:89:e7:71:ed:b2:57:dc:a9:50:4d:c1:a3:0d:87:
d5:73:a9:4b:64:60:2a:5f:10:d6:7c:06:f0:5e:de:
2f:07:1f:f3:b6:7b:39:ac:18:18:df:40:63:a8:13:
9b:01:2c:7c:b0:d8:7f:3a:90:df:ef:f6:97:1f:f0:
6e:01:bc:16:97:67:ab:1d:92:56:ad:0d:12:c3:38:
10:2f:83:17:f5:84:e7:8a:60:07:5e:f2:02:0d:a2:
14:ba:5a:4f:06:3e:ea:92:c3:d7:0a:83:e8:ae:37:
0e:75:e2:2a:94:fc:6c:da:3c:23:53:5c:0c:32:2c:
23:b0:36:b1:50:92:44:33:de:3b:b3:f7:ca:22:eb:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:5B:79:51:E5:A3:FD:84:10:A7:63:50:72:37:E6:2E:3F:79:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uT1beVHlo_2EEKdjUHI35i4_eTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:2e:d7:ad:20:c8:a8:7a:9d:ec:08:c8:b2:5d:68:e9:73:fb:
e1:da:6d:87:0e:62:7e:e8:c1:2e:1b:3c:4e:09:46:30:73:dc:
18:7a:a7:09:f8:11:7c:4f:30:fb:28:85:3e:44:19:24:29:03:
36:c1:31:9f:44:5a:46:a4:43:7b:b3:b4:dd:a3:c2:8a:28:6e:
98:23:b8:23:4d:ff:41:cd:74:c8:5a:41:10:17:19:7e:31:1e:
a5:11:69:e9:a3:a3:0f:a4:ea:e3:1c:d4:01:e2:47:c3:16:2e:
17:0a:d5:dd:a6:f3:9e:2c:3c:a6:50:2b:88:c6:1c:54:18:ac:
86:b2:19:4e:8d:0b:f6:ce:31:60:aa:22:64:a1:08:eb:c1:ed:
16:a8:12:44:76:d3:39:e0:ca:1e:75:4e:86:37:c3:f2:c7:5b:
61:e0:a2:18:df:8d:ca:fb:4f:bc:93:a4:56:06:7f:3c:3a:58:
e8:52:d5:c4:17:12:12:78:e1:17:b4:73:34:5d:ac:86:ba:55:
b9:5a:bb:fd:89:20:58:70:df:2f:ee:3c:95:2c:35:4f:78:7b:
ab:f1:c7:23:da:b6:d1:6e:b6:31:91:10:19:c7:3b:be:01:06:
2b:dc:f3:11:c7:66:db:28:39:9c:43:fc:fc:a6:47:a4:da:49:
a7:95:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:31:04 2025 by rpki-client