Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uTuBI-LmfBBZ8u3-VTz9A81d4cY.roa
File: uTuBI-LmfBBZ8u3-VTz9A81d4cY.roa (raw, json)
Hash identifier: 3oX9r8BgKgeH7ffh0SiK0GqYy99csKNmF5BH0ulmTo0=
Subject key identifier: B9:3B:81:23:E2:E6:7C:10:59:F2:ED:FE:55:3C:FD:03:CD:5D:E1:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876990FDDEFBEBF0049EF162DE3235A766
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uTuBI-LmfBBZ8u3-VTz9A81d4cY.roa
Signing time: Mon 10 Apr 2023 05:08:42 +0000
ROA not before: Mon 10 Apr 2023 05:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:6990:d67b/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:90:fd:de:fb:eb:f0:04:9e:f1:62:de:32:35:a7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 05:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b93b8123e2e67c1059f2edfe553cfd03cd5de1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:7a:7b:0a:39:1f:cb:2f:52:5e:9c:74:20:
f4:42:b2:f9:d1:46:ec:f4:0f:cb:48:15:76:5f:37:
92:40:3c:71:2d:05:df:63:9d:4e:75:79:ae:01:59:
ed:e3:4e:21:a1:cf:c7:a6:a4:2b:23:f6:51:a0:0c:
56:7a:d6:d8:19:41:26:37:f7:bc:ba:a9:e6:21:da:
1e:64:c8:f0:0a:d0:21:4e:c0:48:cb:90:36:54:de:
3e:2e:77:11:d4:a1:e4:fb:6f:d0:85:94:31:8d:73:
f4:a4:57:e3:35:e1:12:57:7e:89:96:86:c4:fd:98:
b3:60:ef:14:ab:34:b9:93:2b:31:11:02:ef:fa:dc:
34:7c:f0:73:b3:04:0c:48:cc:7a:db:3b:61:46:b9:
1c:15:1b:d7:28:0d:b7:cd:f7:bb:17:61:b7:7a:5c:
e2:43:bf:a7:2b:4e:e0:42:00:01:fc:b8:45:c0:72:
ad:22:fa:6e:c2:17:66:52:65:82:23:ff:cb:50:46:
03:7b:5d:83:71:3e:df:96:b4:ec:05:d3:d8:4d:0f:
c4:41:05:f2:e0:12:a0:39:ad:4c:1b:89:4d:79:16:
cc:9c:47:b3:ab:db:e6:e9:d4:7b:17:3e:2c:06:3b:
83:77:66:75:95:c6:9d:67:08:4c:15:7d:b2:0c:af:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:81:23:E2:E6:7C:10:59:F2:ED:FE:55:3C:FD:03:CD:5D:E1:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uTuBI-LmfBBZ8u3-VTz9A81d4cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:ee:4e:2f:52:f1:c9:ca:e9:4b:43:06:f7:d4:87:bd:c7:30:
ed:61:1b:1e:3d:1a:68:25:4e:d3:5e:25:91:a4:ba:5f:56:2e:
90:11:36:de:c7:c3:37:04:d8:34:56:e6:12:48:a6:d6:a0:f1:
b5:5e:9b:45:ad:ab:27:10:83:2a:a7:c9:c4:7b:1d:69:ab:fd:
a5:19:e7:5c:4f:9e:5b:87:d5:d2:15:87:e8:97:42:b0:4a:f6:
49:6f:0c:f0:d8:71:e5:f7:18:9c:d4:98:48:6c:3a:f5:d0:d4:
9a:18:2b:bb:b9:fc:f0:57:24:16:00:13:b2:ba:b5:97:b6:4c:
4c:1f:2e:43:f7:37:e3:68:d1:6f:90:d2:1b:a2:66:bb:31:dc:
8f:c3:bc:4e:a3:9a:b6:d5:53:3c:e4:da:fa:fb:7c:f8:81:75:
7f:ae:08:10:d8:b5:d7:53:a9:1b:a7:e9:ac:11:6b:b0:f3:a6:
64:39:b4:26:98:42:8e:84:0a:3f:18:47:10:d3:81:78:fc:00:
9e:e4:3d:37:72:6e:c5:c1:24:4a:e9:7a:b1:be:89:47:d2:f3:
77:51:d2:2a:a1:f9:4b:be:00:02:bd:cf:72:a7:ef:4a:73:62:
fe:96:e8:e7:f6:11:5a:a7:42:e2:13:7a:61:f0:2f:ee:8e:98:
57:35:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:57:41 2025 by rpki-client