Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_-ryNgczaCjORSCHf5qacMlJ2I.roa
File: u_-ryNgczaCjORSCHf5qacMlJ2I.roa (raw, json)
Hash identifier: 7CcaTKXQ37jN34e9BwCnDp4WBRRVpgADMhpM73Pg2uY=
Subject key identifier: BB:FF:AB:C8:D8:1C:CD:A0:A3:39:14:82:1D:FE:6A:69:C3:25:27:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018862427F7E2842E17666BD41681DDC84F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_-ryNgczaCjORSCHf5qacMlJ2I.roa
Signing time: Sun 28 May 2023 12:08:25 +0000
ROA not before: Sun 28 May 2023 12:08:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:62:42:7f:7e:28:42:e1:76:66:bd:41:68:1d:dc:84:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 12:08:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbffabc8d81ccda0a33914821dfe6a69c3252762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:12:8c:1b:73:6b:56:96:b2:b9:3c:4f:31:
88:86:6e:42:c9:62:89:85:f6:88:90:be:61:90:d7:
bc:89:9f:42:13:cc:e7:f4:d6:c0:a7:30:25:75:a5:
77:ef:91:e9:a6:21:21:75:54:c8:41:f4:8e:b3:21:
27:c7:fe:01:60:f5:b5:68:35:82:75:f3:5d:53:ee:
74:eb:32:11:19:1f:07:d8:cf:8f:e0:22:1a:a3:ce:
2a:4a:cf:c7:81:53:c8:be:e4:58:45:46:8b:55:b8:
5a:74:56:ea:a3:78:bf:a1:1a:cf:9f:fb:b4:b3:f5:
31:61:72:a4:71:aa:2f:5d:65:e2:c3:29:26:5f:19:
c0:6b:92:91:80:04:e6:2d:e9:ba:02:09:54:a7:bb:
26:2a:68:2e:ab:e9:3a:76:29:98:80:22:37:49:39:
56:5b:76:35:46:34:0d:8a:e9:52:87:9f:fe:18:82:
dd:c2:87:28:f0:c6:ed:15:c3:64:b1:d3:9b:63:d5:
82:68:ea:10:e8:84:f8:d7:97:8b:67:77:60:2e:02:
68:c5:21:c7:00:f5:32:12:e3:01:ef:57:61:33:d2:
b7:23:59:d9:20:03:e6:e2:c2:b1:79:64:c6:68:6e:
26:67:27:c2:a2:18:31:a3:41:f3:d6:e9:27:5c:c2:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:AB:C8:D8:1C:CD:A0:A3:39:14:82:1D:FE:6A:69:C3:25:27:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_-ryNgczaCjORSCHf5qacMlJ2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:70:07:87:ff:6c:b3:35:7f:0e:56:72:e3:ed:ef:99:ba:de:
50:f2:40:8a:fb:12:9b:1f:cc:07:7f:54:13:08:1f:2f:d4:49:
bc:51:88:71:62:c0:4a:16:84:89:35:ee:39:77:bf:74:bf:ff:
89:ca:97:93:c9:8e:9e:66:7a:5c:40:04:92:a5:20:90:dd:ac:
3f:97:cd:6c:c2:cb:6f:82:f0:1c:f3:b3:da:ba:9c:2b:e7:9a:
cf:ae:9f:48:03:d1:c7:66:a7:d3:90:25:4e:a1:41:68:0f:97:
39:d9:ec:56:d7:3f:45:0b:0c:1a:02:f0:74:26:10:88:de:eb:
07:9b:f2:9d:dc:e2:af:c5:da:a4:0f:84:d2:38:ed:a8:9c:f1:
7d:33:d6:5e:13:95:c9:41:ee:d5:1a:e7:9b:89:38:c6:71:47:
17:23:68:88:96:7f:9e:30:14:43:9f:06:e0:97:f6:6d:d1:58:
35:48:61:7a:08:3c:9a:3c:3a:cf:5c:c8:b7:a4:e1:40:bd:4c:
96:56:65:3e:b1:db:88:04:c3:d7:f2:33:08:7c:b4:d6:5a:dd:
3b:47:45:68:af:a5:5f:89:93:29:6c:bf:58:b4:8e:d9:03:1f:
0d:14:0e:98:fb:ce:90:a2:67:6f:a7:b9:73:17:03:8e:82:df:
f1:14:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:53:30 2025 by rpki-client