Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ua8V3ydxJQY9FQjWZSv8hgMAqmY.roa
File: ua8V3ydxJQY9FQjWZSv8hgMAqmY.roa (raw, json)
Hash identifier: 0oxlpoQCtwgeExFUImcO+ivMQWhsEdwVwJsNKr9g3+A=
Subject key identifier: B9:AF:15:DF:27:71:25:06:3D:15:08:D6:65:2B:FC:86:03:00:AA:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188631A8F39B7CADAA95457A6BB3EF2216B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ua8V3ydxJQY9FQjWZSv8hgMAqmY.roa
Signing time: Sun 28 May 2023 16:04:24 +0000
ROA not before: Sun 28 May 2023 16:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:631a:7768/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:63:1a:8f:39:b7:ca:da:a9:54:57:a6:bb:3e:f2:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 16:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9af15df277125063d1508d6652bfc860300aa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:63:a6:e6:7a:bf:e8:a6:ce:0e:cc:50:ce:
22:aa:55:3d:4f:e0:20:c1:fb:78:6f:9a:dc:7b:7f:
31:48:9b:b1:ce:08:8d:2c:7f:1e:bb:d7:21:3a:45:
ff:7c:fa:2e:c6:64:e9:57:28:5c:6b:18:e4:c8:06:
53:65:f2:0d:6f:ce:c2:74:63:55:08:ae:6e:ea:23:
ec:ae:6d:db:d3:93:4e:92:b3:49:84:1b:3c:25:fb:
4c:ef:74:37:18:1c:94:92:1b:04:01:16:45:3c:39:
d0:27:cb:a7:99:8b:70:1c:7e:46:ad:b8:e0:18:76:
af:5a:3a:95:36:c2:8b:21:2c:df:91:21:87:49:de:
5c:1d:d2:ee:df:47:66:3d:08:f9:bb:de:80:9e:23:
9b:fb:8d:d8:9f:14:ed:3c:81:08:73:38:0e:60:d6:
95:aa:09:3e:23:fa:d9:b6:a1:6d:50:63:ae:bc:3d:
d5:2a:1a:51:de:6b:1f:6c:c2:26:d8:f3:b2:f2:05:
76:63:e0:14:97:9e:56:f1:41:cb:6b:ca:a1:fd:fb:
f5:53:d1:36:4d:5f:2c:85:b3:40:1d:33:af:12:6f:
ed:dc:c4:a3:0e:3f:12:ac:6c:2f:1c:a7:6e:88:5a:
2d:0e:8b:2f:68:9d:94:4b:c0:06:a2:72:df:75:6b:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AF:15:DF:27:71:25:06:3D:15:08:D6:65:2B:FC:86:03:00:AA:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ua8V3ydxJQY9FQjWZSv8hgMAqmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:8b:3b:2c:3b:38:46:3f:3e:6e:0c:d1:96:c3:6e:24:09:71:
01:f9:9b:03:ca:4b:f2:56:be:20:cd:78:0c:76:51:f8:22:05:
de:43:ab:e0:34:46:3e:a7:23:51:f4:31:0c:f9:8d:c3:cf:51:
53:1f:21:5f:6e:c6:e5:69:f1:1d:c4:00:03:b2:dc:ac:21:81:
cc:8c:f2:ac:f2:12:c5:e2:f2:7a:d5:c5:c7:f4:06:ea:f4:2f:
83:ba:13:3c:33:4a:22:d2:6b:0f:7a:e6:3f:07:f6:0d:48:10:
fd:f3:28:ab:9f:72:8d:1c:35:d6:22:a4:0b:de:d1:f8:a8:96:
a2:28:cc:f9:98:b9:cd:39:42:d9:8d:a2:25:d3:e0:c1:a8:75:
bc:7d:75:b1:7f:cf:ed:56:47:dd:d2:ff:d6:42:e8:45:5a:07:
9e:2b:3f:ac:40:21:3c:c8:77:8b:50:b8:dd:00:8b:70:5c:e3:
36:b0:a8:3e:24:60:35:d6:0e:54:11:54:19:d1:58:0f:a7:82:
7b:f2:7b:b5:e3:a1:6f:29:08:ad:4d:d6:7b:1b:ae:9f:28:e0:
af:94:c7:71:98:88:92:a9:f6:df:10:3c:89:43:cd:79:4e:15:
2b:54:e2:e9:ad:f7:18:ae:5e:c7:be:41:a8:83:ca:7f:46:20:
a2:38:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:21 2025 by rpki-client