Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubR58X1YC_8aSSd0K6YBzLNa_fQ.roa
File: ubR58X1YC_8aSSd0K6YBzLNa_fQ.roa (raw, json)
Hash identifier: UFMaFT/DPgW5ciLthq8ow+Iq/M5gYGJvVTHzNLO6LJ4=
Subject key identifier: B9:B4:79:F1:7D:58:0B:FF:1A:49:27:74:2B:A6:01:CC:B3:5A:FD:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B4801EF6FCF3E305F4AEA62FE18EE1ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubR58X1YC_8aSSd0K6YBzLNa_fQ.roa
Signing time: Mon 06 Mar 2023 01:19:00 +0000
ROA not before: Mon 06 Mar 2023 01:19:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b4:80:1e:f6:fc:f3:e3:05:f4:ae:a6:2f:e1:8e:e1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 01:19:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b479f17d580bff1a4927742ba601ccb35afdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:3f:d3:4b:36:05:a5:93:c8:93:68:e2:8b:
b9:c8:ee:bd:0e:26:c9:19:02:fc:34:fc:c6:29:16:
79:c0:74:47:12:d3:a3:09:fd:9d:9a:c8:d3:d6:2d:
ae:5c:b4:a8:06:1e:89:6a:ac:b6:b2:cb:ec:d4:9b:
77:fc:f2:bc:7f:ae:e4:e6:84:b9:ec:0d:f8:15:a2:
93:9d:4e:7c:60:ba:8e:56:bb:bd:98:41:74:29:ef:
8a:02:09:21:0f:0d:92:1c:4b:24:3d:4c:b8:7e:46:
5a:fe:50:e5:29:b3:77:32:ff:38:92:00:7f:3f:d9:
6f:17:04:74:fb:c5:f7:ec:a7:dd:03:11:c6:dc:0c:
ad:42:71:e2:ca:e5:a1:65:0c:d0:53:f2:b3:60:c0:
dc:1c:84:0e:2b:bc:54:04:db:1c:78:ee:ca:ca:20:
3d:89:e3:73:6c:a6:66:16:59:90:15:0e:ac:eb:c5:
ca:d7:69:3b:83:09:0c:03:79:39:1c:16:e0:85:a9:
b1:87:62:77:bc:da:e4:5f:e5:77:0d:e8:53:d2:f0:
34:df:10:a0:32:14:ea:d0:07:03:69:fe:e8:8d:6e:
de:57:bf:3a:2f:2a:cd:a6:6d:84:80:97:e2:f7:74:
a4:d8:b8:b5:bf:2f:9f:2e:04:5f:44:11:11:79:ad:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:79:F1:7D:58:0B:FF:1A:49:27:74:2B:A6:01:CC:B3:5A:FD:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubR58X1YC_8aSSd0K6YBzLNa_fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:52:cb:a9:e1:79:83:3b:0d:19:f7:39:1f:95:54:83:22:dc:
5e:68:b9:5a:a2:e0:dc:c3:6c:13:ec:53:63:7e:75:fe:c8:af:
e5:f1:07:49:e8:a9:67:42:dd:8b:63:e1:42:69:63:22:55:64:
08:ed:5f:02:cb:4d:2b:b7:50:71:06:1c:d6:80:1b:1e:b5:b1:
b9:d4:48:5e:91:08:bc:d2:b6:cf:ce:76:6f:2c:51:fd:d6:76:
29:d1:0a:f6:98:f5:a6:b7:29:88:8a:99:2c:6d:37:dc:ab:a2:
8d:fd:ca:19:fd:32:db:fc:4f:0f:50:fd:b5:04:37:ad:d4:e7:
c3:d7:40:02:aa:4c:32:59:33:67:d6:d5:65:64:07:18:75:2d:
10:fd:48:6d:22:22:44:d0:dc:d8:0c:63:1d:6c:00:5a:f0:40:
03:6f:1a:bb:87:b4:53:d3:71:05:38:3b:09:57:fe:30:b9:dc:
b1:11:7c:d8:36:03:a7:80:36:2d:77:4e:38:bc:9d:5a:b9:61:
05:7f:3d:dc:3c:03:b3:94:93:9d:79:40:3c:53:11:71:d0:49:
2c:cc:03:cd:3c:b9:e5:bb:e0:a4:ea:4f:4f:bc:9c:65:1a:95:
69:83:bf:bb:45:18:bf:c8:39:96:b7:af:93:7a:98:30:13:65:
32:ca:62:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:25:38 2025 by rpki-client