Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubfQWbwwRFOyNVluc5jTBglbOdo.roa
File: ubfQWbwwRFOyNVluc5jTBglbOdo.roa (raw, json)
Hash identifier: on+jisVt0+BtDdQScx835ptfK52zTQffexJ20wRghB0=
Subject key identifier: B9:B7:D0:59:BC:30:44:53:B2:35:59:6E:73:98:D3:06:09:5B:39:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CCE9092B10C6E038DC7484CF624AE8EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubfQWbwwRFOyNVluc5jTBglbOdo.roa
Signing time: Sun 18 Jun 2023 05:10:04 +0000
ROA not before: Sun 18 Jun 2023 05:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cc:e9:09:2b:10:c6:e0:38:dc:74:84:cf:62:4a:e8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 05:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b7d059bc304453b235596e7398d306095b39da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:9c:ab:7d:6c:d7:2d:5e:b6:00:85:8e:69:
1b:61:02:b8:08:9d:00:96:36:57:36:cf:12:11:c6:
a2:eb:87:90:1d:d6:d5:db:4f:2c:57:de:1f:6d:2f:
62:e7:21:f4:9b:e6:dd:be:6f:6a:1b:6c:b3:cb:f2:
d6:0c:e9:2a:0d:b5:54:b1:91:f1:be:75:ac:18:fc:
53:e1:eb:b7:f6:18:5c:19:64:81:a4:b5:a8:3b:f3:
09:9b:4b:ac:46:b2:e3:08:db:45:35:2f:41:13:00:
e7:55:e5:c8:ad:86:2f:94:f3:9a:dc:95:9d:f8:f9:
6a:f9:56:59:c4:51:8e:64:c8:ab:ac:2e:36:44:8e:
67:5f:de:d9:6e:cf:77:63:68:17:16:68:4b:42:71:
3a:51:14:d7:54:5c:20:46:2c:49:e2:75:c9:8d:30:
b3:1b:ef:94:66:d3:05:47:9d:81:83:fa:ff:9f:6e:
2a:79:04:6c:79:d3:e6:45:d9:46:05:08:b5:50:de:
c2:89:af:77:43:9c:59:ee:db:3b:ab:e7:e6:97:04:
82:20:07:1a:d2:c4:43:3d:df:91:a1:86:05:c2:2a:
03:a9:d3:a2:aa:20:66:0f:e5:19:50:0e:44:56:10:
87:91:57:8c:6c:3d:69:a6:07:ce:9c:db:d4:7d:30:
81:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B7:D0:59:BC:30:44:53:B2:35:59:6E:73:98:D3:06:09:5B:39:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubfQWbwwRFOyNVluc5jTBglbOdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:3b:f9:d8:13:bc:77:72:cd:49:50:ac:a0:11:2e:6a:32:c7:
eb:2c:7a:00:c6:b7:b5:8c:da:b9:69:d9:45:ea:a3:bb:c4:fd:
87:82:fa:b5:b2:54:e0:73:9a:36:1a:96:ff:7a:5e:ed:e9:b0:
97:b6:e5:bb:08:2f:c9:e7:21:1c:f4:83:59:c2:d7:1f:ce:6d:
5b:cd:b2:72:93:03:f4:28:7e:6f:63:16:b9:30:e5:ec:94:2c:
a9:6d:79:4c:1e:22:f9:c2:79:b7:ae:74:a1:f2:98:5c:d1:0f:
3e:21:7e:d1:b4:18:ad:ef:85:ff:f8:d0:51:3a:58:db:87:a7:
70:4d:f0:72:96:8f:fd:d8:00:dd:3e:27:02:cd:ee:cb:8f:81:
b7:09:1d:c9:8d:13:e6:53:2a:d7:5e:5e:ac:ca:14:0e:ce:da:
38:42:bf:8a:25:c8:80:3a:f5:dc:1c:a3:e3:66:24:8f:6c:ad:
c6:27:34:42:79:85:1d:34:88:e2:99:cf:45:cb:2a:9b:8c:93:
dc:ad:fe:95:ec:88:f0:99:4f:ec:23:f8:c5:0c:98:ed:d3:61:
aa:bc:c6:4d:39:f3:a0:fe:a0:09:b5:44:44:28:25:69:37:41:
c7:82:b3:ca:bf:2a:ff:44:d7:7c:9f:14:20:fe:73:b3:98:3f:
d4:ef:46:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjM6QkrEMbgONx0hM9iSujuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE4MDUxMDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWI3ZDA1OWJjMzA0NDUzYjIzNTU5NmU3Mzk4ZDMwNjA5NWIzOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1ucq31s1y1etgCFjmkbYQK4CJ0A
ljZXNs8SEcai64eQHdbV208sV94fbS9i5yH0m+bdvm9qG2yzy/LWDOkqDbVUsZHx
vnWsGPxT4eu39hhcGWSBpLWoO/MJm0usRrLjCNtFNS9BEwDnVeXIrYYvlPOa3JWd
+Plq+VZZxFGOZMirrC42RI5nX97Zbs93Y2gXFmhLQnE6URTXVFwgRixJ4nXJjTCz
G++UZtMFR52Bg/r/n24qeQRsedPmRdlGBQi1UN7Cia93Q5xZ7ts7q+fmlwSCIAca
0sRDPd+RoYYFwioDqdOiqiBmD+UZUA5EVhCHkVeMbD1ppgfOnNvUfTCBswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLm30Fm8MERTsjVZbnOY0wYJWznaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdWJmUVdid3dSRk95TlZsdWM1alRCZ2xiT2RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHg7+dgTvHdyzUlQrKAR
Lmoyx+ssegDGt7WM2rlp2UXqo7vE/YeC+rWyVOBzmjYalv96Xu3psJe25bsIL8nn
IRz0g1nC1x/ObVvNsnKTA/Qofm9jFrkw5eyULKlteUweIvnCebeudKHymFzRDz4h
ftG0GK3vhf/40FE6WNuHp3BN8HKWj/3YAN0+JwLN7suPgbcJHcmNE+ZTKtdeXqzK
FA7O2jhCv4olyIA69dwco+NmJI9srcYnNEJ5hR00iOKZz0XLKpuMk9yt/pXsiPCZ
T+wj+MUMmO3TYaq8xk0586D+oAm1REQoJWk3QceCs8q/Kv9E13yfFCD+c7OYP9Tv
RsA=
-----END CERTIFICATE-----
Generated at Thu May 1 02:52:21 2025 by rpki-client