Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uc68-lSYqiUXA0KjKOr-pJl5WYk.roa
File: uc68-lSYqiUXA0KjKOr-pJl5WYk.roa (raw, json)
Hash identifier: Tzy0hR/+fCD1trhpux3z+wY0yoGMfoaBWfBnMcHe3BI=
Subject key identifier: B9:CE:BC:FA:54:98:AA:25:17:03:42:A3:28:EA:FE:A4:99:79:59:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881B3DB8DBC9769ABC8E787427724EEAE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uc68-lSYqiUXA0KjKOr-pJl5WYk.roa
Signing time: Sun 14 May 2023 17:10:09 +0000
ROA not before: Sun 14 May 2023 17:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1b:3d:b8:db:c9:76:9a:bc:8e:78:74:27:72:4e:ea:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 17:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9cebcfa5498aa25170342a328eafea499795989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:7b:22:b9:3b:d5:ef:c3:91:e2:bd:f2:14:
3b:4f:2e:c1:19:05:19:f5:34:31:c2:82:0e:7b:4b:
7d:7d:0e:55:d7:65:23:af:f7:0f:41:72:11:87:0a:
19:b2:ce:4a:22:98:30:49:4d:f4:6c:cc:26:18:5b:
c8:1c:16:2b:3c:02:3d:4c:e4:91:6f:58:8f:73:4e:
6a:f3:19:b2:c6:3d:0f:16:cc:4f:11:82:fd:88:96:
d8:00:7d:bf:6b:57:d6:48:a0:d7:8d:dd:af:0d:83:
a8:e7:25:3d:21:04:46:04:c5:8f:b8:f9:e4:1d:d4:
19:8c:2a:8f:b2:7c:ac:21:03:2d:bd:3f:b4:f2:01:
1c:1f:da:97:5f:94:3b:23:60:d0:d4:ad:57:b4:f4:
b6:15:13:8d:e9:1d:4c:d2:4a:4a:8b:49:71:97:fc:
39:bf:79:a9:a1:7e:61:17:fe:d4:6e:ea:a1:6e:03:
db:7b:dc:e7:cb:66:0d:03:f5:93:77:06:12:85:0c:
43:2a:be:13:d4:9e:39:cf:9d:9c:95:98:d0:1b:e5:
22:3c:72:db:33:dd:6e:d0:5b:88:10:50:55:c3:b6:
16:c0:bf:0d:fc:57:da:48:55:26:95:be:0b:9e:3d:
0e:01:c4:9d:74:7d:9b:12:39:84:5c:a6:98:4a:09:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:BC:FA:54:98:AA:25:17:03:42:A3:28:EA:FE:A4:99:79:59:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uc68-lSYqiUXA0KjKOr-pJl5WYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ee:41:14:c4:c1:6d:fa:31:0e:62:40:3a:b3:90:e6:31:00:
cc:36:08:5f:0f:b8:b3:d6:4a:e6:37:21:47:ac:f4:36:06:f3:
10:84:d5:55:df:7d:91:20:ff:c7:44:d3:ef:5f:d4:fb:73:6b:
b1:5e:62:49:4e:04:61:61:6f:c9:2a:9d:40:f4:2c:7e:bb:4f:
b6:85:49:ba:12:e4:ef:60:d3:fb:ac:d9:79:2a:b0:4a:88:f4:
68:0a:94:98:83:6f:4f:58:72:10:f2:a7:61:64:70:80:61:17:
fb:84:a2:6a:47:d6:93:12:3d:36:e9:e9:2a:f4:62:fb:be:2d:
ab:3f:3d:ad:45:cf:e1:99:73:62:42:e5:de:1a:be:c7:36:37:
6c:76:0b:ac:9d:82:7b:4b:0c:fe:78:a8:1e:69:21:93:c1:65:
a4:c3:57:b1:53:de:98:4e:11:d9:4a:82:72:6e:7d:26:86:be:
0e:ee:03:52:0e:11:ca:71:0e:b0:a4:bb:b2:d8:79:8a:27:19:
f4:71:42:e1:f9:a8:a3:62:a9:87:c5:7c:6d:3e:b5:e0:ee:f7:
51:03:cd:d2:32:3e:34:50:07:e1:a6:2d:4d:ea:0e:28:80:37:
d3:b5:b9:44:b7:d2:00:6b:7c:51:32:dc:b4:73:85:cc:b6:d4:
52:9f:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:40:55 2025 by rpki-client