Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uehxzzoT03x7mMNyicG7WrBpJ-k.roa
File: uehxzzoT03x7mMNyicG7WrBpJ-k.roa (raw, json)
Hash identifier: bi2xuDqUj9/aeXA4rZXabp1JROJPc3MjXoQexQlw5ZA=
Subject key identifier: B9:E8:71:CF:3A:13:D3:7C:7B:98:C3:72:89:C1:BB:5A:B0:69:27:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A164C297CB1F7E600FFF0FE5A0E7F9E09
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uehxzzoT03x7mMNyicG7WrBpJ-k.roa
Signing time: Mon 21 Aug 2023 04:13:24 +0000
ROA not before: Mon 21 Aug 2023 04:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:16:4c:29:7c:b1:f7:e6:00:ff:f0:fe:5a:0e:7f:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 04:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9e871cf3a13d37c7b98c37289c1bb5ab06927e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:98:ab:14:47:2a:55:96:5a:13:04:f5:08:c9:
b3:31:12:3c:28:ee:a7:59:92:2e:c8:c5:51:02:24:
76:a1:4f:d5:ca:49:a5:37:5a:84:9d:78:db:d1:42:
1f:10:af:5e:cf:f3:28:3d:fd:9c:25:12:6f:bc:c2:
23:ce:b5:f0:9e:89:28:01:20:6f:e8:ca:2d:bf:17:
56:77:9b:44:a6:8d:6f:d8:d1:5a:0a:1e:ef:ea:75:
49:9d:36:44:49:54:cf:67:91:67:70:b9:fc:d6:35:
8e:1c:ac:aa:5c:69:03:8c:78:cb:f5:2c:f7:3d:12:
ab:a2:f3:e3:6c:c1:c5:37:59:84:09:ed:5d:c7:ac:
2f:7f:73:9d:31:d9:41:01:72:0f:20:c3:5f:fa:ff:
92:a6:fc:dc:c5:38:8e:5d:ac:54:1e:3b:3f:75:30:
50:d3:31:3f:11:cb:fb:8a:87:2c:73:1b:9e:8a:9d:
dc:d2:e1:54:50:91:51:bc:55:c1:c6:27:7c:4d:4e:
7b:f1:ef:9f:37:de:bd:68:dc:6b:f3:67:13:94:e2:
b9:c3:3d:b5:dc:69:fa:09:af:0c:a4:30:98:82:34:
a1:cd:72:9d:fb:e8:f3:0e:74:92:90:0d:fe:63:fc:
77:4c:c2:e2:c2:5d:16:69:17:12:68:d6:c1:9a:64:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E8:71:CF:3A:13:D3:7C:7B:98:C3:72:89:C1:BB:5A:B0:69:27:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uehxzzoT03x7mMNyicG7WrBpJ-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:61:9d:d5:ab:c4:97:1e:35:7c:de:4c:cd:05:e7:dc:7c:c5:
03:41:ec:3c:92:d3:87:0b:4b:28:f4:b3:8f:58:b5:90:d9:5d:
04:a0:9f:84:16:ba:d5:41:62:21:4c:56:2b:7a:4e:e2:b5:63:
48:02:9f:7b:bc:12:d1:84:e6:c1:39:32:be:8c:0c:2c:ab:01:
74:f6:79:50:63:47:6e:2f:7e:1f:12:1b:46:d5:70:06:16:8c:
49:64:9b:3c:e9:52:7e:2f:31:29:a3:86:9f:da:f6:60:1f:da:
ad:43:e5:38:ea:47:ca:fb:f7:01:18:76:da:14:84:ad:e8:a7:
0f:af:c7:5c:7f:06:bc:4f:cb:05:56:2e:da:59:73:65:3d:bc:
15:54:6a:f8:4a:4f:80:18:ad:93:d5:d4:28:62:7f:9f:b5:64:
bd:b2:ed:3e:2b:a7:8f:52:3c:f7:02:5d:81:b6:4d:21:42:69:
c8:07:e1:d1:43:31:10:3e:bc:8a:9e:2b:24:be:b4:95:fd:ec:
fb:06:e4:34:50:84:a1:4e:1f:63:f8:9b:74:6e:51:b8:b3:a2:
20:44:4e:b3:c3:4e:f2:5d:e5:6f:9b:eb:f1:73:89:c3:60:09:
03:d9:d0:4b:70:b6:ea:c9:9e:ba:15:43:b5:d0:86:7b:de:6c:
1d:fb:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:50:18 2025 by rpki-client