Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uep9pCpf2h-lVUbvbZjOJRw9FS0.roa
File: uep9pCpf2h-lVUbvbZjOJRw9FS0.roa (raw, json)
Hash identifier: tSwbEURKSrh7+v/4Z2sSABDB7RMocEfWKTCN0t9BMEE=
Subject key identifier: B9:EA:7D:A4:2A:5F:DA:1F:A5:55:46:EF:6D:98:CE:25:1C:3D:15:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018837C7DB4374D509D581F443B8EEF1BCBA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uep9pCpf2h-lVUbvbZjOJRw9FS0.roa
Signing time: Sat 20 May 2023 06:10:24 +0000
ROA not before: Sat 20 May 2023 06:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:37:c7:db:43:74:d5:09:d5:81:f4:43:b8:ee:f1:bc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 06:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9ea7da42a5fda1fa55546ef6d98ce251c3d152d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:63:85:07:e8:f0:bd:4d:7c:9e:a4:b5:a4:
8e:c4:3b:ab:4e:00:25:fe:a0:be:c0:02:5b:a8:49:
10:6f:49:00:16:33:16:cd:a2:75:2e:5c:fe:52:71:
b7:1d:09:66:bf:a2:db:21:5c:42:ba:18:12:7a:80:
fe:39:cd:71:71:3d:46:60:f3:b6:53:4b:e5:5a:fc:
44:e1:eb:69:61:7b:92:54:47:b4:73:a2:25:35:8b:
c8:be:ca:b3:0c:0e:2c:6c:13:28:68:8a:d4:3b:c0:
dd:35:3c:45:1f:8e:3c:3f:a2:40:29:39:59:ad:ad:
1a:34:71:98:7a:89:64:40:cf:5f:b4:c6:31:33:c6:
16:fa:a3:12:c1:eb:0e:43:d3:99:16:da:dd:bc:0f:
6d:b5:d5:a5:89:11:fa:83:93:b1:f6:ce:05:12:27:
a4:c9:a6:8d:14:ad:00:8b:2d:d2:5e:f1:e6:e6:50:
b2:04:3e:e5:33:1e:04:c9:bb:ee:aa:db:62:05:12:
e0:3f:ea:13:10:91:85:b5:fe:c6:08:8e:a7:23:1d:
4b:84:fe:d8:1c:d7:f8:cd:29:f4:fe:56:35:07:f7:
40:f0:62:47:3a:b2:6c:b9:41:a8:2d:16:02:ec:83:
fc:3f:d1:67:26:3b:1e:cf:cb:12:8c:be:b1:8e:c9:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EA:7D:A4:2A:5F:DA:1F:A5:55:46:EF:6D:98:CE:25:1C:3D:15:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uep9pCpf2h-lVUbvbZjOJRw9FS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:e1:55:28:c5:64:ba:0f:16:a0:56:c8:1d:6d:6a:91:bb:b2:
31:1a:a6:8a:b3:a6:43:0b:6c:97:f3:5f:32:42:de:49:44:a4:
f3:d7:50:3c:c9:ff:de:b9:61:4e:8b:86:de:0a:f2:53:d7:18:
ad:58:33:94:39:76:ce:d5:1a:d3:ac:b7:86:6f:e6:7b:c8:a0:
a5:17:e9:f4:22:67:a9:c4:0f:05:79:5f:7c:61:d6:3c:b4:68:
ac:61:4d:5e:8e:18:ce:52:c6:0f:20:c6:25:d2:d3:65:13:dd:
91:71:9f:64:5b:08:7d:03:a4:f1:54:01:17:57:2e:51:15:5b:
5a:69:83:66:39:64:46:25:2b:ee:7b:01:98:df:e8:35:75:81:
ce:57:f2:37:07:5a:aa:af:3b:b4:5d:12:ca:e2:15:48:bc:74:
06:9a:b3:42:41:4c:0e:98:b0:ed:91:44:17:5c:4f:72:36:27:
3b:68:33:a0:8d:2a:11:e7:ac:ed:0a:5f:f3:db:6e:20:ee:8e:
87:b1:55:9c:03:38:fa:a3:51:67:ae:38:a3:e7:25:eb:81:3d:
ae:cd:3d:2e:ed:4d:f3:bc:21:ee:52:7b:82:25:2d:f8:4a:93:
71:af:6d:00:d2:0f:8c:45:57:b4:d0:82:b2:4e:68:db:57:08:
b5:26:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:55 2025 by rpki-client