Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhVQxhzxmfD_CN1xnPvucA8EZ3A.roa
File: uhVQxhzxmfD_CN1xnPvucA8EZ3A.roa (raw, json)
Hash identifier: NXcLHBoEP3JRAhIbjpraZflJoO150fuT+kov0/Od7eQ=
Subject key identifier: BA:15:50:C6:1C:F1:99:F0:FF:08:DD:71:9C:FB:EE:70:0F:04:67:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F058F56DC57B5DEAF7F9A362B64C56F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhVQxhzxmfD_CN1xnPvucA8EZ3A.roa
Signing time: Fri 17 Mar 2023 16:13:27 +0000
ROA not before: Fri 17 Mar 2023 16:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:58:f5:6d:c5:7b:5d:ea:f7:f9:a3:62:b6:4c:56:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 16:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba1550c61cf199f0ff08dd719cfbee700f046770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:8d:06:c0:fd:41:0d:6e:24:90:f0:7f:38:
bb:df:06:04:de:e3:f5:a3:28:9f:a9:2d:10:a2:1e:
21:f9:90:71:6f:dc:9e:18:cc:7e:f9:35:75:11:18:
6e:d9:23:05:08:e0:4a:e2:4b:21:4c:e8:f5:12:df:
f4:44:23:9e:d3:22:05:b9:b3:85:5c:9e:03:72:ee:
ce:70:04:6a:3e:3f:70:f9:e0:af:7d:93:d7:39:c6:
af:20:09:da:a6:e9:46:1e:dc:01:87:51:80:54:7f:
70:c8:b2:32:3b:4b:d4:22:1a:a4:be:82:d1:cc:5c:
d4:ed:d7:5b:9a:d7:c7:5d:c5:19:08:13:e2:70:bb:
18:e2:ed:cd:ee:4b:5f:c3:73:4f:7b:ed:ae:19:65:
b5:8e:aa:c1:ca:ee:2d:f3:05:1e:55:c5:fd:2f:34:
0e:5b:01:c1:f9:94:d0:f0:d0:7a:df:e9:5b:46:18:
d4:1e:0c:28:1b:a3:e3:00:43:32:44:82:49:52:9d:
84:9a:ea:38:67:46:38:ea:4d:52:f9:53:31:4d:9b:
c2:8d:d7:ef:9a:ae:b1:8d:7b:b5:4b:e4:d0:10:b2:
bb:85:c6:04:f9:5a:d2:3c:fc:bd:8e:f3:9a:98:30:
6f:e0:be:e9:cd:ac:34:86:ea:e5:59:ec:32:d1:fe:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:50:C6:1C:F1:99:F0:FF:08:DD:71:9C:FB:EE:70:0F:04:67:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhVQxhzxmfD_CN1xnPvucA8EZ3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:cf:d5:ea:c1:09:63:a7:99:ad:6a:83:cd:d5:e2:2f:a8:72:
bc:58:46:e5:72:9b:83:ad:9b:fc:cb:76:b0:73:0b:6a:c3:af:
19:47:a5:3b:9b:b3:27:b8:0a:e9:78:5f:7d:6a:cc:d2:92:ab:
60:99:4b:45:73:83:0b:9a:e9:82:dc:24:90:0b:a0:57:cb:20:
d6:2c:e6:6e:8b:a2:47:af:8a:4e:4b:27:82:8b:ff:fb:ef:fe:
ec:f0:fc:84:63:8e:01:d7:c2:d2:bc:a8:9f:02:6c:ee:f4:1b:
96:29:89:69:f8:8e:f5:04:93:a5:83:f9:8a:c0:9d:45:a3:17:
c8:86:25:eb:30:5e:d0:b9:70:31:24:92:0e:22:a2:9e:be:94:
f5:d9:d2:ad:40:a5:74:38:63:46:0e:7c:9c:1b:4f:d2:a8:2e:
dc:98:70:dc:96:9f:fd:4e:30:ee:26:2b:4f:f0:b5:b3:ae:cf:
cb:e0:2d:56:f7:9e:07:cd:e2:04:0c:78:50:da:49:11:b8:83:
d0:6e:55:8c:dd:04:e1:ee:03:97:45:2c:d7:84:72:33:7c:89:
9d:c9:e0:7c:c6:33:8f:e8:09:78:22:10:81:be:07:03:d0:a4:
df:15:ad:4a:35:a0:2b:e7:c4:72:12:5a:32:95:39:9e:00:10:
7d:84:85:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:06:24 2025 by rpki-client