Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhy1Fx5VDuLjVxO9CUxO4Bi6Bk4.roa
File: uhy1Fx5VDuLjVxO9CUxO4Bi6Bk4.roa (raw, json)
Hash identifier: 385NCowa7+U0danCKNweOLYdrT/uGHRn3zwEobAEAjM=
Subject key identifier: BA:1C:B5:17:1E:55:0E:E2:E3:57:13:BD:09:4C:4E:E0:18:BA:06:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AE3C2DECA85AFDF077433D44502F2BA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhy1Fx5VDuLjVxO9CUxO4Bi6Bk4.roa
Signing time: Mon 31 Jul 2023 23:15:26 +0000
ROA not before: Mon 31 Jul 2023 23:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ae:3c:2d:ec:a8:5a:fd:f0:77:43:3d:44:50:2f:2b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 23:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba1cb5171e550ee2e35713bd094c4ee018ba064e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:81:08:09:82:97:ae:64:3a:4d:04:66:f4:
00:2e:1a:ad:85:8f:6c:ee:29:d0:08:c5:65:ca:31:
20:c9:d1:67:bf:53:4c:2c:cd:90:39:a5:93:e7:fb:
8f:a2:48:b6:ce:36:00:0c:68:da:f5:71:86:f1:e2:
6c:a1:c9:bb:87:78:29:05:fb:f0:b3:c6:13:f1:83:
f4:3b:3a:00:28:d4:1e:78:90:ff:b4:f4:37:c7:2d:
88:05:88:bc:b6:64:0f:91:69:1b:35:13:4f:4e:70:
38:7b:b4:ef:6c:9c:a4:7c:c9:65:93:bc:c3:a6:e0:
c9:12:cc:24:32:e7:85:3d:3e:28:4c:c8:e3:2b:0e:
77:da:ef:56:e4:31:fc:65:98:b1:fb:48:97:ea:91:
ff:ca:48:70:bf:18:81:bb:dd:b2:ae:dd:fb:68:95:
97:b0:2d:e8:e3:21:8b:28:21:8b:bb:bd:3b:db:48:
f9:50:1e:39:1a:a3:20:25:27:40:17:ae:dd:32:d2:
e0:fe:a2:45:b4:92:80:89:c0:ff:8b:44:c1:8c:57:
c9:0c:80:ec:d6:ec:30:46:35:f8:05:21:68:6f:d8:
e0:74:27:57:f1:de:30:62:2c:94:e0:3d:7d:5f:47:
44:9b:ca:9c:98:99:9e:3d:a8:67:82:92:ad:dc:23:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1C:B5:17:1E:55:0E:E2:E3:57:13:BD:09:4C:4E:E0:18:BA:06:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhy1Fx5VDuLjVxO9CUxO4Bi6Bk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:7a:29:ee:e3:fe:92:45:78:80:de:77:d7:b7:02:64:e0:4c:
55:59:69:31:fd:c2:fb:33:70:fc:b0:18:85:42:86:68:1f:fa:
38:59:10:86:c4:18:3e:f6:8d:ed:9b:be:f9:8d:ae:6e:3a:03:
46:ad:b0:2f:a3:8e:3d:96:a6:bc:64:0a:26:aa:58:77:24:b0:
09:59:a7:65:79:2e:96:ea:36:3f:ed:3e:1a:2a:51:5e:18:cf:
f6:b9:c8:2b:b7:2c:67:12:34:05:f4:99:5d:e3:9c:5b:15:1f:
e8:00:1a:dd:87:45:85:02:5c:1b:a9:c0:4b:3f:4a:6b:94:bf:
6b:12:2e:3c:bb:fd:76:a8:9f:a1:33:97:db:8c:6a:dc:d1:09:
4e:8f:4d:a7:3a:ee:58:8c:e4:02:5b:af:73:13:3d:24:4d:ff:
c5:2d:a9:4b:a4:7b:62:e2:67:23:ba:05:ee:88:d3:19:4f:05:
be:40:27:9a:00:8d:f5:58:f5:e3:b2:f3:34:69:4f:fe:f2:e6:
cd:99:de:cc:06:ff:6f:63:6b:a1:46:7a:16:b0:03:bb:ae:42:
e8:dd:ba:a2:ce:1d:40:8b:da:52:fb:18:4d:8e:14:a3:69:c6:
63:bc:75:72:b7:b8:46:a8:9b:de:3a:ef:88:d5:1f:52:90:12:
5f:b6:0f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:46 2025 by rpki-client