Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ukEfGhtQFl6TO2y7qP77PGaO2g0.roa
File: ukEfGhtQFl6TO2y7qP77PGaO2g0.roa (raw, json)
Hash identifier: ojesazu22D/fm1HdHfLf6wjm/zgQbo49r1fP0q224rc=
Subject key identifier: BA:41:1F:1A:1B:50:16:5E:93:3B:6C:BB:A8:FE:FB:3C:66:8E:DA:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01830F14F52213C076F40F184162C02A8F47
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ukEfGhtQFl6TO2y7qP77PGaO2g0.roa
Signing time: Mon 05 Sep 2022 19:16:15 +0000
ROA not before: Mon 05 Sep 2022 19:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0f:14:f5:22:13:c0:76:f4:0f:18:41:62:c0:2a:8f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 5 19:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba411f1a1b50165e933b6cbba8fefb3c668eda0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:01:75:6a:59:dc:dd:9e:99:28:70:27:fb:
18:ca:54:24:ac:18:c4:22:70:5a:64:66:f6:7f:f8:
26:4f:2e:3b:bf:83:27:d2:68:92:0d:83:9c:fb:63:
21:0d:8d:b3:8c:6a:37:41:b6:d1:13:57:e2:d2:1e:
d8:41:84:fa:24:42:c9:f6:58:3a:56:0f:aa:1c:da:
ed:e9:c8:11:b9:aa:82:4c:24:2e:04:21:5d:a8:d4:
9d:01:57:db:bd:9f:67:d2:bf:60:e2:2a:aa:6c:50:
e4:8c:f1:80:9b:99:30:24:00:44:dc:ba:88:b7:96:
8a:74:21:fe:f9:d0:3f:50:97:35:40:89:f7:62:32:
15:d8:d8:44:e9:42:d0:61:73:de:a2:a2:7d:e2:01:
1f:23:d9:c7:1a:03:3a:eb:7e:43:29:bb:53:50:14:
4c:ae:7c:72:09:3b:b7:27:13:4c:62:5f:fb:90:53:
db:93:55:83:16:84:d8:4a:de:9c:54:9d:34:27:20:
74:48:c1:62:75:0a:27:12:2d:45:4f:2c:cb:78:0a:
b4:f8:9a:6c:1b:d9:bc:06:69:77:d2:05:76:b9:b5:
30:16:5f:36:cc:e9:47:3c:df:2d:41:0b:d2:4b:d3:
27:b9:80:72:c3:1f:f3:bb:6c:ad:23:4c:a3:70:9d:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:41:1F:1A:1B:50:16:5E:93:3B:6C:BB:A8:FE:FB:3C:66:8E:DA:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ukEfGhtQFl6TO2y7qP77PGaO2g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:92:4a:43:c7:fb:a0:0c:e1:b7:cc:7b:f4:b6:ef:69:8a:df:
38:4e:26:83:86:9b:0e:28:8c:39:a0:ba:51:9b:62:43:0c:09:
0b:a4:2a:d8:5a:63:c4:cc:0f:1a:a5:e8:fd:a5:d3:97:89:4a:
71:86:3a:9d:ca:51:99:83:78:99:e1:be:02:f8:92:7e:31:0f:
20:bb:6f:8a:d5:d1:b5:5a:11:2c:cf:25:52:4f:58:6f:5a:77:
04:8e:55:e2:92:85:0e:1d:16:c8:14:60:d8:2c:35:5b:80:97:
d8:08:ae:df:e9:64:9e:9b:5f:5f:e5:3d:5a:c1:d2:82:95:40:
bb:8d:68:8f:ee:9f:dd:d7:a9:65:27:69:42:0d:b4:c7:56:f7:
54:b8:3d:17:ff:b2:0e:14:06:ab:6f:b6:48:e5:89:c8:92:fa:
7e:e6:42:21:fe:d9:d1:77:02:bb:17:13:f5:94:24:64:6b:ec:
7a:61:a0:cd:a7:aa:e2:59:99:e8:00:e1:57:fb:0c:15:4c:2c:
da:7f:f8:70:3c:a2:34:f8:52:4a:23:b5:8c:60:7c:7d:c5:bf:
64:3c:2b:c0:e7:42:67:80:ea:76:c6:77:b0:62:1e:19:e3:08:
51:b8:84:91:df:a0:e6:c4:2f:3b:71:87:27:b8:5c:35:a7:66:
ff:a4:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:01:49 2025 by rpki-client