Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ulWmxi9yUyJzsGvlXqle7qMmBsg.roa
File: ulWmxi9yUyJzsGvlXqle7qMmBsg.roa (raw, json)
Hash identifier: k63k9SMZEDhDx4Ds8WdrJngxMT4xbpcsJtypp4SJNJA=
Subject key identifier: BA:55:A6:C6:2F:72:53:22:73:B0:6B:E5:5E:A9:5E:EE:A3:26:06:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A161625B220D57858235B2B1AEE2EFAD6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ulWmxi9yUyJzsGvlXqle7qMmBsg.roa
Signing time: Mon 21 Aug 2023 03:14:24 +0000
ROA not before: Mon 21 Aug 2023 03:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:16:16:25:b2:20:d5:78:58:23:5b:2b:1a:ee:2e:fa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 03:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba55a6c62f72532273b06be55ea95eeea32606c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:6c:b4:64:7f:24:ba:63:49:f6:31:3b:07:
e1:44:72:83:c0:01:5f:85:9e:db:5b:38:fb:b9:80:
02:38:5c:68:38:0e:85:40:43:db:ff:bb:aa:21:ec:
9c:55:d6:5a:94:36:fe:25:ea:88:94:b7:f1:9a:db:
0c:ab:48:b0:51:54:b1:41:4a:92:6f:92:ef:46:c5:
26:01:47:9f:d1:4b:7b:d2:fc:08:2a:1c:6c:b7:cc:
99:1a:16:61:09:56:1f:b5:5c:02:ea:14:10:2b:bb:
33:ee:80:46:a9:b2:c4:79:c1:7b:9e:ab:f1:88:32:
1f:1e:13:a6:9c:ed:3b:b9:5c:fd:97:15:27:88:af:
d1:6e:36:c8:0b:30:fe:ac:18:43:b4:5b:fa:3c:17:
31:8e:22:87:8a:fa:cb:71:61:79:d1:66:3a:58:d8:
15:ab:f3:a9:90:3a:c7:6f:63:f7:3b:f6:09:2e:4e:
2a:6a:29:9f:4d:7b:7d:5e:6f:f6:0a:b0:87:e9:8d:
23:39:ee:7a:a3:a3:a4:0c:ec:00:0f:61:87:78:57:
f5:ab:3f:f5:2d:a7:dd:d6:ee:4f:10:22:b5:19:8b:
16:15:6a:31:a8:70:3d:d6:4a:2d:e8:88:bc:86:0f:
e8:ba:97:90:95:16:41:75:8d:1f:83:81:e8:ab:ea:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:55:A6:C6:2F:72:53:22:73:B0:6B:E5:5E:A9:5E:EE:A3:26:06:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ulWmxi9yUyJzsGvlXqle7qMmBsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:c8:b0:51:e9:fa:1e:19:ef:e4:7b:d8:60:f4:ea:c0:1c:4a:
69:40:dd:69:c3:9d:af:92:b3:49:7d:b1:a5:25:61:f8:3b:3c:
31:e5:4f:a1:2f:66:5c:ca:f6:62:9f:2e:89:e6:4f:30:72:6f:
be:d7:a4:4b:93:bb:4c:ee:9d:cd:64:38:6c:67:3d:e8:96:24:
5e:e6:65:78:73:f5:ec:81:56:86:1f:48:22:bc:d8:f6:97:09:
e7:2d:3f:d2:33:9c:46:54:76:59:44:4a:86:ab:d1:2c:d3:62:
a7:b6:ef:28:47:1a:c4:46:d5:68:24:70:90:3d:45:f6:cf:db:
8e:7d:f8:8c:7f:9c:4c:15:9b:23:ea:60:c1:80:ef:0c:4e:51:
d5:b1:58:37:42:95:66:55:19:a8:b6:89:e6:7a:00:a1:39:a8:
1e:c4:df:06:d9:3a:7b:6a:94:df:37:51:4b:65:48:1e:5d:09:
41:20:4a:aa:fe:71:eb:fc:09:e9:33:03:56:d3:b6:a7:88:32:
90:d1:d8:3f:6e:c1:ae:27:42:d3:ea:03:a2:95:06:54:8d:e6:
b7:33:b1:75:fa:86:4a:8d:09:42:2d:c1:0f:9d:08:54:35:0e:
da:0d:a2:3d:d2:89:4e:82:87:2d:63:1a:b9:cc:53:52:39:9b:
bb:b5:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:34:30 2025 by rpki-client