Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/umzoHfD2b2ISc7314MKhcDqrpA4.roa
File: umzoHfD2b2ISc7314MKhcDqrpA4.roa (raw, json)
Hash identifier: b2D52EvBFd3ay0swXy9Rru4GUMCPZWTw8mSfvMK7v9g=
Subject key identifier: BA:6C:E8:1D:F0:F6:6F:62:12:73:BD:F5:E0:C2:A1:70:3A:AB:A4:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D9CD9AF182F92A8F91004DF1DB17E03F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/umzoHfD2b2ISc7314MKhcDqrpA4.roa
Signing time: Tue 02 May 2023 00:12:23 +0000
ROA not before: Tue 02 May 2023 00:12:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d9:cd:9a:f1:82:f9:2a:8f:91:00:4d:f1:db:17:e0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 00:12:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba6ce81df0f66f621273bdf5e0c2a1703aaba40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e9:33:a3:31:8c:4d:59:b6:6a:0d:41:d7:7a:
70:1e:c5:3e:8b:a9:80:9d:2f:ba:f3:e9:33:fd:ba:
bf:eb:ce:87:08:f2:94:a7:68:c4:65:90:3b:47:be:
bd:ca:79:82:28:5a:f0:84:7d:42:28:ca:fd:17:f9:
d1:f6:be:d6:bf:9d:58:fe:81:ec:f6:1c:bb:75:65:
15:58:49:e0:c8:2b:a2:53:3e:3b:cf:60:35:6e:4a:
71:99:c4:a4:56:21:b0:3a:41:4c:ff:aa:68:11:2c:
d3:43:68:92:bb:22:26:90:37:ea:c2:1a:a9:fe:d8:
2a:82:ee:a2:42:96:46:b5:13:f7:c4:ea:65:71:e4:
3a:dd:39:5e:27:c3:ef:22:6b:4d:cf:42:04:96:d3:
91:41:ff:09:d2:ac:28:ec:cd:57:a1:f7:e1:6d:6d:
8a:48:36:af:48:a4:0d:36:0d:b8:5f:fe:0f:ce:8c:
2d:b4:4b:f1:75:79:f5:db:2a:65:88:9e:94:bd:5c:
f4:10:c2:37:a6:6d:6b:35:34:63:6f:bd:97:b4:80:
42:fb:7b:c5:4e:50:01:5c:6b:e6:ed:77:c6:78:d0:
a2:e8:df:0e:fd:79:69:c2:82:87:3e:28:b2:bf:83:
cd:75:44:e5:62:87:32:4f:43:86:88:6e:a7:e9:93:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6C:E8:1D:F0:F6:6F:62:12:73:BD:F5:E0:C2:A1:70:3A:AB:A4:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/umzoHfD2b2ISc7314MKhcDqrpA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:c6:47:57:21:44:c8:31:f3:5a:a1:45:28:b1:36:3d:a3:f5:
38:29:47:ad:f4:e7:12:b3:67:d2:ad:15:ed:e0:bd:b6:ab:e8:
2b:1e:c2:e8:3d:45:a7:bf:cd:52:27:da:11:63:9a:c7:51:a4:
98:bf:5a:e4:3e:39:31:d0:8a:2d:d4:e5:c6:bd:80:43:bf:5a:
51:15:df:75:2f:be:9f:d7:53:d5:e4:fe:93:73:f5:34:06:01:
8d:3d:5e:8e:35:e5:4f:49:e7:d7:fd:39:08:26:1f:f8:8e:1e:
87:6b:ec:8a:ee:dd:9b:35:f5:22:83:34:5a:07:15:1f:68:b8:
9d:66:ff:eb:ff:1d:72:3d:94:dc:77:14:ff:65:ba:55:7b:ad:
cb:8c:1f:c0:3d:15:46:d9:43:fe:88:db:03:f6:3a:c4:ce:f3:
2b:4d:a5:ae:cf:45:b1:77:3a:3c:d3:0e:e7:aa:d1:1c:f5:f4:
45:6e:d6:d2:7f:71:5b:85:70:94:f5:47:db:4c:00:60:b8:cb:
b1:41:f4:bd:65:55:55:08:c7:e9:0a:1e:d4:f7:21:a4:44:c9:
fa:74:57:4c:58:ce:54:56:c6:c2:3d:b0:e0:84:4b:40:bb:59:
c8:2f:a7:26:ed:73:c5:12:cb:cf:2a:d6:d5:35:7f:74:dc:88:
fd:0b:02:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:05 2025 by rpki-client