Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uqaFmCwfc_ZReaaxdkmTfqIKrTw.roa
File: uqaFmCwfc_ZReaaxdkmTfqIKrTw.roa (raw, json)
Hash identifier: zWYO0FvunGbSEeHXfudz1p/Hi5exUDAWbjpykMOa9mw=
Subject key identifier: BA:A6:85:98:2C:1F:73:F6:51:79:A6:B1:76:49:93:7E:A2:0A:AD:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895D2065DB078782B469C9B065A91DF63A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uqaFmCwfc_ZReaaxdkmTfqIKrTw.roa
Signing time: Sun 16 Jul 2023 05:15:51 +0000
ROA not before: Sun 16 Jul 2023 05:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5d:20:65:db:07:87:82:b4:69:c9:b0:65:a9:1d:f6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 05:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baa685982c1f73f65179a6b17649937ea20aad3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:42:bc:2b:df:5d:09:ff:78:da:36:aa:95:
67:bf:b9:fa:72:ef:a3:80:88:e5:62:de:9e:2d:d4:
70:15:60:45:4c:15:10:27:04:ce:a5:dc:a2:dc:d1:
31:6f:25:b6:e7:93:5f:70:b6:b2:e0:36:1e:1a:de:
ac:df:42:65:25:54:4d:bb:e8:9a:75:37:a9:a8:63:
0b:d3:b7:41:59:f8:8e:11:32:fa:cf:71:7d:7e:eb:
58:47:0b:17:6f:51:41:4b:50:e3:9d:80:19:66:6d:
5c:e1:6c:c3:d4:b9:80:0a:fd:b2:3d:d2:8f:ba:30:
26:30:a5:df:05:2a:f3:f0:6f:10:79:12:64:c5:23:
9a:46:55:75:c8:72:8f:d4:bf:47:56:9c:72:38:47:
2e:2e:69:80:6e:ee:a7:59:d7:56:56:06:31:95:56:
ae:e6:23:1b:d8:b4:d5:75:f0:bc:f5:bc:a2:9d:54:
72:c0:77:5a:73:6f:03:cb:6d:63:ca:8f:88:47:fd:
8e:ea:4b:8e:1e:85:86:18:77:fd:2f:d8:38:a3:d4:
74:6f:ce:28:87:9f:c6:48:8f:d5:7e:03:0c:a2:22:
4b:5e:72:53:cf:bc:39:fc:c8:90:48:a9:74:fa:d4:
3f:4a:88:2d:54:b2:23:c2:13:29:58:7a:d9:be:4e:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:85:98:2C:1F:73:F6:51:79:A6:B1:76:49:93:7E:A2:0A:AD:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uqaFmCwfc_ZReaaxdkmTfqIKrTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:a1:84:ec:95:38:02:11:72:3f:4a:41:66:e7:d5:00:13:70:
45:88:6a:2c:a6:e9:bd:b5:ae:ea:c7:bc:ef:84:00:81:2d:43:
70:e9:b3:9a:63:fc:04:e0:03:b9:a0:6c:cc:d4:9a:a3:b4:9f:
49:9f:4a:92:97:5f:d5:82:47:be:5d:38:2f:cc:0c:89:cc:37:
52:e2:7a:e8:91:61:a5:41:c5:b3:9b:59:06:54:df:ac:3a:66:
54:33:7c:60:14:6d:75:83:e4:6e:a8:2a:c4:4e:af:63:60:f5:
6b:23:4f:eb:74:a5:95:ef:c2:e2:29:47:c2:1f:46:cf:c0:45:
7d:07:0c:a8:6f:08:fb:13:e7:2d:3e:c7:44:2d:b0:b6:9b:ba:
a0:63:b2:9b:3e:6f:83:14:a4:5e:51:85:97:62:f5:e3:b0:2a:
32:db:1d:8f:e4:c6:58:cc:6b:cc:69:47:c4:95:fd:cf:ab:20:
ea:c2:00:4e:e7:ba:2e:e0:77:bf:05:8b:ae:c8:5a:74:2e:97:
38:03:6c:be:ba:48:1d:e8:19:20:41:4f:86:e1:ae:2c:6c:55:
84:d5:1a:67:e9:e4:56:68:3d:84:37:23:b4:a7:c8:39:1c:92:
37:69:53:86:03:6c:bc:45:bd:d3:d4:11:a0:26:e1:92:9b:f1:
d2:85:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:41:59 2025 by rpki-client