Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uuMmn9XKiOhRPU4Ss5seVqgAprA.roa
File: uuMmn9XKiOhRPU4Ss5seVqgAprA.roa (raw, json)
Hash identifier: DDbfX5pkgUKMF0jus15Ds2WcOXkwvizUpWlP8zhL6Gc=
Subject key identifier: BA:E3:26:9F:D5:CA:88:E8:51:3D:4E:12:B3:9B:1E:56:A8:00:A6:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885BCF1DBCB0BDB20C54F39609C8433797
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uuMmn9XKiOhRPU4Ss5seVqgAprA.roa
Signing time: Sat 27 May 2023 06:04:40 +0000
ROA not before: Sat 27 May 2023 06:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5bce:fe65/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5b:cf:1d:bc:b0:bd:b2:0c:54:f3:96:09:c8:43:37:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 06:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bae3269fd5ca88e8513d4e12b39b1e56a800a6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:d6:88:b4:17:a6:e4:0e:1f:72:a4:d6:c6:
a4:e4:60:9d:34:d4:bf:09:ad:8c:9c:59:31:51:fa:
38:48:1e:05:d3:26:e5:91:2a:86:9c:9e:1f:cd:fb:
d2:1a:e5:dc:55:eb:3a:12:f9:f4:57:7d:ed:ec:e3:
a0:48:bf:c0:16:b6:20:e7:bf:9c:62:7f:36:1b:1f:
34:21:d2:85:da:78:de:90:f6:8e:48:21:66:4d:18:
32:77:6d:b8:49:c1:77:2c:4d:43:9c:f9:32:aa:c9:
b8:53:7c:83:06:35:96:6f:b6:d8:44:8b:b5:fd:21:
57:ca:c4:3f:12:57:ee:d2:fe:10:2f:9e:84:61:a1:
04:a6:aa:fe:6a:aa:77:e5:50:eb:78:e0:28:92:71:
16:f6:ec:5d:38:16:59:63:11:ae:b3:5c:5f:82:df:
ea:b2:5b:e7:5e:80:ba:72:c4:14:38:8e:2b:5c:d6:
a4:ba:a4:2c:67:62:2d:a5:08:17:1b:a4:cf:9d:d7:
f3:1f:cb:2b:e8:ff:f7:60:4e:c2:66:ab:f5:41:46:
71:8f:ae:a9:cb:fc:56:e9:df:0c:b5:35:59:4c:9a:
0b:9c:76:72:05:35:b7:1e:db:29:1d:42:dc:58:1e:
90:50:a9:d2:48:e0:13:2f:b3:55:f3:18:47:36:94:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E3:26:9F:D5:CA:88:E8:51:3D:4E:12:B3:9B:1E:56:A8:00:A6:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uuMmn9XKiOhRPU4Ss5seVqgAprA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:7b:66:99:b0:b7:cb:5a:46:57:45:ef:0f:11:af:20:c2:91:
a0:a8:eb:45:8b:ae:39:39:c2:44:51:a2:b9:0d:c1:b9:30:75:
c9:ad:31:0a:b5:de:af:fd:e0:51:66:de:65:82:01:3a:59:98:
fc:19:a3:13:ef:73:cf:94:5a:78:81:ed:76:82:8f:ed:3a:1f:
72:c2:1b:bf:f3:65:c4:68:1c:21:1b:e2:52:76:9c:2a:ce:de:
38:8e:71:19:06:69:26:62:49:a0:52:6e:bc:0b:7c:a4:8b:89:
2d:f2:84:a9:ae:17:7e:ce:d9:af:ff:c1:fa:da:1c:d5:85:2f:
ec:e8:ac:d1:c8:43:2b:de:ea:75:74:14:20:99:10:10:31:61:
bd:fa:6e:e7:9a:9d:d0:19:a8:dc:21:b0:98:c4:bd:2d:43:66:
d0:66:79:5c:11:4d:d4:5d:77:33:07:9c:34:2a:b2:9a:fc:10:
69:6b:a5:35:14:e8:36:76:29:e5:45:d1:cc:74:d0:fa:ee:e8:
c2:f5:4a:a0:10:e4:dc:b5:63:83:8f:4e:53:6b:a4:fa:b9:f5:
6e:61:1c:95:27:ce:99:8e:be:e2:02:d5:92:dd:ff:78:90:fd:
65:b3:d5:52:a9:11:34:75:d5:88:fd:ab:54:17:f2:3d:6e:95:
92:24:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:49:59 2025 by rpki-client