Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uuS0xo3yyBWMGzzokqakuotXY2U.roa
File: uuS0xo3yyBWMGzzokqakuotXY2U.roa (raw, json)
Hash identifier: KzACT9vx9i6Y0tYImxigWHjO12Y149tx10+YkLbYGwY=
Subject key identifier: BA:E4:B4:C6:8D:F2:C8:15:8C:1B:3C:E8:92:A6:A4:BA:8B:57:63:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0D80E1F3CCA6615CAE213F2577D9E66C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uuS0xo3yyBWMGzzokqakuotXY2U.roa
Signing time: Sat 19 Aug 2023 11:14:24 +0000
ROA not before: Sat 19 Aug 2023 11:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:80:e1:f3:cc:a6:61:5c:ae:21:3f:25:77:d9:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 11:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bae4b4c68df2c8158c1b3ce892a6a4ba8b576365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:62:c4:4b:cd:34:ee:5d:15:d2:21:f7:b9:
fb:33:00:08:9c:00:36:39:f8:81:30:69:f9:50:e9:
e5:6d:7a:5c:1f:cb:80:ee:e9:5e:65:d9:1b:1c:43:
34:a1:cb:fd:29:dc:c5:84:c1:2c:d9:ad:d0:79:92:
b3:90:7f:c4:ed:79:83:4c:89:7b:b6:07:cd:5b:92:
8e:54:d6:9a:69:52:43:ce:7e:7d:0e:d5:fc:87:a1:
ae:c1:f0:d1:6c:ee:75:37:5f:56:43:20:f9:5c:8b:
0d:fe:b1:7d:42:69:4d:36:b7:ae:8c:1e:e7:fc:2f:
36:67:05:19:63:52:68:d5:e9:1f:d0:4d:37:6b:a3:
34:94:f5:bc:ff:87:bc:b4:e1:27:d0:e7:09:ac:d7:
7c:7e:a2:8b:2d:6e:b0:23:30:1c:1c:90:11:fc:14:
0e:3d:cc:ba:97:83:d0:dd:fe:15:6f:f7:78:d4:48:
85:78:9a:a0:1a:cd:43:c1:b5:e0:31:3b:8c:85:34:
73:89:bb:2d:7f:8c:1e:35:8e:b3:b4:18:74:b6:d2:
44:b5:5b:b8:21:eb:58:3e:55:d9:5b:2f:0c:72:6c:
94:8c:4d:3d:3d:7b:da:7c:6c:0d:f2:cd:cb:2f:3c:
2b:60:14:a5:e8:09:04:ff:ee:9f:bf:49:85:33:f5:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:B4:C6:8D:F2:C8:15:8C:1B:3C:E8:92:A6:A4:BA:8B:57:63:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uuS0xo3yyBWMGzzokqakuotXY2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:65:07:82:ce:73:f3:0b:c1:c4:0e:32:d8:29:f4:8f:8d:4b:
8a:09:c2:4d:20:6f:65:1f:be:e0:aa:8f:88:2a:bf:17:56:9d:
27:22:bb:6b:6f:1a:71:42:64:54:f2:9e:1a:de:8d:e9:55:fe:
aa:27:5c:ab:d3:ed:0d:51:ad:4c:f0:77:55:93:3b:dd:4f:7b:
88:fa:51:f9:34:af:35:38:b0:15:b4:44:c7:9d:4d:e3:dc:74:
e8:da:29:ef:17:35:01:87:90:62:cb:21:a3:21:93:fd:db:cb:
11:8b:0c:d3:3f:03:42:a9:6e:3d:e8:b3:a1:80:ad:51:96:c9:
62:dd:d9:8c:fb:95:c1:81:ec:ba:ab:e9:4c:63:d8:e6:a3:29:
f5:71:13:cf:34:4f:17:ae:fa:10:64:39:0a:a7:42:64:0c:56:
ae:5d:51:4c:4f:c8:0d:31:e1:89:87:5f:90:c0:b3:6f:77:c2:
85:8b:6b:7e:7a:d4:cd:f2:1c:5c:87:a8:aa:c4:60:af:f7:14:
eb:e9:64:16:08:73:60:d6:5f:61:20:24:d4:e7:b1:f0:3a:4d:
47:01:46:01:d2:3b:cd:76:84:87:cb:82:85:03:f5:ee:e4:86:
a1:be:ad:19:1d:a7:c6:d2:6a:dd:bf:ef:ee:30:6f:6d:b9:75:
6f:d5:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:04:14 2025 by rpki-client