Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uvkaU6EebJAaAcO9NLbQh2gnzOw.roa
File: uvkaU6EebJAaAcO9NLbQh2gnzOw.roa (raw, json)
Hash identifier: ikHlKoNatftdlLcJOmvt8QL0JRD4wVaz03t24PhF1lo=
Subject key identifier: BA:F9:1A:53:A1:1E:6C:90:1A:01:C3:BD:34:B6:D0:87:68:27:CC:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A8A85D123D2754A72ED407F5112006E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uvkaU6EebJAaAcO9NLbQh2gnzOw.roa
Signing time: Fri 13 Jan 2023 01:04:44 +0000
ROA not before: Fri 13 Jan 2023 01:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:a8a7:f88c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a8:a8:5d:12:3d:27:54:a7:2e:d4:07:f5:11:20:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 13 01:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baf91a53a11e6c901a01c3bd34b6d0876827ccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:b2:c6:c3:2e:73:2f:73:2d:0b:3c:3c:9f:
c4:6d:33:84:f3:90:ab:cc:e5:d8:f7:5f:93:04:cd:
f7:f2:58:d1:18:eb:af:82:49:fd:39:7b:59:2b:ef:
01:76:4a:d6:85:86:fc:10:2d:c9:37:37:03:fe:48:
31:93:79:90:6c:0c:a9:a3:9d:d3:5f:6c:ce:21:3e:
73:02:2a:a1:5f:14:0f:09:e9:9b:b0:0c:20:be:e3:
ed:26:99:0c:40:34:0b:dc:12:c4:e9:1c:b9:66:9d:
4e:c9:13:a3:de:24:40:53:86:ef:b5:d9:95:28:c7:
9c:60:20:10:aa:0b:ce:21:e1:36:46:20:62:cc:bf:
5a:4b:f8:f0:2e:6f:af:50:54:5a:ca:73:02:b9:fe:
ac:f0:70:61:03:06:bc:ac:92:08:78:70:4c:1a:f3:
aa:15:1e:ad:5f:b6:29:bf:ee:45:68:13:5c:fd:25:
ff:6f:a7:69:9b:91:75:7b:f0:c5:c2:60:2f:af:47:
a2:b2:e2:cf:46:e8:45:ed:10:70:f2:42:8d:f0:ad:
07:af:41:ba:8b:86:2e:90:e3:9a:79:67:dd:93:64:
3a:0d:cd:7f:aa:62:f2:24:7b:be:42:83:1c:80:c8:
99:af:7f:4e:42:f0:5d:8c:fc:6b:9c:a3:c3:f1:10:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:1A:53:A1:1E:6C:90:1A:01:C3:BD:34:B6:D0:87:68:27:CC:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uvkaU6EebJAaAcO9NLbQh2gnzOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:2c:40:10:7a:27:d5:09:fc:fc:d8:aa:2b:a8:40:cd:70:e0:
a1:de:05:ff:5a:2b:8c:22:ef:92:9e:94:1d:9f:9d:dc:73:0e:
00:4c:40:8f:d0:9e:1f:6a:93:fd:07:20:13:8d:35:7e:63:93:
3b:02:5e:bf:64:cb:bc:db:28:a0:72:1e:be:19:13:6d:4c:58:
d7:c3:14:d9:b0:40:0a:ca:15:52:0e:09:0d:5f:f7:76:23:ec:
49:cb:d1:6c:ab:bf:a5:ec:ed:c5:14:0a:7b:57:ef:1c:42:d3:
7a:20:e8:58:ef:8a:3d:06:36:e8:ad:0d:29:03:45:c9:b3:16:
17:35:8a:cc:5d:52:91:26:59:bf:54:f0:f0:c5:2e:d0:99:d6:
ec:bf:50:5c:7d:10:19:90:f5:07:44:a9:e1:40:79:e7:3e:89:
a7:58:c0:47:3b:fe:2d:15:89:1b:02:cd:6b:34:5b:7e:df:0f:
cc:e4:ed:dd:54:02:9f:b2:26:14:83:22:35:ae:a9:c1:9c:9f:
c4:e1:95:5e:6c:21:ec:02:62:f1:11:b7:d4:93:85:09:10:ff:
ea:8c:df:97:8b:12:d4:da:c5:5d:30:d5:d9:45:c8:a0:6e:d5:
e5:91:31:9f:87:c6:0c:5b:0e:74:39:15:0c:97:a3:20:f3:75:
d2:e7:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:12:41 2025 by rpki-client