Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uw9oWFNW4fcvB4CNDBFRwV1eT6s.roa
File: uw9oWFNW4fcvB4CNDBFRwV1eT6s.roa (raw, json)
Hash identifier: /VU9QZwoBClyBaVddvHmybgHpIFWENUwcBynMuAOfJE=
Subject key identifier: BB:0F:68:58:53:56:E1:F7:2F:07:80:8D:0C:11:51:C1:5D:5E:4F:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D6F799C2C32E44BF1E962C3EBDA7CE67
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uw9oWFNW4fcvB4CNDBFRwV1eT6s.roa
Signing time: Tue 08 Aug 2023 21:04:58 +0000
ROA not before: Tue 08 Aug 2023 21:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:d6f6:fe66/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:f7:99:c2:c3:2e:44:bf:1e:96:2c:3e:bd:a7:ce:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 21:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb0f68585356e1f72f07808d0c1151c15d5e4fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:4e:a3:76:d2:5a:f6:49:9f:35:16:e6:e9:
f7:bd:e6:8c:91:d1:31:46:e5:57:fd:7e:55:c5:82:
b6:3d:40:e9:b9:ad:06:0a:10:46:40:98:7f:6e:1b:
a6:28:78:ee:78:27:66:49:76:4e:78:36:a2:cb:90:
99:d9:42:a3:60:b2:c6:f5:04:75:c2:79:80:7d:6f:
3b:09:f6:58:1b:cb:ee:62:c6:79:30:37:dc:29:1f:
97:8f:e5:ea:5e:b4:6f:fa:7d:1d:77:27:e8:ce:a0:
d3:da:89:11:e6:75:e4:51:ed:32:93:9f:45:0d:a0:
6b:13:31:a1:c6:7c:ad:d5:15:c7:dc:91:a9:5f:79:
63:5a:59:c7:5a:79:6d:3f:a7:4f:fa:f0:08:2e:e9:
ad:60:b4:73:99:84:a6:c0:bc:bd:f2:3a:dc:12:19:
96:61:37:09:64:83:0d:cb:da:74:af:28:b1:27:51:
f2:5b:c3:a9:c2:09:0e:f7:06:31:af:f3:28:33:d8:
cb:8c:a9:9f:e6:83:81:03:43:fb:be:c1:61:51:94:
f4:43:50:d1:0a:bd:06:18:9e:67:a7:2c:f5:95:ce:
a6:6d:92:fb:a8:3b:34:ae:3e:76:41:5d:13:66:5c:
62:91:45:c3:b5:71:5c:04:b6:28:43:7a:f9:09:5f:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0F:68:58:53:56:E1:F7:2F:07:80:8D:0C:11:51:C1:5D:5E:4F:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uw9oWFNW4fcvB4CNDBFRwV1eT6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:d3:e5:e5:88:9e:0c:1d:15:27:05:40:38:30:52:de:9c:0e:
44:b1:bc:51:78:33:91:f6:b9:2c:61:73:13:57:81:5d:dc:7f:
03:d1:4d:f0:ea:7c:da:a6:f4:77:de:40:82:68:b9:4d:4e:db:
4c:22:6c:1d:a0:98:9c:3e:74:0f:d4:4b:a9:8d:c7:d3:d1:b6:
bf:30:7e:60:e8:1a:25:a7:bd:42:08:bb:ea:08:4e:62:75:ab:
50:b4:2f:68:bb:f6:8a:d0:84:71:4f:5a:c4:ef:06:eb:b6:a0:
5b:3d:00:d8:83:08:5f:6a:12:7c:5c:63:bc:1a:b6:38:cd:f4:
45:bc:83:89:4c:94:fd:ac:2f:bf:79:79:bf:ad:14:06:c1:69:
4b:1e:82:80:52:35:92:98:b1:89:1b:59:67:21:7c:e6:a9:71:
8e:9d:de:4d:57:21:73:51:2f:c8:00:8b:ca:51:8b:c1:65:c0:
4e:11:b1:ed:a6:71:ee:77:03:1a:45:8b:cf:3b:88:5b:2e:05:
11:2a:66:c8:cb:c1:b7:ad:cc:e1:a6:ef:d0:08:9b:2b:4f:5d:
6b:12:86:ce:08:16:63:55:99:81:5d:da:d3:52:c3:3b:11:41:
22:e4:e5:e3:15:8a:ec:ea:e7:b3:fe:36:11:e9:97:f7:c3:38:
74:b9:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:04:34 2025 by rpki-client