Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uxiEMgt1WpF0BhJvXQ85bLCxb6s.roa
File: uxiEMgt1WpF0BhJvXQ85bLCxb6s.roa (raw, json)
Hash identifier: zqh2qfW/B55jgAUnQK18kJYGA6ZBulQS75WmYbRuKaY=
Subject key identifier: BB:18:84:32:0B:75:5A:91:74:06:12:6F:5D:0F:39:6C:B0:B1:6F:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188910C24B4BD1BE78CF2ADB017DB7EBC36
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uxiEMgt1WpF0BhJvXQ85bLCxb6s.roa
Signing time: Tue 06 Jun 2023 14:11:12 +0000
ROA not before: Tue 06 Jun 2023 14:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:0c:24:b4:bd:1b:e7:8c:f2:ad:b0:17:db:7e:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 14:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb1884320b755a917406126f5d0f396cb0b16fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:35:99:e0:95:ef:5d:96:3f:dc:b9:81:79:
37:08:f5:aa:23:49:5f:22:a4:8e:94:1d:94:ef:b4:
e6:8d:f2:79:f2:c7:e5:9b:ed:4a:d1:6d:38:5a:5d:
29:f9:66:09:db:d4:2e:89:16:ae:fd:c7:b4:2a:2f:
89:18:0c:a3:d3:e2:d2:a8:e1:f0:33:ae:a9:ae:6b:
33:52:c2:4b:dd:1a:d2:70:4c:85:38:51:b9:8a:22:
bb:69:90:cd:8b:f2:9c:e6:f1:e1:b2:53:cb:d8:02:
34:70:7e:50:ee:d6:1f:82:97:ff:0d:d8:2f:e5:9e:
30:33:33:e5:06:f0:0f:eb:f6:ab:fd:c8:a9:01:a7:
14:f7:1d:56:1f:a0:72:2d:f3:33:12:90:39:1c:a4:
5b:20:8f:f4:00:35:ef:48:66:df:1b:83:68:a2:44:
ab:32:02:fc:e3:83:3a:09:03:ac:ec:9d:c8:25:79:
75:28:74:8f:3b:9a:30:05:5f:fc:75:2c:64:02:87:
79:61:26:2a:21:32:87:0f:57:2b:5c:d5:dd:48:a6:
f1:9e:50:ff:61:1c:9c:50:ab:5e:27:69:f5:59:5e:
b2:73:04:90:74:99:96:e7:f8:2c:93:b6:f5:1c:b4:
9f:cb:9a:d3:f2:5a:44:f0:66:63:09:22:1f:1c:94:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:18:84:32:0B:75:5A:91:74:06:12:6F:5D:0F:39:6C:B0:B1:6F:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uxiEMgt1WpF0BhJvXQ85bLCxb6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:0f:1f:8f:0f:86:00:2d:f2:96:b8:61:3a:05:37:57:20:f5:
f2:9d:bc:e0:19:91:84:a5:7b:89:92:9c:9a:3f:0d:e5:6a:7a:
55:29:6e:3a:11:88:76:83:60:82:04:74:cd:b1:85:ba:ba:93:
fe:5e:22:f9:2a:6e:18:f7:e4:e2:da:99:bd:c3:c7:99:95:dd:
5d:57:14:a0:d5:4c:65:1d:57:00:95:fa:ab:46:2f:07:58:75:
75:de:39:16:0c:bb:19:02:ef:28:17:a3:fb:7c:c7:fa:cd:ff:
70:1f:68:ee:5d:db:41:14:10:28:51:f0:3c:69:2a:bb:f3:e1:
2c:d7:7a:cd:b3:9e:58:4c:74:c5:05:bb:01:6b:a5:aa:bd:f9:
66:d6:48:9f:39:7d:63:33:f8:af:8d:6c:f0:aa:d8:06:6a:81:
5e:9b:52:ba:d5:96:32:43:ef:ff:85:a2:a5:91:e6:4e:fb:e9:
92:13:77:6b:61:3d:56:cf:1b:32:43:48:f2:37:59:ca:38:3f:
3f:02:bc:0d:7a:5a:ca:8a:00:29:2c:ee:8b:60:9e:69:3d:dd:
39:5f:60:14:d3:39:14:ae:e0:95:91:e0:61:58:72:7d:9b:14:
85:8d:fd:1d:35:64:b3:51:74:1e:19:5f:4b:96:65:40:56:28:
e1:95:a1:dc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiRDCS0vRvnjPKtsBfbfrw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA2MTQxMTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjE4ODQzMjBiNzU1YTkxNzQwNjEyNmY1ZDBmMzk2Y2IwYjE2ZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2s1meCV712WP9y5gXk3CPWqI0lf
IqSOlB2U77TmjfJ58sflm+1K0W04Wl0p+WYJ29QuiRau/ce0Ki+JGAyj0+LSqOHw
M66prmszUsJL3RrScEyFOFG5iiK7aZDNi/Kc5vHhslPL2AI0cH5Q7tYfgpf/Ddgv
5Z4wMzPlBvAP6/ar/cipAacU9x1WH6ByLfMzEpA5HKRbII/0ADXvSGbfG4NookSr
MgL844M6CQOs7J3IJXl1KHSPO5owBV/8dSxkAod5YSYqITKHD1crXNXdSKbxnlD/
YRycUKteJ2n1WV6ycwSQdJmW5/gsk7b1HLSfy5rT8lpE8GZjCSIfHJQW/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLsYhDILdVqRdAYSb10POWywsW+rMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdXhpRU1ndDFXcEYwQmhKdlhRODViTEN4YjZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC8PH48PhgAt8pa4YToF
N1cg9fKdvOAZkYSle4mSnJo/DeVqelUpbjoRiHaDYIIEdM2xhbq6k/5eIvkqbhj3
5OLamb3Dx5mV3V1XFKDVTGUdVwCV+qtGLwdYdXXeORYMuxkC7ygXo/t8x/rN/3Af
aO5d20EUEChR8DxpKrvz4SzXes2znlhMdMUFuwFrpaq9+WbWSJ85fWMz+K+NbPCq
2AZqgV6bUrrVljJD7/+FoqWR5k776ZITd2thPVbPGzJDSPI3Wco4Pz8CvA16WsqK
ACks7otgnmk93TlfYBTTORSu4JWR4GFYcn2bFIWN/R01ZLNRdB4ZX0uWZUBWKOGV
odw=
-----END CERTIFICATE-----
Generated at Fri May 2 15:39:31 2025 by rpki-client