Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uyFCSr04Ni1TlL_2bApKseDm7ms.roa
File: uyFCSr04Ni1TlL_2bApKseDm7ms.roa (raw, json)
Hash identifier: Ff/t9H/QlfKYohNgSLV19jsE2aAlKLDJs2quEQtyOlw=
Subject key identifier: BB:21:42:4A:BD:38:36:2D:53:94:BF:F6:6C:0A:4A:B1:E0:E6:EE:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186872DDE6A4FFAD6D9B073F635F7A90F55
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uyFCSr04Ni1TlL_2bApKseDm7ms.roa
Signing time: Sat 25 Feb 2023 06:06:15 +0000
ROA not before: Sat 25 Feb 2023 06:06:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:872d:4f2e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:2d:de:6a:4f:fa:d6:d9:b0:73:f6:35:f7:a9:0f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 06:06:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb21424abd38362d5394bff66c0a4ab1e0e6ee6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:92:ce:12:62:cb:21:22:a5:a2:ed:65:d1:
2c:ff:4e:93:59:d1:b7:5f:13:bd:10:f8:9a:51:0a:
8a:5c:16:1e:b3:4f:82:3d:0a:40:7f:5d:3d:82:95:
42:38:29:a8:62:60:58:3a:89:69:31:96:85:e1:2f:
d2:de:26:97:bd:a0:ff:91:20:d7:9b:0d:b3:87:3d:
89:97:8e:6b:94:90:13:0d:96:b2:e4:2d:6e:b2:a0:
2a:aa:0d:0f:3b:7f:b6:b7:dd:49:5d:09:f9:33:1d:
e2:09:c0:b2:47:c6:4d:e1:d2:51:d0:0e:9d:dd:ff:
63:1b:3f:de:cd:01:35:c0:2e:82:01:15:76:8d:cf:
9f:e8:24:11:26:7c:65:5e:c2:25:5f:44:a5:00:88:
c2:39:d9:dd:ca:2c:62:e1:ec:fd:66:e4:e1:3c:31:
f0:4c:d1:88:c2:93:bb:09:06:2f:91:96:9d:03:06:
25:f1:c0:eb:d5:86:c3:68:13:61:d2:cc:dc:1d:55:
58:37:ee:c3:e2:7f:36:1d:e4:5e:c2:49:71:40:fb:
8a:ee:ef:22:0d:77:2f:cf:23:50:3f:be:de:9f:cf:
17:54:cb:41:92:13:c3:a1:91:de:4c:4b:e5:02:7c:
cc:28:49:87:df:c3:5e:6c:87:87:61:96:d8:7b:93:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:21:42:4A:BD:38:36:2D:53:94:BF:F6:6C:0A:4A:B1:E0:E6:EE:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uyFCSr04Ni1TlL_2bApKseDm7ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:cd:4b:e8:ab:06:82:ac:be:3e:1e:dd:e5:20:24:9c:6e:6a:
66:ea:25:99:3f:a1:04:c8:6c:08:a2:e9:aa:a8:88:92:86:c1:
0d:b8:6f:19:5d:65:6b:72:44:57:d5:de:a4:ca:c7:26:f2:1b:
0e:9c:0f:d5:18:41:d8:93:e5:1e:0d:91:a5:c2:bc:07:62:b1:
39:89:76:ac:10:ce:0a:97:f6:1e:36:9a:58:09:b3:28:be:3d:
c0:4b:b3:37:9f:63:c6:71:b1:4f:d7:b6:49:b6:85:56:0e:61:
d3:ad:6b:ca:79:47:ce:43:22:96:bd:64:b2:09:dc:97:30:a2:
7b:b1:9f:d3:7f:e2:42:1f:4c:05:f3:fc:fc:1d:27:5a:81:63:
54:11:0b:8d:4a:05:d2:c5:45:c8:e1:89:37:7e:81:f1:7b:cb:
3d:f8:84:34:20:09:a4:b9:68:38:ab:d9:7a:bf:03:16:30:75:
45:d2:99:c1:86:78:b2:22:3a:83:0f:f7:7d:5a:21:46:b8:56:
24:4f:eb:66:db:aa:71:98:86:f0:52:41:d8:30:b4:63:dc:8c:
f1:69:e8:cf:7e:12:64:98:9b:d2:1a:aa:3f:92:12:0d:9b:d0:
f6:a4:98:3c:a9:09:84:4c:8b:72:f7:76:16:10:d3:f1:e9:eb:
27:e8:7e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:49:16 2025 by rpki-client