Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wU7og7-CkNw9fghV8BFAsZ6N2X0.roa
File: wU7og7-CkNw9fghV8BFAsZ6N2X0.roa (raw, json)
Hash identifier: Rq270IWP/Ww+j/oHu3XPHB4SFXOqR9jJ+S+RIPrM0Uo=
Subject key identifier: C1:4E:E8:83:BF:82:90:DC:3D:7E:08:55:F0:11:40:B1:9E:8D:D9:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B3C9AB2AF095B6BDB04D0A6A492AC645
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wU7og7-CkNw9fghV8BFAsZ6N2X0.roa
Signing time: Tue 13 Jun 2023 08:05:18 +0000
ROA not before: Tue 13 Jun 2023 08:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:b3c8:b2d5/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:c9:ab:2a:f0:95:b6:bd:b0:4d:0a:6a:49:2a:c6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 08:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c14ee883bf8290dc3d7e0855f01140b19e8dd97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:15:89:bf:09:ae:d8:5b:5c:47:0c:f7:81:
78:bb:9a:25:92:46:a6:fe:a7:6c:f3:c1:9e:bd:62:
d4:ba:27:b7:42:b3:f7:dc:78:6e:8d:2d:57:fe:16:
f4:4a:46:7a:dc:e1:05:29:c6:ac:77:70:26:3c:78:
df:17:31:e2:a2:6b:b9:b0:fc:62:03:43:54:ee:17:
e0:38:79:22:a4:a8:d2:66:69:79:04:8f:01:f7:40:
9c:52:81:f0:92:77:b6:6b:46:fd:12:d8:fb:f8:c8:
f9:48:bb:15:3e:c3:dc:c4:61:59:fe:6f:72:3c:b7:
14:b6:31:f3:cf:12:94:ae:dc:a9:f7:2b:5a:7b:74:
74:72:3a:13:8e:71:51:2d:08:19:01:53:47:ed:1e:
3c:54:be:c8:c4:78:09:1d:e3:ae:b2:41:6a:9b:19:
d9:0e:3b:4b:b3:88:43:9c:89:4f:83:94:a7:66:21:
ee:c4:21:29:28:d7:c1:e1:40:23:35:6f:7d:7a:ca:
6e:15:d9:b6:9b:7b:ef:79:5a:b3:9b:a0:88:dc:85:
ff:c3:13:bd:f7:36:c9:58:fe:36:15:12:79:19:bf:
6d:45:d5:5d:e6:0e:cf:10:6f:49:ab:20:dd:69:95:
ef:c4:90:90:c5:2e:19:82:d0:9b:02:da:05:7e:7a:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:E8:83:BF:82:90:DC:3D:7E:08:55:F0:11:40:B1:9E:8D:D9:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wU7og7-CkNw9fghV8BFAsZ6N2X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:f6:95:31:dd:7f:a8:88:5c:1b:65:7a:5a:23:d9:6f:97:34:
07:77:10:ce:51:d2:f4:a6:90:82:00:75:54:2d:ef:f7:79:d8:
25:6c:42:bd:fb:a8:9d:e4:ec:c5:68:1b:ef:c4:b6:76:0f:12:
9c:00:25:e8:f0:06:63:dc:f9:c9:17:09:8f:bd:c6:6b:20:bf:
60:e7:18:48:f4:34:8b:56:da:19:50:a3:20:30:48:e5:e0:f1:
8d:97:ce:e9:6e:60:36:e7:34:0a:7b:74:47:90:ca:96:84:1a:
1d:86:13:f2:e4:b6:77:62:bc:58:b4:0f:54:a3:b3:fb:e2:80:
03:29:2c:0d:bf:7f:0b:24:00:75:be:11:13:f4:ea:a2:a4:3f:
92:69:df:47:cd:d0:db:94:c3:15:c2:57:44:ca:37:27:3a:c5:
08:bb:ca:2f:69:3c:8f:78:6d:6b:44:64:bb:16:2a:da:9e:73:
06:f5:88:85:ea:70:22:6c:37:7f:ed:b5:0d:b2:32:a5:61:35:
8c:19:8b:f9:66:13:06:8f:01:43:e0:29:9a:02:74:58:ae:bc:
ab:6c:66:74:ab:16:38:18:2a:25:06:ba:30:df:38:35:4b:ad:
64:e5:6b:35:34:1d:d1:93:fd:f8:82:ef:24:f7:79:06:86:19:
08:4f:36:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:35 2025 by rpki-client