Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ujL1fzmYCMKzRq-wcTTDzh6UeA.roa
File: 2ujL1fzmYCMKzRq-wcTTDzh6UeA.roa (raw, json)
Hash identifier: 3Wkph1VHbl7+Z+o+DJ+Y0kyAgvxuBGcUQdNQekGRyW0=
Subject key identifier: DA:E8:CB:D5:FC:E6:60:23:0A:CD:1A:BE:C1:C4:D3:0F:38:7A:51:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866845E920739A2776CB20320A7099C57A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ujL1fzmYCMKzRq-wcTTDzh6UeA.roa
Signing time: Sun 19 Feb 2023 06:04:17 +0000
ROA not before: Sun 19 Feb 2023 06:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6845:e34a/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:45:e9:20:73:9a:27:76:cb:20:32:0a:70:99:c5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 06:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dae8cbd5fce660230acd1abec1c4d30f387a51e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:f7:b7:e4:3b:02:a4:ad:62:99:0e:68:f1:
ff:8a:b8:65:2b:9e:b9:57:1c:a2:bd:55:eb:36:d1:
2f:5e:4a:a2:a1:8e:3c:5d:c3:da:09:d4:2b:d9:f6:
e2:e3:ff:dc:56:ef:e3:c3:44:84:02:b6:a3:48:89:
8a:a2:b4:d8:8b:26:f5:6b:b4:48:26:18:aa:a8:98:
9d:c0:fb:a8:23:d6:0f:1a:bc:d1:d9:26:5d:be:aa:
0c:dd:79:45:d2:ef:97:cc:3f:fa:af:9b:f6:12:b7:
e0:c4:23:80:1c:00:dc:c2:93:72:39:b2:9c:e5:81:
e1:4f:e1:b4:29:fa:ff:94:41:8a:7e:47:2d:e6:40:
3f:54:d0:3e:08:54:c2:cf:b6:04:04:e5:bf:28:e4:
ac:a3:33:4a:63:b1:f5:64:2a:ee:4f:ab:97:a7:cb:
7c:e7:05:0d:96:f3:94:65:59:54:3e:85:b8:8c:36:
f9:2b:02:f8:36:fd:0d:8c:e2:4f:7d:e6:92:c9:61:
0a:b3:c9:b4:8e:ea:07:cc:ac:9c:04:df:f4:90:a6:
65:df:74:69:3f:a8:70:2d:61:f5:a3:22:7d:ef:9e:
de:be:e2:54:a0:43:1c:84:a8:5d:74:5e:7e:53:67:
4d:07:39:1b:88:2c:42:c0:bc:04:c7:d7:b9:45:b8:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:CB:D5:FC:E6:60:23:0A:CD:1A:BE:C1:C4:D3:0F:38:7A:51:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2ujL1fzmYCMKzRq-wcTTDzh6UeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:4e:dc:d7:e9:06:0c:b6:a5:be:d4:6b:25:b5:ae:0c:ec:f2:
d0:0e:c5:5d:78:f5:3e:4e:c8:5a:99:17:cd:9a:ae:37:87:de:
82:09:b5:d6:10:74:ed:a4:e8:96:c3:70:80:17:ae:e0:b6:37:
7a:a8:00:89:39:52:45:a6:ea:d3:90:b3:b5:01:02:0e:57:3c:
32:d9:3c:5f:3d:4b:cc:3c:d6:dc:b5:c9:f0:94:d7:5d:d2:d9:
9a:75:87:9b:48:5f:3b:b5:d6:fc:5f:97:e3:94:66:16:0b:fe:
3d:92:e0:7f:d9:76:e8:5b:02:8a:72:20:0a:e2:46:35:5a:60:
9c:56:20:7b:56:07:0d:22:0b:89:a6:47:34:f0:30:1d:8c:db:
92:47:ef:79:f7:93:10:15:8f:1c:be:b7:7e:2b:97:df:6c:1b:
15:ef:ee:79:3c:69:80:84:32:25:b8:ef:51:4f:e5:50:0a:eb:
19:f6:a0:b8:03:8f:03:8b:ec:bb:db:00:38:db:80:26:e0:41:
4c:7e:34:95:59:d5:d2:00:1b:f9:48:c5:65:4c:66:ca:a6:fe:
e4:ff:cb:14:33:b7:dc:15:63:78:0e:13:3b:ff:99:03:aa:57:
49:88:79:ea:26:a3:f9:17:3b:ad:05:f0:c5:d0:63:6c:75:8c:
87:52:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:25:45 2025 by rpki-client