Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U-qw1oYL5JkE2qpqejbJJOseo3w.roa
File: U-qw1oYL5JkE2qpqejbJJOseo3w.roa (raw, json)
Hash identifier: eg5O8VYmlfXQ17Z49VhKrWyxEYkSl2hsNJrt1cLbr3I=
Subject key identifier: 53:EA:B0:D6:86:0B:E4:99:04:DA:AA:6A:7A:36:C9:24:EB:1E:A3:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184561A7D2E18EA405C3F4A128D3CF693B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U-qw1oYL5JkE2qpqejbJJOseo3w.roa
Signing time: Tue 08 Nov 2022 07:18:07 +0000
ROA not before: Tue 08 Nov 2022 07:18:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:1a:7d:2e:18:ea:40:5c:3f:4a:12:8d:3c:f6:93:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 8 07:18:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53eab0d6860be49904daaa6a7a36c924eb1ea37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:45:f2:76:3b:57:49:fa:d8:11:0e:5b:98:7d:
f0:30:9d:44:df:f0:76:28:bf:ae:ad:ef:7a:1d:b7:
d2:c1:b7:30:25:3c:e7:36:43:d1:1a:de:de:cb:4c:
67:61:d1:f9:1b:27:d5:c1:a5:a7:98:25:c8:29:a6:
99:af:ee:18:ce:56:96:3a:42:43:f7:e8:98:32:3f:
c2:08:e1:e2:d2:e4:15:d0:08:dc:8b:be:e2:36:70:
c7:ab:65:cc:87:cd:b4:81:3a:4b:6d:af:3b:cc:cc:
d5:28:ff:25:aa:3e:af:dc:f0:df:e8:d3:6e:3f:cd:
3a:a5:02:53:5a:15:9e:79:ab:ad:61:25:10:57:41:
4c:53:8c:08:d1:33:89:eb:72:4d:97:5d:2f:13:ba:
5b:33:7a:ef:65:ea:d6:6f:7f:bd:bf:d4:ad:c6:46:
65:46:eb:84:87:70:e3:cb:a8:b7:ec:45:e7:39:d5:
ee:d0:1f:06:71:00:d5:80:83:78:73:b1:89:ca:d4:
9a:d2:bf:c2:d4:e1:67:49:f8:29:8a:b5:3a:be:6d:
4f:07:e1:0f:20:c5:2d:52:00:64:f6:9a:95:e3:ab:
23:d6:1d:39:08:56:8f:0c:49:a2:46:95:ec:e8:c6:
a2:b9:2d:3d:56:5e:4b:1f:1f:3d:64:79:e8:d1:7b:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:B0:D6:86:0B:E4:99:04:DA:AA:6A:7A:36:C9:24:EB:1E:A3:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U-qw1oYL5JkE2qpqejbJJOseo3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:81:15:89:5a:27:82:f8:53:ad:d6:b9:d7:3a:15:9e:f0:d1:
bf:af:a7:55:42:8b:42:3d:ad:5b:c6:d9:a6:df:4b:d4:48:cf:
6b:54:fb:f8:89:cf:ee:f4:3a:28:7b:ca:53:52:b3:2c:29:ac:
b8:90:b5:05:26:65:59:d5:17:59:96:33:ba:08:db:6d:8d:3a:
ff:e8:5e:50:d1:bd:8b:f2:ec:dd:ce:82:75:52:6d:4d:61:29:
a1:76:af:5a:3e:44:19:cd:cc:c1:3c:c0:dc:d6:9e:bc:7c:eb:
77:a3:64:68:ce:0c:94:72:11:38:a4:78:de:86:31:b9:bc:e6:
b1:7f:87:4f:b9:9c:f3:c5:7f:5f:62:18:81:22:a4:e2:44:51:
d5:c2:05:e8:3b:66:3b:37:fb:9f:1d:42:18:e9:20:2e:47:f2:
41:84:c8:19:cc:74:4f:0f:78:64:d1:0a:0b:65:ee:e5:cc:cc:
ea:c0:83:bb:84:a7:52:09:e6:f8:67:18:80:71:10:96:84:d9:
24:b4:f5:a8:0a:22:02:ab:01:42:58:7d:19:e6:2b:c2:63:84:
cd:08:66:f9:1c:f0:70:82:9e:28:de:07:fb:9a:1f:0b:96:aa:
ba:dd:31:48:52:95:13:70:b9:a6:12:75:38:53:f3:29:e0:43:
21:ff:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:20 2025 by rpki-client