Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UERccKAK_62P4ISlYhvUDskGUBQ.roa
File: UERccKAK_62P4ISlYhvUDskGUBQ.roa (raw, json)
Hash identifier: YIxsZRxTwy+xdgMj32rJuuHkJJKe4XJb5UQx57uhyoU=
Subject key identifier: 50:44:5C:70:A0:0A:FF:AD:8F:E0:84:A5:62:1B:D4:0E:C9:06:50:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884DE1D0D47898E6B7EF6A6F3C0CB66772
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UERccKAK_62P4ISlYhvUDskGUBQ.roa
Signing time: Wed 24 May 2023 13:10:24 +0000
ROA not before: Wed 24 May 2023 13:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:e1:d0:d4:78:98:e6:b7:ef:6a:6f:3c:0c:b6:67:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 13:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50445c70a00affad8fe084a5621bd40ec9065014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:9b:7d:16:e9:d7:b6:af:72:f8:82:78:78:
7f:f0:c1:f1:58:e2:8b:39:3d:61:28:fa:45:56:24:
48:80:09:70:a9:f2:ce:d5:24:aa:d1:ff:aa:6d:9c:
bf:32:49:53:fc:bf:f6:d5:cf:bd:2b:ef:70:f2:00:
87:26:e5:0c:18:24:ba:8d:fd:6a:41:da:60:7d:29:
bd:18:d2:c8:c0:c8:91:29:17:35:cf:6f:53:9c:57:
1f:f6:4a:bd:5d:51:23:62:89:fb:27:86:25:2b:88:
e2:58:9b:d9:5e:c3:8a:9a:41:12:3e:e8:67:3a:77:
e4:87:8d:93:73:27:b3:b8:cd:d8:cc:29:e0:ba:bf:
9c:4e:e2:62:0f:60:9d:ff:82:8d:23:1a:db:34:24:
b8:63:02:be:03:44:71:04:c2:93:ea:cf:17:ff:3d:
d3:1a:2b:1c:f4:b6:46:b2:a9:4f:96:ed:2a:62:96:
28:04:98:d8:2b:a8:e9:46:da:8c:c8:51:b8:2e:23:
ad:c9:e9:25:7d:ed:d3:51:d2:ce:d7:9b:ff:94:92:
8c:aa:82:2d:14:71:7b:39:60:79:d2:2d:73:09:02:
9a:15:61:c3:00:9d:fa:d8:3f:fe:ed:58:de:d3:5b:
a1:02:c6:ea:37:56:06:c2:0b:c3:49:89:d2:94:b6:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:44:5C:70:A0:0A:FF:AD:8F:E0:84:A5:62:1B:D4:0E:C9:06:50:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UERccKAK_62P4ISlYhvUDskGUBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:f3:d3:74:6e:71:26:6a:5c:af:20:c5:85:c1:1a:91:b5:c4:
8b:0f:5a:04:ee:ed:27:b2:b1:23:0c:5b:65:bf:6e:7b:c4:b9:
dc:40:8f:52:c8:78:36:8a:76:58:56:8b:bc:e0:ac:05:cb:15:
22:22:d3:e0:dd:ef:ea:b7:9a:5d:0a:71:76:58:3d:12:d8:a7:
88:0d:ac:dd:e0:23:8e:41:e2:2b:4b:0b:d4:7c:5b:1f:13:d6:
34:18:f5:72:af:bc:08:e1:91:ce:76:57:8a:1f:40:d1:39:bd:
ef:b5:06:77:ce:be:7d:17:14:ab:e5:8c:0e:ee:60:f9:c6:b8:
7f:e0:09:bb:ac:51:3e:ca:63:82:a9:1a:5b:21:93:04:9f:41:
a7:83:80:5e:50:94:7c:8b:28:4e:c9:fa:ff:47:1f:7b:1c:28:
24:30:ac:62:6a:e0:d5:43:94:ca:6d:d4:e3:e7:93:71:b1:a9:
da:0f:a5:e6:88:dc:5d:86:6e:1b:8c:8e:5d:8b:8d:a5:bf:9d:
91:a3:ae:5f:65:5f:fc:d6:07:99:09:4c:62:9a:a2:a7:39:23:
64:68:ef:db:2b:ec:9e:d8:6c:af:45:a7:83:20:bc:ba:03:37:
9c:43:7e:9e:51:e6:d1:a8:1d:18:c0:c8:fc:5f:ac:19:67:15:
9c:35:e6:76
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhN4dDUeJjmt+9qbzwMtmdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI0MTMxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDQ0NWM3MGEwMGFmZmFkOGZlMDg0YTU2MjFiZDQwZWM5MDY1MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5+bfRbp17avcviCeHh/8MHxWOKL
OT1hKPpFViRIgAlwqfLO1SSq0f+qbZy/MklT/L/21c+9K+9w8gCHJuUMGCS6jf1q
QdpgfSm9GNLIwMiRKRc1z29TnFcf9kq9XVEjYon7J4YlK4jiWJvZXsOKmkESPuhn
Onfkh42TcyezuM3YzCngur+cTuJiD2Cd/4KNIxrbNCS4YwK+A0RxBMKT6s8X/z3T
Gisc9LZGsqlPlu0qYpYoBJjYK6jpRtqMyFG4LiOtyeklfe3TUdLO15v/lJKMqoIt
FHF7OWB50i1zCQKaFWHDAJ362D/+7Vje01uhAsbqN1YGwgvDSYnSlLZrHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFBEXHCgCv+tj+CEpWIb1A7JBlAUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVUVSY2NLQUtfNjJQNElTbFlodlVEc2tHVUJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABjz03RucSZqXK8gxYXB
GpG1xIsPWgTu7SeysSMMW2W/bnvEudxAj1LIeDaKdlhWi7zgrAXLFSIi0+Dd7+q3
ml0KcXZYPRLYp4gNrN3gI45B4itLC9R8Wx8T1jQY9XKvvAjhkc52V4ofQNE5ve+1
BnfOvn0XFKvljA7uYPnGuH/gCbusUT7KY4KpGlshkwSfQaeDgF5QlHyLKE7J+v9H
H3scKCQwrGJq4NVDlMpt1OPnk3GxqdoPpeaI3F2GbhuMjl2LjaW/nZGjrl9lX/zW
B5kJTGKaoqc5I2Ro79sr7J7YbK9Fp4MgvLoDN5xDfp5R5tGoHRjAyPxfrBlnFZw1
5nY=
-----END CERTIFICATE-----
Generated at Thu Jun 12 02:25:17 2025 by rpki-client