Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIIWhBZys0gl_I5m6rlITTswwB4.roa
File: UIIWhBZys0gl_I5m6rlITTswwB4.roa (raw, json)
Hash identifier: yGj/F8HVEokR4nRG4J2ZO1JX2AeDMUy1yadOmOQcueg=
Subject key identifier: 50:82:16:84:16:72:B3:48:25:FC:8E:66:EA:B9:48:4D:3B:30:C0:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868461EB273623AB38BCA4B1941ED04B30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIIWhBZys0gl_I5m6rlITTswwB4.roa
Signing time: Fri 24 Feb 2023 17:04:15 +0000
ROA not before: Fri 24 Feb 2023 17:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:8461:e285/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:61:eb:27:36:23:ab:38:bc:a4:b1:94:1e:d0:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 17:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=508216841672b34825fc8e66eab9484d3b30c01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:51:14:a2:dc:dd:91:38:9a:c1:86:89:fc:
76:f9:56:f6:23:e4:c5:0a:4a:6d:33:22:0a:c3:c9:
5c:90:7b:43:76:92:19:0e:ba:6a:6d:6a:f0:02:70:
56:ed:43:fc:20:1d:6c:fa:bc:43:72:68:a6:ff:44:
c7:5f:ec:0d:ef:81:7f:0f:6a:e4:43:7d:03:88:8d:
41:a9:2b:f7:3d:7f:4d:71:22:d6:93:f2:12:0b:25:
a0:84:2c:b9:68:95:5e:08:2b:b6:69:5d:c7:94:c1:
ec:7a:0e:38:f1:d2:7c:70:5b:c6:fd:29:1d:0b:b6:
0e:22:ef:3b:de:65:29:1c:a1:cd:d8:c2:6d:e9:f0:
60:08:ea:bf:ce:a4:1d:40:da:b4:39:b7:37:59:05:
39:ab:c5:07:f4:7b:da:c6:5d:94:e3:8e:1e:3c:75:
80:3d:00:06:84:29:d0:28:b7:90:4d:d4:8d:9a:57:
36:2c:71:c7:e5:e5:7f:8d:c4:cb:87:ce:78:6a:af:
ee:51:71:85:c8:8f:e7:f8:8a:33:e0:ff:41:11:f4:
2e:02:5f:61:b5:2b:96:8c:41:1b:08:d9:00:f5:f4:
0f:7a:81:8b:d7:a7:2e:3d:44:4e:25:fc:26:44:13:
98:08:77:9d:b9:b9:ac:8c:3a:55:0c:13:5b:3a:bf:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:16:84:16:72:B3:48:25:FC:8E:66:EA:B9:48:4D:3B:30:C0:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIIWhBZys0gl_I5m6rlITTswwB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:f0:f2:f1:44:d5:37:ca:86:ef:58:3d:30:f6:14:20:fe:5f:
87:e4:fd:89:90:d0:f3:31:bc:dc:4b:92:77:e9:a3:a2:92:43:
f9:8e:43:29:dc:b3:cb:50:bf:e8:06:44:6f:7b:62:e4:0d:ec:
19:87:ac:b1:5d:cb:b7:67:c9:64:52:05:97:2e:cc:20:b9:01:
5b:15:4a:ca:71:53:40:01:0e:64:66:4a:b1:8e:7f:cd:de:6f:
07:92:1a:93:b8:9b:b7:29:ac:28:2b:2f:c4:be:0d:2d:eb:98:
48:c2:95:32:1b:66:65:ca:e3:48:7b:70:e5:af:7a:2e:51:3d:
cf:d5:79:50:1d:e1:17:10:65:47:61:f6:9d:2d:7f:11:54:62:
82:52:c1:12:9e:e6:25:c8:4f:1a:fa:79:43:f9:20:f5:4e:a5:
1d:eb:81:61:90:ba:3e:23:d5:04:91:36:a4:66:9e:09:e2:51:
60:ac:59:b9:04:70:e2:aa:20:28:bb:f1:73:f2:53:b6:0e:61:
c5:ea:f1:59:7d:d1:16:05:77:e4:54:e2:3a:39:ec:83:af:e8:
c7:ae:3b:cb:eb:7c:a7:d9:5b:bc:c7:71:2f:87:b9:88:d6:b2:
1d:c2:ed:cc:b0:0f:96:53:55:3b:55:f5:a4:1a:7e:51:ef:34:
bd:64:96:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaEYesnNiOrOLyksZQe0EswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI0MTcwNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDgyMTY4NDE2NzJiMzQ4MjVmYzhlNjZlYWI5NDg0ZDNiMzBjMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAlRFKLc3ZE4msGGifx2+Vb2I+TF
CkptMyIKw8lckHtDdpIZDrpqbWrwAnBW7UP8IB1s+rxDcmim/0THX+wN74F/D2rk
Q30DiI1BqSv3PX9NcSLWk/ISCyWghCy5aJVeCCu2aV3HlMHseg448dJ8cFvG/Skd
C7YOIu873mUpHKHN2MJt6fBgCOq/zqQdQNq0Obc3WQU5q8UH9Hvaxl2U444ePHWA
PQAGhCnQKLeQTdSNmlc2LHHH5eV/jcTLh854aq/uUXGFyI/n+Ioz4P9BEfQuAl9h
tSuWjEEbCNkA9fQPeoGL16cuPUROJfwmRBOYCHedubmsjDpVDBNbOr/uCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFCCFoQWcrNIJfyOZuq5SE07MMAeMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVUlJV2hCWnlzMGdsX0k1bTZybElUVHN3d0I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHfw8vFE1TfKhu9YPTD2
FCD+X4fk/YmQ0PMxvNxLknfpo6KSQ/mOQyncs8tQv+gGRG97YuQN7BmHrLFdy7dn
yWRSBZcuzCC5AVsVSspxU0ABDmRmSrGOf83ebweSGpO4m7cprCgrL8S+DS3rmEjC
lTIbZmXK40h7cOWvei5RPc/VeVAd4RcQZUdh9p0tfxFUYoJSwRKe5iXITxr6eUP5
IPVOpR3rgWGQuj4j1QSRNqRmngniUWCsWbkEcOKqICi78XPyU7YOYcXq8Vl90RYF
d+RU4jo57IOv6MeuO8vrfKfZW7zHcS+HuYjWsh3C7cywD5ZTVTtV9aQaflHvNL1k
lpk=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:00 2025 by rpki-client