Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UILX0q3-qPRJvFcIBM4B5whQxMQ.roa
File: UILX0q3-qPRJvFcIBM4B5whQxMQ.roa (raw, json)
Hash identifier: Ikt+fP5VJS2xcRzuIS+YZsWuzCy1OF/NjisnsJPIfMk=
Subject key identifier: 50:82:D7:D2:AD:FE:A8:F4:49:BC:57:08:04:CE:01:E7:08:50:C4:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186846AFD02830FA1661D4BF578116DFF58
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UILX0q3-qPRJvFcIBM4B5whQxMQ.roa
Signing time: Fri 24 Feb 2023 17:14:09 +0000
ROA not before: Fri 24 Feb 2023 17:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:6a:fd:02:83:0f:a1:66:1d:4b:f5:78:11:6d:ff:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 17:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5082d7d2adfea8f449bc570804ce01e70850c4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cd:4d:e2:73:ef:35:9f:df:31:ba:6d:f5:77:
ae:a6:84:5c:1d:e9:f0:33:3d:6e:39:82:75:da:15:
48:bf:97:6a:11:93:47:8a:42:24:0f:c0:64:74:23:
9e:bf:81:90:6e:a3:24:4f:f8:0a:62:6b:12:17:4a:
42:4c:33:c4:9d:03:d2:89:74:0f:46:1f:e8:97:9a:
95:05:72:3b:d0:cb:ee:a1:33:75:5c:b8:47:39:69:
12:95:ef:2c:86:98:7f:fb:d3:e6:51:05:08:ff:17:
7f:cb:2f:d1:8f:63:1a:56:ea:fa:03:cf:0d:8e:ba:
8b:b2:a7:39:68:84:43:56:d5:60:4b:cd:d0:82:64:
ff:f9:b6:0a:6f:14:7e:ac:c1:36:b0:4e:4a:86:b6:
38:fe:18:4b:17:fe:6b:03:3b:70:96:32:c9:52:4f:
53:ec:e0:f5:ee:b8:56:de:2a:25:a3:98:02:30:5a:
a2:b8:c6:79:d5:c6:ec:21:9d:08:c8:e9:3f:71:3f:
e5:e8:31:d2:0a:69:0c:06:8e:87:ef:01:bd:f6:55:
bd:d7:b4:75:c4:ac:7d:8e:e2:62:22:30:9b:09:93:
1c:6d:97:fa:e9:21:9f:a0:48:b0:e7:34:61:93:f4:
15:97:75:b5:49:d1:7e:15:93:f2:c6:17:ce:a3:89:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:D7:D2:AD:FE:A8:F4:49:BC:57:08:04:CE:01:E7:08:50:C4:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UILX0q3-qPRJvFcIBM4B5whQxMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:6a:29:69:b2:d9:f7:04:a4:b9:9c:ed:dc:a5:1d:4f:db:ee:
85:64:f5:0f:77:f4:88:3a:d2:1f:03:19:02:96:ff:9b:34:80:
6a:b9:ee:9d:e6:bc:ea:d4:49:8c:6a:68:d7:04:fe:92:f9:e9:
d6:51:39:a9:88:db:78:88:54:9f:c2:6e:55:e9:03:d9:0e:2b:
7e:17:d7:0b:f6:80:d4:29:05:df:d2:fb:28:6b:14:4f:2b:b9:
b6:8e:d7:78:6d:87:17:83:a5:77:4a:58:4f:98:66:5b:8b:0a:
b8:56:da:a3:cc:2b:07:ff:34:d9:1d:14:75:53:ab:98:10:6e:
9f:9b:d9:13:66:60:b4:f0:8b:43:b1:4c:9a:df:80:07:08:a5:
b8:e7:75:0b:98:19:03:55:da:a0:4d:41:44:6e:ad:c0:bd:2a:
5f:3c:0c:2f:13:f3:6b:d2:b1:4c:1d:42:ca:26:52:b4:28:6d:
ad:bd:e8:71:f6:52:f8:02:4d:5f:1b:36:ec:0c:1c:6c:71:95:
a2:01:0d:32:88:a7:76:c8:5a:89:80:e7:76:d8:63:68:85:90:
17:ec:e0:ee:55:13:36:a8:30:d6:71:fe:49:79:75:be:0e:53:
84:42:86:55:16:61:ac:ed:0b:64:41:96:1f:9d:9a:b7:d7:50:
3d:04:31:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:34 2025 by rpki-client