Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UJykrgn1OCAM5JYGi1rhwkEccj4.roa
File: UJykrgn1OCAM5JYGi1rhwkEccj4.roa (raw, json)
Hash identifier: GUxE9KL7Et+7GJhLuy14f/5AIBbB1QADgRynlJTHBV8=
Subject key identifier: 50:9C:A4:AE:09:F5:38:20:0C:E4:96:06:8B:5A:E1:C2:41:1C:72:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B87F50EBD3D3A1DAFE14D9A62C923A5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UJykrgn1OCAM5JYGi1rhwkEccj4.roa
Signing time: Wed 02 Aug 2023 23:04:58 +0000
ROA not before: Wed 02 Aug 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:b87e:ae8b/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b8:7f:50:eb:d3:d3:a1:da:fe:14:d9:a6:2c:92:3a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=509ca4ae09f538200ce496068b5ae1c2411c723e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:8f:22:67:94:2f:50:fb:82:6f:22:92:2b:
11:98:20:54:62:d5:00:e2:26:cc:e0:21:20:3d:f7:
b2:80:cd:30:38:60:6c:d3:b9:7e:73:d5:a2:50:31:
03:cc:f7:11:36:d2:5f:52:c9:d2:78:6f:3b:5a:aa:
e9:38:f3:a6:4d:17:fe:21:97:97:2e:26:ad:71:f8:
a3:00:96:ca:7d:ff:66:16:fb:4b:ff:70:4a:e3:6f:
76:04:43:ab:4a:87:e7:53:76:d7:37:6b:1e:5d:ba:
0d:71:8a:60:94:09:71:91:a4:c1:51:a5:13:24:4b:
aa:9c:68:df:3d:79:0b:bd:23:8e:69:ca:6b:bc:e3:
c5:bc:7c:58:fe:12:9d:b7:a7:1c:23:f4:d2:9b:eb:
b5:e1:7f:c2:4e:15:e6:6b:a7:7b:68:d3:b9:7a:95:
f4:65:6a:42:f1:52:a1:40:37:3e:96:81:20:1a:34:
8b:8d:f2:3c:36:10:bd:b1:76:f5:6f:8b:1e:08:50:
f1:48:55:d9:de:1e:52:c1:d7:86:bf:60:af:9c:81:
23:58:5d:3e:aa:a0:2e:12:7a:08:13:d8:7f:5f:ef:
6b:5b:6f:8c:cf:f7:12:23:ad:a8:26:92:8c:c6:8f:
cd:14:6d:e5:d7:6c:e4:8c:b8:69:62:38:8d:90:3c:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9C:A4:AE:09:F5:38:20:0C:E4:96:06:8B:5A:E1:C2:41:1C:72:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UJykrgn1OCAM5JYGi1rhwkEccj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:58:04:0c:04:35:32:36:e4:a7:63:3f:56:00:a3:85:24:69:
ce:11:87:71:84:77:d1:83:1c:8e:74:e4:b2:74:a5:f3:b1:c2:
ae:30:33:62:2b:4d:11:17:73:88:34:ea:e9:52:21:df:50:f4:
4b:1d:47:f9:e6:28:57:9e:56:59:10:9b:a1:f2:75:a5:3a:ac:
c2:fa:c9:c6:35:af:b3:c9:24:ae:2d:73:13:1d:55:f9:c3:f9:
85:9c:1a:e2:8a:6a:f7:50:cd:10:83:0e:05:78:16:60:93:79:
96:34:23:65:33:25:db:d1:b3:38:49:0e:b2:21:16:d4:60:62:
cc:85:ca:20:31:ff:19:bf:7b:3a:64:d2:5e:78:10:33:23:51:
e1:e8:40:cc:3a:e3:97:35:f9:31:bc:35:d0:e7:e7:15:fc:f2:
43:40:3b:a2:0e:e3:07:29:17:b2:1f:3a:fa:cd:c9:25:b4:b2:
c1:08:43:54:f5:68:b0:3b:91:f8:50:65:f7:f0:31:11:63:47:
85:c0:88:99:58:24:bd:34:b6:8a:d0:e3:ab:57:0d:33:9b:9d:
cd:f3:97:cd:ad:68:36:fa:34:e9:db:89:7d:af:22:a0:6a:4f:
19:16:4e:e3:36:57:1d:65:bb:11:6e:a3:89:6d:76:41:fc:2e:
ff:62:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:10:27 2025 by rpki-client