Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UT10SzslFl9LWB6df8YHd8BNHzc.roa
File: UT10SzslFl9LWB6df8YHd8BNHzc.roa (raw, json)
Hash identifier: 9r3bqqIQnj50KvJuc8Tc6nMXzjP9kLVlOb9JIE+kjQg=
Subject key identifier: 51:3D:74:4B:3B:25:16:5F:4B:58:1E:9D:7F:C6:07:77:C0:4D:1F:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A0F8471330713E38064F1B1C5D9EB7E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UT10SzslFl9LWB6df8YHd8BNHzc.roa
Signing time: Tue 22 Nov 2022 20:12:16 +0000
ROA not before: Tue 22 Nov 2022 20:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a0:f8:47:13:30:71:3e:38:06:4f:1b:1c:5d:9e:b7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 22 20:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=513d744b3b25165f4b581e9d7fc60777c04d1f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:b7:23:f0:de:4a:cf:06:ed:d0:f2:0b:cf:
79:dd:6d:81:dc:15:2a:4b:43:c0:be:6a:4d:4e:ac:
41:fa:44:63:89:d6:33:a9:6a:51:f2:8d:b6:be:37:
61:f0:a0:83:dd:b0:39:68:e7:57:59:c2:a3:44:88:
69:4b:ef:4b:19:53:3a:be:21:66:e1:47:f0:19:29:
1a:11:f0:be:a4:6c:12:7f:48:5d:27:4a:c1:5b:cb:
44:cc:be:f1:74:fd:92:44:85:91:f6:f6:11:0e:43:
2b:f4:33:09:50:22:9b:6f:bb:b7:62:9f:e8:7e:1a:
c0:96:56:35:d1:20:f3:ca:e1:5b:fa:50:67:64:06:
aa:1b:1b:74:04:bf:65:84:b5:bf:67:cb:7a:8f:52:
10:5e:75:a3:f2:c9:ee:81:91:d8:89:08:98:f9:6a:
d2:a7:86:49:41:94:7a:f2:fa:97:36:80:e7:25:d6:
12:8f:60:13:d8:a4:55:06:66:7d:03:30:0e:fb:cc:
50:b5:26:06:7c:01:e1:7e:63:66:42:58:21:e4:9f:
58:29:21:fc:06:21:2e:66:a0:d4:a2:b7:20:a3:2f:
41:c5:ce:8f:f1:af:a6:5c:c1:3d:63:47:d5:3b:72:
71:62:b1:35:54:3b:f3:43:ed:25:b7:d6:37:95:57:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:74:4B:3B:25:16:5F:4B:58:1E:9D:7F:C6:07:77:C0:4D:1F:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UT10SzslFl9LWB6df8YHd8BNHzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:16:dc:43:04:9f:c7:26:dc:75:cd:7b:e7:2b:2b:59:18:0f:
c3:c6:98:f7:2a:82:57:16:fa:08:34:c8:50:e3:a0:94:8a:8b:
9a:20:bd:db:f7:5c:f5:f2:9e:1c:47:4a:9c:07:9a:0b:ae:b9:
24:d5:e4:b8:4b:e1:8a:9b:65:d5:3e:07:86:42:94:81:fe:d2:
c4:63:d8:5b:81:ba:57:a4:a5:35:bb:cc:65:20:9b:f0:0a:63:
7f:80:56:f3:86:8e:3d:74:42:eb:a1:23:4f:ef:03:88:4a:87:
e6:c2:56:8c:b6:88:4a:f2:fc:d3:d2:65:da:0d:5c:4f:e6:12:
86:7b:81:81:bd:bf:34:6e:6b:6a:f9:61:a9:18:ce:28:de:74:
86:10:aa:08:ab:60:5c:31:ac:6e:83:51:5d:f0:83:11:d2:c0:
b0:ea:44:57:a0:a1:05:97:2b:04:f2:b3:78:7b:79:88:82:74:
1c:65:76:22:d2:18:23:e3:c4:f1:7d:0f:6c:92:98:0d:b3:1e:
ec:4b:9b:4c:c0:a1:ab:37:2a:42:05:af:bd:97:d1:5a:5b:8d:
98:3e:76:07:f8:d3:36:93:b1:da:0f:eb:fa:0d:c1:1b:fa:a5:
22:a3:10:c3:0d:02:b5:55:39:87:b6:5f:4d:ab:b0:50:6e:94:
5e:c0:4a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:30:42 2025 by rpki-client