Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UkHYe_-iZJ22ZxCdHkQLueNiUQM.roa
File: UkHYe_-iZJ22ZxCdHkQLueNiUQM.roa (raw, json)
Hash identifier: lutllxTv0jIjgYgTyqnuUvyAY6GAnjsrswtec5oaxXo=
Subject key identifier: 52:41:D8:7B:FF:A2:64:9D:B6:67:10:9D:1E:44:0B:B9:E3:62:51:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DF5E2F63B5F458D95CBE102BFB0B6169
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UkHYe_-iZJ22ZxCdHkQLueNiUQM.roa
Signing time: Thu 10 Aug 2023 12:13:58 +0000
ROA not before: Thu 10 Aug 2023 12:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:5e:2f:63:b5:f4:58:d9:5c:be:10:2b:fb:0b:61:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 12:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5241d87bffa2649db667109d1e440bb9e3625103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:17:14:8a:00:d9:12:49:72:1b:3a:19:1b:
8d:0e:d7:3c:9e:d9:f5:b3:96:cc:c2:e0:08:e7:51:
31:ab:a1:9c:8f:cc:51:be:c0:3b:0f:a2:bc:31:d7:
21:e5:92:42:d1:43:80:a7:94:51:3a:71:94:f2:06:
10:2b:fc:16:15:d4:53:d0:ad:2f:3a:2a:ca:34:ce:
6c:01:42:b5:17:cf:83:8b:7a:0d:7f:64:cb:67:8a:
ce:b0:ef:72:e8:b2:73:ee:13:1a:6d:55:9b:3c:24:
2b:8c:6b:ab:3a:e1:e6:6e:d6:ea:f7:db:5d:53:43:
a9:9e:49:4f:a5:9b:52:1f:2f:41:48:5d:e3:a9:d2:
52:2f:64:e4:39:65:70:6e:d7:38:aa:0b:d2:7f:2f:
c8:cb:52:49:07:10:47:33:35:a5:95:77:81:eb:f0:
e4:c4:06:f1:94:3a:b1:87:5e:c2:75:3e:3a:ef:b1:
76:86:8a:f9:b7:17:61:47:40:ba:5a:16:1c:29:43:
5b:5a:09:5d:8f:22:ba:ae:cb:5f:29:3a:91:73:2f:
cf:fb:94:de:30:b2:a4:b2:76:f0:5d:a6:82:e2:0f:
0b:7e:d7:72:62:d3:b2:0c:d0:1b:e1:dc:c0:38:28:
f2:dc:80:41:98:35:1c:de:a9:7c:e4:fb:ff:a0:09:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:D8:7B:FF:A2:64:9D:B6:67:10:9D:1E:44:0B:B9:E3:62:51:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UkHYe_-iZJ22ZxCdHkQLueNiUQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:9a:74:0f:21:0c:16:92:a3:68:eb:7b:13:64:d2:cf:9f:5b:
de:5e:51:3c:76:c5:03:79:3f:0e:93:1c:88:63:32:40:b1:37:
77:72:3c:27:53:42:a4:aa:b7:d4:8d:ea:dc:be:2e:48:3a:84:
fe:25:ab:53:0f:2f:2d:56:a0:8f:fe:49:c4:32:af:e6:c5:e6:
1c:dc:fe:57:e6:fe:c6:7e:6d:92:ce:ff:6a:dd:ff:06:4c:b8:
99:69:0c:c0:dd:1a:2a:a8:17:1d:20:f3:77:e9:05:67:a3:27:
6a:97:55:36:d0:41:8c:01:b7:0e:98:f9:73:14:cc:51:45:fd:
55:69:b8:e2:85:13:15:0d:41:45:32:db:47:f8:ba:dd:70:07:
04:f7:1f:8d:b5:0b:2a:be:0d:a7:a3:ae:1f:c2:01:83:73:b7:
03:1b:bb:dd:76:3e:10:de:04:d4:8d:62:61:15:de:d8:19:58:
05:96:08:7a:a8:c7:be:df:f9:31:23:33:b0:1d:e7:53:bc:6c:
00:ce:d2:25:99:ae:94:51:58:78:68:69:16:8d:6b:2a:c6:db:
c6:48:89:86:ce:9d:2c:3c:4a:96:11:95:a8:ee:f7:a5:2f:97:
f4:75:ba:11:8c:f4:40:69:2a:d1:c4:ca:2a:c5:8f:7f:59:bb:
51:dc:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:11:07 2025 by rpki-client