Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UtpNLIkN6LqnwCGdMnZhR4wgyJU.roa
File: UtpNLIkN6LqnwCGdMnZhR4wgyJU.roa (raw, json)
Hash identifier: MLkG9OUkfko5WuSuzdgfIeN+KCV4pho+mMZyUk45+HQ=
Subject key identifier: 52:DA:4D:2C:89:0D:E8:BA:A7:C0:21:9D:32:76:61:47:8C:20:C8:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184854469F138B78EA398883A629EB77A06
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UtpNLIkN6LqnwCGdMnZhR4wgyJU.roa
Signing time: Thu 17 Nov 2022 11:06:04 +0000
ROA not before: Thu 17 Nov 2022 11:06:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64:ffff:0:184:8543:b1ea/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:44:69:f1:38:b7:8e:a3:98:88:3a:62:9e:b7:7a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 17 11:06:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52da4d2c890de8baa7c0219d327661478c20c895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:75:52:e8:40:31:f2:20:ee:55:a9:8e:9b:
69:2e:a8:35:a9:5f:2e:0a:e4:22:df:c7:ea:33:13:
1e:fb:f4:0f:eb:c8:b7:f7:fe:1f:71:88:53:c8:1f:
54:fe:b3:56:b2:36:af:8b:eb:1b:41:55:d6:e4:72:
f8:d9:87:1e:27:81:a9:64:74:38:55:b2:70:e5:60:
86:c9:67:b4:82:e9:58:34:47:68:cd:03:29:1a:25:
30:82:73:fa:4a:21:3b:61:b4:ca:01:8f:94:ba:e5:
20:df:60:38:41:ef:95:12:d5:35:39:80:76:f5:a4:
52:e3:a3:14:9f:0f:58:09:bc:5b:20:87:49:e7:7a:
2e:ef:bc:a6:aa:35:24:8c:ed:2e:d5:19:76:fb:7f:
83:3f:7a:df:42:f9:8b:24:9d:fd:dd:aa:d8:33:d6:
b9:da:61:14:b1:00:c1:9c:75:f1:6c:f9:57:1d:32:
6b:6c:1d:c2:53:87:c5:37:33:82:ca:a9:75:07:a2:
1d:53:ba:e1:7c:1c:48:17:dd:3b:da:a6:68:26:52:
e5:b8:9f:1d:fa:3d:4a:29:1f:38:c0:ff:17:22:a0:
53:7f:5a:35:ab:e3:08:d0:35:99:2d:4d:b5:7f:8e:
6a:f4:db:af:fc:26:98:00:d4:38:41:5b:d8:96:e7:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DA:4D:2C:89:0D:E8:BA:A7:C0:21:9D:32:76:61:47:8C:20:C8:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UtpNLIkN6LqnwCGdMnZhR4wgyJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:2f:67:4c:29:5e:bd:63:14:6e:8f:e6:9e:5d:4c:eb:69:ed:
1d:7c:ae:bc:d7:bb:9a:0d:f6:aa:88:a3:08:d1:83:b1:35:ea:
5b:cc:ae:b0:71:e3:7d:2f:39:b6:3f:2b:03:8f:cf:aa:bd:98:
e1:55:6e:52:d3:58:ba:44:6a:e8:83:9f:58:95:70:21:01:b9:
a1:a4:46:f9:ce:4f:e1:03:3d:f5:f0:c8:06:55:6c:24:38:79:
15:87:ee:e0:37:ee:f3:c0:82:2f:d0:f3:47:51:6b:68:fa:9e:
3f:aa:0f:60:c4:98:da:52:74:ee:c1:86:c5:e6:88:46:a4:e7:
5f:e2:de:4a:8c:5f:e7:69:9a:6f:32:39:be:dd:e7:37:ad:55:
08:a6:d1:4e:a0:66:1d:61:9f:af:36:28:4d:d8:31:b4:1c:b1:
62:06:8b:05:48:ec:86:b3:33:05:e9:b0:d9:ba:96:04:87:6f:
22:29:1b:35:b9:f2:a6:a2:b5:87:dd:f4:7c:d7:c3:d1:f3:3b:
4b:f8:9b:cf:c7:14:89:e8:89:35:a0:d3:ca:24:36:3c:22:5c:
75:d2:28:c7:95:b5:df:51:bd:c6:96:7d:af:9a:09:48:20:16:
a6:cb:98:3b:b3:76:e9:e6:34:98:18:22:66:a4:6d:b2:23:5d:
a5:5c:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:28:11 2025 by rpki-client