Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uup-skPOoiFAME_Ys5TCpbLp_tc.roa
File: Uup-skPOoiFAME_Ys5TCpbLp_tc.roa (raw, json)
Hash identifier: LlxOnoaxfioMa2/O03P1F9jhuHAiz+D9g8ATM0f0Raw=
Subject key identifier: 52:EA:7E:B2:43:CE:A2:21:40:30:4F:D8:B3:94:C2:A5:B2:E9:FE:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188706CE582402677D178BDCE77E13FB04F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uup-skPOoiFAME_Ys5TCpbLp_tc.roa
Signing time: Wed 31 May 2023 06:09:24 +0000
ROA not before: Wed 31 May 2023 06:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:6c:e5:82:40:26:77:d1:78:bd:ce:77:e1:3f:b0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 06:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52ea7eb243cea22140304fd8b394c2a5b2e9fed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:3b:6c:30:0a:3d:22:3e:7f:bb:01:70:7b:
72:bb:aa:38:9c:58:33:14:28:36:b8:8e:b9:f6:38:
7c:e7:ac:8e:4d:87:42:1a:c0:98:80:28:55:a6:e9:
ea:f7:7e:6e:d8:24:ae:79:13:6f:41:e2:0d:d4:f7:
8f:b3:ab:97:88:d5:8e:5c:ca:09:3f:84:4a:84:28:
10:8d:cf:7d:42:17:0b:ac:f2:86:2e:6c:27:d6:04:
2a:b4:d5:79:4a:02:2e:d5:b2:52:8d:40:26:f9:72:
91:32:1a:a8:ad:c6:e9:51:63:69:60:5d:65:9a:c7:
ff:39:91:95:4d:54:15:1f:d5:08:00:5e:1e:dd:84:
1e:12:6a:21:2e:25:ba:cc:24:4b:c2:40:94:f9:85:
18:18:3d:30:32:7e:23:ef:ea:3a:b3:29:f7:1e:15:
fb:4e:2b:95:88:4b:7a:ea:e7:f9:0e:46:7d:89:3b:
6e:0b:2e:3b:3b:05:f9:db:6c:da:90:f0:87:cb:22:
f7:89:ad:d5:eb:60:75:a8:75:46:7b:75:82:c8:11:
c4:62:19:82:68:73:fb:5a:65:bf:a1:1e:39:50:78:
e2:69:2d:ef:24:0f:48:f9:e6:e2:ac:67:87:d7:83:
c3:b9:16:5d:4a:25:ac:72:47:bf:be:4c:96:ae:94:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EA:7E:B2:43:CE:A2:21:40:30:4F:D8:B3:94:C2:A5:B2:E9:FE:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uup-skPOoiFAME_Ys5TCpbLp_tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:65:26:79:55:f2:9e:eb:f0:a1:de:ec:3a:6a:6c:fd:88:29:
8c:da:80:59:2d:5f:0a:c4:02:1c:b1:2d:83:63:52:8f:4a:74:
a0:77:d0:c5:4b:8a:ba:d2:a0:04:7b:61:7f:14:58:db:7a:b1:
a6:0a:d5:d9:e4:30:af:aa:89:44:08:a0:b9:fc:0a:a6:3f:d6:
51:08:82:31:ee:37:a6:45:bd:72:bc:1e:2f:70:8d:3e:20:a0:
a3:19:89:e3:9d:3c:34:c9:91:d4:5b:43:8c:65:8a:3c:77:d8:
3a:b1:1c:b1:08:1d:40:2a:bd:da:72:3b:95:e6:87:f2:75:77:
53:d9:17:d3:35:cc:7c:cc:85:e7:48:bf:5b:95:6b:99:26:c2:
98:9e:33:27:e1:1a:13:cf:28:6a:8f:b5:f0:f5:fb:86:43:41:
46:3b:d2:e8:9d:42:3a:e4:d3:a3:50:a5:0a:77:65:d5:f2:34:
cc:ef:2b:08:3f:55:97:d3:2b:4d:b3:a2:95:89:0e:f5:a5:9a:
3e:08:a1:06:d7:28:8c:19:9b:0e:80:56:90:25:6b:97:d2:ea:
9a:48:4c:29:e2:51:cc:40:b8:88:3b:4f:a2:f2:83:a9:ac:5d:
59:d7:50:b7:17:50:ad:0b:e7:7a:c5:4f:fa:97:b8:31:47:e0:
ed:76:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:25 2025 by rpki-client