Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d-UGyn35tP3Iq6hcakDsh0j_7Kw.roa
File: d-UGyn35tP3Iq6hcakDsh0j_7Kw.roa (raw, json)
Hash identifier: 17KhBE7bbnvsxB+hOIvEzvC/OW5AciKGvXwQmz3mzh0=
Subject key identifier: 77:E5:06:CA:7D:F9:B4:FD:C8:AB:A8:5C:6A:40:EC:87:48:FF:EC:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A08BF3BFBF9BFB93EBB11AB1BF375186D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d-UGyn35tP3Iq6hcakDsh0j_7Kw.roa
Signing time: Fri 18 Aug 2023 13:04:24 +0000
ROA not before: Fri 18 Aug 2023 13:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:8bf:212b/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:bf:3b:fb:f9:bf:b9:3e:bb:11:ab:1b:f3:75:18:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 13:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77e506ca7df9b4fdc8aba85c6a40ec8748ffecac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:c4:06:53:0e:ac:80:3c:84:6b:46:36:e8:
75:4c:03:54:2d:f8:2d:0d:e6:bd:4e:6a:8e:d7:ac:
e7:3a:b2:83:65:47:b3:63:66:be:2e:8a:4e:28:87:
dd:05:a6:bf:64:c5:39:67:5f:ea:3c:5a:ef:1b:b7:
86:e4:60:ca:54:cb:d3:b5:d0:0c:5a:92:e8:1d:61:
56:af:95:5a:91:23:ad:fe:68:c1:db:fd:f3:bd:22:
df:6a:fa:9f:2e:5d:ea:49:dd:52:d5:82:44:64:f5:
7e:15:22:86:a4:be:ae:be:32:10:8f:98:07:ba:0e:
5c:ca:04:3e:fb:30:e2:6f:d7:40:ab:6c:b0:db:25:
f8:ad:0c:69:24:2b:6e:2c:58:41:52:1b:5b:12:5a:
00:17:fa:90:d0:3d:74:75:9e:a0:b0:9e:0e:0a:0b:
41:2c:c4:d9:04:38:05:85:32:67:14:18:ab:07:ce:
3f:ae:92:02:db:c5:64:08:ed:f7:3a:21:86:dd:d8:
68:66:06:f0:01:58:55:c6:4f:e4:51:2f:53:34:c6:
c6:57:a3:d0:b5:4f:61:7d:af:dc:65:1e:52:30:f2:
2e:34:4b:36:88:bd:99:0c:9a:b3:5c:74:b2:0b:fb:
c0:e3:16:60:e0:1d:27:51:b5:7c:32:fc:be:72:71:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E5:06:CA:7D:F9:B4:FD:C8:AB:A8:5C:6A:40:EC:87:48:FF:EC:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d-UGyn35tP3Iq6hcakDsh0j_7Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:12:21:80:05:6a:7f:76:07:51:73:89:76:36:9e:3a:b9:1b:
ec:51:3b:cf:b9:54:f6:d9:e1:97:24:15:e0:20:a6:b7:e4:c6:
e5:ea:5f:f4:e8:c8:07:20:c7:3d:f1:af:43:11:20:ec:b2:9b:
20:c8:8b:7b:2f:fe:b2:16:4f:12:6e:1e:52:05:60:c6:c2:df:
f3:1b:88:8e:1d:b5:c5:13:01:5a:d3:4f:98:2a:c4:70:bd:99:
f9:de:ff:a6:90:30:ad:97:a6:e9:29:53:4a:7f:b0:f4:18:32:
86:e8:5d:da:b8:06:4e:39:7a:83:ff:10:22:5b:e9:69:be:e3:
b4:18:59:61:07:ee:1a:3c:50:3b:e8:35:28:4a:bc:42:1f:64:
54:01:5c:2e:e7:6e:5a:9f:11:32:3c:0b:a8:67:6b:f4:b9:92:
20:74:a4:ba:e0:20:c9:49:37:16:a8:a1:5c:ad:79:c3:c1:3b:
f1:cb:af:c8:c4:6c:92:41:a1:1d:15:16:36:f7:ba:04:2c:b0:
0c:69:44:43:a7:39:64:88:1b:7b:51:56:65:61:00:dd:fc:75:
52:6b:91:c4:27:56:7a:2c:9e:1d:cc:72:3e:ad:0a:e3:6e:92:
6f:88:9e:72:65:15:19:67:09:4f:ea:94:55:41:c2:61:19:1d:
50:49:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:46:52 2025 by rpki-client