Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uIQv2iCrNsYE8ZLVy596yk4gueg.roa
File: uIQv2iCrNsYE8ZLVy596yk4gueg.roa (raw, json)
Hash identifier: xyBHz2a0WyFmAE9T/fBHsFKwz70Mh4i5/34B9PSe1cA=
Subject key identifier: B8:84:2F:DA:20:AB:36:C6:04:F1:92:D5:CB:9F:7A:CA:4E:20:B9:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B0CAC9DAEF554D43109DEF74280EFAED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uIQv2iCrNsYE8ZLVy596yk4gueg.roa
Signing time: Tue 01 Aug 2023 11:10:27 +0000
ROA not before: Tue 01 Aug 2023 11:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:ca:c9:da:ef:55:4d:43:10:9d:ef:74:28:0e:fa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 11:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8842fda20ab36c604f192d5cb9f7aca4e20b9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:2e:bd:d5:7f:09:9a:ee:7e:90:44:1e:33:
ff:de:4c:e9:2d:f9:f0:1d:ab:74:eb:f7:ac:63:ac:
ca:69:c4:73:ba:3d:77:eb:2d:8a:92:c7:21:8e:f0:
94:16:a9:c9:75:ab:23:e6:b2:58:84:fc:fb:9f:6b:
de:07:4a:a7:eb:cd:8c:b7:af:92:a9:ba:17:91:d1:
90:73:c6:23:fc:be:83:61:99:a9:7c:a5:d9:35:89:
72:e2:af:f5:98:53:79:49:ca:a0:f4:a8:49:60:c7:
cc:d1:a9:38:db:60:79:30:89:04:1d:b5:09:be:15:
92:19:e5:76:b7:d9:29:a5:15:6d:e8:d8:49:5c:67:
97:af:b1:1b:18:8d:04:2a:1a:3d:e2:e6:5b:6c:ca:
c7:55:e1:66:33:dc:b3:c1:71:9f:ea:af:44:ff:ae:
36:8e:eb:04:1e:b2:15:27:97:1a:3c:cd:0c:02:6a:
ad:55:e9:60:db:05:1a:c4:8f:27:e7:2d:61:dc:6b:
0a:1d:0a:81:7f:b4:18:43:94:7d:7e:62:4f:2b:eb:
6d:9d:77:88:96:e3:33:30:02:73:32:90:6b:d5:9a:
30:86:09:d4:74:6f:0d:23:e3:15:4e:23:4f:0e:03:
2f:5c:d7:a5:ad:ee:fc:fe:29:2d:a9:7f:5f:da:93:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:2F:DA:20:AB:36:C6:04:F1:92:D5:CB:9F:7A:CA:4E:20:B9:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uIQv2iCrNsYE8ZLVy596yk4gueg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:62:ff:72:10:59:32:d0:0f:54:f7:35:1b:9e:13:5b:07:39:
36:0d:10:88:b0:de:16:0a:ee:3d:fe:3c:e3:7c:cc:dd:cc:ae:
57:c4:86:b0:da:4c:c8:4c:bd:23:6b:ea:15:9f:aa:ca:ed:ad:
66:7c:de:ca:fe:c4:19:33:66:c8:6d:c0:b4:1e:33:50:ba:ee:
cb:08:f1:8f:ff:88:83:4b:12:59:14:dd:a8:ea:6b:a5:0c:0d:
8e:7e:74:16:34:b6:6d:0b:49:d5:5e:12:a9:ca:c4:82:39:1f:
df:a7:25:01:de:a7:22:bb:9b:63:f7:4b:f8:b8:8c:69:b3:d3:
58:85:90:f0:4f:62:87:31:ce:37:da:d3:c1:ce:e3:c8:3a:44:
93:98:91:c3:24:17:74:bf:54:09:50:c2:9f:85:af:01:df:c4:
11:98:4d:aa:50:9a:4e:82:44:83:6e:82:7d:7b:b2:c9:31:02:
74:7a:01:92:01:08:86:d7:1f:99:44:3b:a3:27:98:5e:e1:8b:
2a:de:26:54:6f:7b:e8:76:ed:1e:00:18:f5:76:51:1e:62:c6:
bc:ef:c2:7e:9f:25:3f:ac:7f:9c:43:03:d1:3e:10:8d:57:ff:
ae:59:a2:e4:83:d4:a2:42:5a:91:8f:e2:7b:91:aa:a7:06:b3:
d4:ba:a0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:47 2025 by rpki-client