Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uJiOhhdfPYs1qfi5jBo4Jpzwxpc.roa
File: uJiOhhdfPYs1qfi5jBo4Jpzwxpc.roa (raw, json)
Hash identifier: 3ApW/QrgF+XdqnUstotyCJpTIfCnOb3+23/MzY3L0LA=
Subject key identifier: B8:98:8E:86:17:5F:3D:8B:35:A9:F8:B9:8C:1A:38:26:9C:F0:C6:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A05FE473F3FC40358258D8A1E47EC384D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uJiOhhdfPYs1qfi5jBo4Jpzwxpc.roa
Signing time: Fri 18 Aug 2023 00:14:25 +0000
ROA not before: Fri 18 Aug 2023 00:14:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:05:fe:47:3f:3f:c4:03:58:25:8d:8a:1e:47:ec:38:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 00:14:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8988e86175f3d8b35a9f8b98c1a38269cf0c697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:c4:85:f6:85:79:eb:5c:53:45:e6:d3:e2:
d1:0a:24:55:89:fd:4a:a3:fd:ac:37:8f:07:2e:83:
e6:f1:ba:bd:9d:db:b9:a1:89:aa:ea:b2:14:fe:13:
a5:06:23:9f:69:63:d6:d0:44:fc:da:6f:eb:d7:74:
e5:72:87:7e:91:99:81:ca:16:34:ef:55:c6:ed:39:
d5:2b:0d:81:cc:51:22:1d:b5:6b:0d:c9:7b:d4:5b:
fa:4e:b5:a3:38:9a:85:3b:31:63:2a:78:1c:3d:e5:
d3:c7:82:28:a5:d5:6b:e4:89:11:74:02:00:01:2b:
75:67:91:41:32:2f:26:77:18:6b:90:a8:dd:fa:85:
06:6e:fc:a5:90:91:47:7a:03:03:8f:45:51:f0:77:
05:93:45:68:b4:0c:81:ec:4c:d4:a6:92:3b:5f:cb:
94:84:52:4e:0f:42:4a:1f:1e:84:74:ef:a6:e3:75:
b0:bc:79:75:26:4a:61:31:ad:83:ac:fd:eb:3e:34:
be:17:84:20:26:75:33:97:80:8a:3a:29:5f:16:fa:
af:cf:c1:c5:68:a4:e2:7f:07:b7:4b:f5:ef:23:90:
23:bc:fb:d2:02:fb:80:c0:72:be:a1:fc:de:e8:51:
19:5a:23:4b:74:8b:bc:79:13:cd:39:53:fa:47:5f:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:8E:86:17:5F:3D:8B:35:A9:F8:B9:8C:1A:38:26:9C:F0:C6:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uJiOhhdfPYs1qfi5jBo4Jpzwxpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:f6:2a:84:b0:7f:79:06:a6:4c:05:48:92:66:e2:cd:fc:11:
ff:ba:db:b6:f1:d0:f2:e5:66:d3:06:7e:24:45:43:ad:7f:57:
95:95:7d:36:07:78:c8:10:3d:e5:af:ff:b9:2e:e0:03:b4:a3:
09:ad:67:e0:dc:5c:36:6a:be:cc:4a:08:d9:b1:9b:9b:5b:8d:
a1:2c:36:0b:3a:84:9f:e7:8f:aa:87:40:14:45:d8:a2:0b:72:
e1:75:f4:06:cf:aa:23:7d:b0:6d:3c:f2:e7:db:04:44:6b:af:
6b:09:77:3a:54:aa:95:3d:f6:3e:fa:d9:3c:a8:99:7c:2e:cb:
de:bb:8a:92:cf:84:d1:46:5f:4d:fc:26:90:c4:a5:26:52:c0:
91:dc:3f:bd:9b:11:ce:26:af:b1:4b:96:dc:00:04:a0:5a:a0:
d8:61:36:e3:46:61:b2:0c:f1:01:b4:c5:56:ed:34:59:41:69:
24:9f:63:d5:09:5a:72:b2:d6:eb:3d:db:6b:19:33:08:02:d8:
ad:7d:15:63:39:5c:74:12:f3:9d:4f:be:68:57:6a:6c:57:de:
50:30:27:74:e0:12:e3:09:f1:ee:3f:6b:1b:1e:47:ab:a1:aa:
f9:e5:b7:d8:7f:b9:34:b1:35:05:36:72:15:02:8b:57:fb:6a:
a6:40:31:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:30 2025 by rpki-client