Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uMR0XIbHLxyy6fxM0J4VtTbddqU.roa
File: uMR0XIbHLxyy6fxM0J4VtTbddqU.roa (raw, json)
Hash identifier: vLFJGz2HmOBoo6b8u2MOQUUCBG+9Taf8yu9PrzZq1UQ=
Subject key identifier: B8:C4:74:5C:86:C7:2F:1C:B2:E9:FC:4C:D0:9E:15:B5:36:DD:76:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187413EA159083DFC812AED14CF784058B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uMR0XIbHLxyy6fxM0J4VtTbddqU.roa
Signing time: Sun 02 Apr 2023 09:13:56 +0000
ROA not before: Sun 02 Apr 2023 09:13:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:41:3e:a1:59:08:3d:fc:81:2a:ed:14:cf:78:40:58:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 09:13:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8c4745c86c72f1cb2e9fc4cd09e15b536dd76a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:5f:07:ec:c5:40:b2:51:84:44:49:dd:6b:
ab:69:df:c8:94:1e:60:74:50:dd:b3:7e:05:b2:b6:
2e:d3:e4:94:36:c6:06:0c:39:94:b9:24:50:d0:90:
05:e0:af:da:24:e3:b7:4c:82:fc:98:44:a4:cb:a2:
f9:4e:54:38:8d:a0:34:cf:83:3a:70:53:c8:a0:c7:
85:85:3f:20:ee:f6:0a:de:d4:91:63:ad:d2:2b:7b:
67:3f:fb:ae:b2:f5:cf:f9:0e:99:bb:c7:3f:e5:f9:
bc:8d:19:6d:9d:b6:70:db:fe:b6:73:e4:cc:0a:31:
66:98:d9:ac:27:d0:38:97:b8:54:b2:8e:f7:0e:86:
55:cb:13:ee:79:69:5d:a0:d7:e5:ae:3f:dd:76:72:
89:a7:33:61:fe:b1:1a:da:c9:68:92:5f:e5:6c:e4:
24:6d:aa:61:9a:3a:ea:ee:00:13:86:57:5c:54:58:
16:83:33:41:3f:06:e4:91:a4:e1:cf:5f:e4:de:c8:
3f:90:51:f3:05:fd:65:ce:5b:69:60:dc:b2:b1:d6:
b4:8d:fd:28:d3:71:5b:be:8d:8d:f5:87:1f:15:49:
aa:27:87:73:ba:1f:1c:d9:67:16:b3:00:62:61:ad:
c1:1c:e5:1a:60:dd:a9:06:b5:a8:51:c1:71:e0:ed:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C4:74:5C:86:C7:2F:1C:B2:E9:FC:4C:D0:9E:15:B5:36:DD:76:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uMR0XIbHLxyy6fxM0J4VtTbddqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:c3:b5:3b:7e:c0:af:c9:62:92:cf:7b:df:23:ad:ca:32:ff:
41:56:06:bc:e4:3e:a5:f5:4c:56:80:bf:ad:97:93:03:c2:eb:
2b:14:87:20:94:bd:c1:9d:1b:63:12:b9:08:21:79:ba:9c:4d:
df:48:0a:09:79:95:0b:97:44:dd:65:1f:fd:c0:96:8b:48:5d:
a6:9f:6d:01:c8:0c:c1:32:9e:ee:4c:dd:a4:42:eb:8d:be:9f:
96:4f:fa:bf:dc:e7:84:d4:88:22:1e:0a:2f:24:78:b9:e4:99:
2c:03:70:08:c2:4a:79:b0:67:dc:35:aa:ac:d7:13:9a:e1:b1:
fc:5e:07:3e:3c:b6:53:4f:f4:a0:d2:88:ff:f4:10:aa:21:11:
6c:5a:fb:c1:53:ce:96:2d:a6:89:b4:a4:63:96:5e:05:55:8f:
d9:58:84:ae:81:d7:0b:db:8f:57:05:ef:e8:79:0e:5c:fe:3e:
db:dd:35:03:20:b7:4e:10:cd:0a:53:ea:7a:5a:ef:75:08:e1:
78:aa:73:2f:14:75:51:93:18:56:de:a8:68:80:5b:83:2c:d7:
1e:4d:e0:94:f0:94:6b:a9:3d:90:90:73:2e:26:4b:0b:7e:d6:
5b:57:c7:f5:9a:ac:b6:0d:9d:be:1d:49:b1:d6:63:3a:e0:37:
1e:7c:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:11:22 2025 by rpki-client