Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uiD9uyOwXAJ_vN_gf7zeJb89e68.roa
File: uiD9uyOwXAJ_vN_gf7zeJb89e68.roa (raw, json)
Hash identifier: DUDTJUyWdrKotQQ/72veuHIwiEN/FniaVrtYpFaYlTA=
Subject key identifier: BA:20:FD:BB:23:B0:5C:02:7F:BC:DF:E0:7F:BC:DE:25:BF:3D:7B:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F2093C512702C45CA333F2963105EC5C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uiD9uyOwXAJ_vN_gf7zeJb89e68.roa
Signing time: Mon 14 Aug 2023 03:13:58 +0000
ROA not before: Mon 14 Aug 2023 03:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:09:3c:51:27:02:c4:5c:a3:33:f2:96:31:05:ec:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 03:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba20fdbb23b05c027fbcdfe07fbcde25bf3d7baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:02:2b:6d:80:af:dd:e3:f2:70:84:33:82:
0a:fc:3c:84:e7:26:00:1b:2a:bc:5c:e1:bc:6b:01:
c4:cc:d8:35:9a:ed:f7:6d:c7:ba:51:7b:e8:a6:38:
a8:f3:84:4c:04:5e:21:39:b5:a4:0d:9d:56:3e:ed:
4a:98:ca:0a:f1:82:eb:d6:28:99:4a:24:40:a8:3d:
35:ca:db:8a:62:49:a6:c7:99:6c:2e:78:27:d5:aa:
3b:0d:80:93:bc:62:51:6c:95:24:c2:77:df:9e:cb:
e2:51:2e:94:12:c9:e8:27:28:58:27:53:a8:0b:fb:
32:84:82:85:f5:bf:2a:3c:8f:50:b6:18:b6:02:87:
bd:38:24:5c:c5:17:87:8c:44:7f:fb:60:1d:76:66:
12:04:58:ca:cf:ae:94:51:ec:27:20:34:31:dd:1a:
6d:27:0a:e3:78:61:03:e6:95:42:48:4f:ad:a0:a8:
0a:73:00:9f:77:29:60:26:b6:b2:4a:02:62:ef:3a:
28:7a:d0:12:88:33:04:b5:26:f6:ee:a1:75:c8:4c:
cc:d9:f0:5d:75:d5:c0:6b:d6:f1:4c:7b:ab:86:cd:
54:8a:40:9d:02:80:12:f5:24:db:42:0c:48:8e:68:
4f:73:38:99:d0:44:ff:8b:06:8f:98:40:40:2f:04:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:FD:BB:23:B0:5C:02:7F:BC:DF:E0:7F:BC:DE:25:BF:3D:7B:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uiD9uyOwXAJ_vN_gf7zeJb89e68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:8f:6b:76:6a:d0:10:2c:4a:a4:9e:de:7c:09:d9:91:14:5e:
14:2b:7a:e8:e6:d0:94:9b:42:5b:fd:97:2e:97:43:0e:ae:7f:
75:54:bd:af:5f:47:80:ca:fd:2b:8b:cc:63:2f:70:7d:b9:b0:
79:75:22:c6:e4:14:82:39:a2:62:3f:bb:b0:e1:52:76:0d:c2:
00:c2:d3:8b:bf:37:30:eb:be:f0:2a:42:85:35:77:44:44:a4:
95:7a:32:63:55:cb:f9:f6:45:b9:7d:90:f4:bd:20:d0:60:7a:
d4:0c:0e:08:b6:0e:9b:40:8c:c2:79:59:4a:dc:d4:c4:20:d6:
a8:16:1a:93:36:12:6a:fd:76:d3:40:96:62:17:a9:d8:26:f8:
77:a6:ed:c6:ad:bd:72:a2:3e:c6:57:1a:79:c9:2c:ab:a6:23:
fe:71:c8:4b:fc:52:5f:31:b4:7a:80:19:83:2b:ab:c3:eb:85:
76:0a:d6:95:89:e0:79:06:3d:f0:da:14:b9:f7:55:e5:66:86:
73:ba:d3:48:05:91:2d:0b:b6:95:c9:4b:bd:14:a6:20:94:a3:
ab:8b:c7:ba:c9:0f:01:b3:34:a8:73:f2:c8:39:db:8a:20:62:
10:cf:28:ea:93:2d:d2:a5:11:24:c4:a9:da:9c:43:4e:6f:6f:
68:7b:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:17 2025 by rpki-client