Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vubygkVCbS93Q0Ai4lN50PWoKxU.roa
File: vubygkVCbS93Q0Ai4lN50PWoKxU.roa (raw, json)
Hash identifier: NOUTlRwcRwn+77g9OKjciu4SRHihKuoZn4w+/bmwADE=
Subject key identifier: BE:E6:F2:82:45:42:6D:2F:77:43:40:22:E2:53:79:D0:F5:A8:2B:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BBBD93DD5A123ADC596DD280867A3811
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vubygkVCbS93Q0Ai4lN50PWoKxU.roa
Signing time: Wed 14 Jun 2023 21:09:03 +0000
ROA not before: Wed 14 Jun 2023 21:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:bd:93:dd:5a:12:3a:dc:59:6d:d2:80:86:7a:38:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 21:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bee6f28245426d2f77434022e25379d0f5a82b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0f:ca:b2:c6:4c:20:07:33:3c:04:cb:f8:b6:
d4:c3:95:39:75:23:5e:18:d5:e2:44:a7:b7:49:0c:
e6:c3:58:28:5f:77:53:c2:0e:e1:9a:dd:8f:0b:c9:
23:f4:9a:70:c0:ab:db:ea:1f:98:66:0a:d6:94:ad:
93:ab:3c:19:cf:84:ef:d2:ec:c6:76:9a:bf:e4:76:
1e:b8:2c:62:46:9c:dc:89:03:df:c5:1f:88:17:31:
a0:4c:0a:02:6f:35:f5:5d:35:1f:9d:e2:5c:e7:5d:
52:f0:2a:1b:59:58:4a:e6:25:ad:a3:d0:34:a2:ca:
63:4b:51:35:c1:88:1e:d0:9f:94:c0:12:3a:6b:6e:
62:c1:19:fd:46:9f:e3:b7:4a:e1:6f:62:89:31:9e:
b1:db:19:31:76:ca:45:a1:0f:a5:a1:3d:0c:45:85:
52:55:d5:e2:4b:bc:77:02:7e:c1:a3:ec:d6:de:3f:
e1:38:81:43:20:94:8c:dc:0d:5f:dc:19:07:ee:c6:
4e:da:e5:4c:78:09:56:32:33:eb:d8:84:8d:7d:c6:
2f:42:22:40:a7:d2:af:89:c9:3f:42:8c:4a:aa:fc:
d1:0f:17:9e:c8:0d:d0:f3:f6:b6:58:57:62:ab:2c:
90:1c:13:40:f2:84:d3:db:d3:ac:03:44:5e:65:97:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E6:F2:82:45:42:6D:2F:77:43:40:22:E2:53:79:D0:F5:A8:2B:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vubygkVCbS93Q0Ai4lN50PWoKxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:d3:87:c6:6f:20:ef:8d:dc:40:c6:cb:0d:9a:82:9c:73:9a:
d9:4f:ba:35:72:e0:d2:e0:d5:71:8a:c3:97:fc:9a:b3:c6:35:
43:da:d9:90:6b:b0:41:ec:47:9a:e2:35:7e:c5:9e:81:0a:73:
d1:09:72:23:7b:49:a6:c0:39:4b:80:11:d4:67:13:c9:75:e7:
21:f5:51:e1:82:cd:b0:ff:bf:ca:59:f7:d1:4d:cb:af:cb:fa:
45:1e:5c:69:7e:5c:a8:e2:fe:b6:87:e5:12:3f:3e:ab:f0:4e:
26:4e:89:81:70:43:19:82:9c:f4:36:9e:58:78:99:8d:45:0d:
70:d0:5b:12:c6:8d:a8:d2:32:12:7d:4f:1e:2e:68:5d:9d:66:
d0:b7:7a:9b:13:d5:e6:3d:f9:a6:cb:b4:5e:71:1c:08:5b:78:
c1:bc:c8:6a:b3:7f:7c:d1:03:3e:1e:19:3b:ac:9c:96:6b:ef:
4f:84:36:6b:f2:a6:b3:e1:70:05:f3:73:49:51:56:21:8a:97:
dc:24:eb:19:e7:07:2d:3e:7c:49:6b:fa:0a:92:f5:8a:a7:1a:
bc:dc:1c:44:67:99:4c:0e:ee:b2:41:f3:b4:f4:f0:d4:17:11:
91:16:2d:b9:e6:81:7a:b8:14:3a:79:d4:4f:a9:49:85:f3:8d:
d9:28:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:04:23 2025 by rpki-client