Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ujr-M3QchN_a_pXhf5wMwWbgmI.roa
File: 0Ujr-M3QchN_a_pXhf5wMwWbgmI.roa (raw, json)
Hash identifier: B+q/vUjdPItD9icj+ugfXB2wyNrfRE3uoMoSPmgbFBI=
Subject key identifier: D1:48:EB:F8:CD:D0:72:13:7F:6B:FA:57:85:FE:70:33:05:9B:82:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01841C94E73E95646689B3A4CC7016848A11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ujr-M3QchN_a_pXhf5wMwWbgmI.roa
Signing time: Fri 28 Oct 2022 03:13:51 +0000
ROA not before: Fri 28 Oct 2022 03:13:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1c:94:e7:3e:95:64:66:89:b3:a4:cc:70:16:84:8a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 28 03:13:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d148ebf8cdd072137f6bfa5785fe7033059b8262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:0b:ce:bc:da:97:3e:17:66:70:f6:51:91:
ea:4f:8c:e0:78:26:48:cc:cb:56:b7:b2:1c:e9:79:
b1:d9:21:3d:e9:b3:b4:76:d2:19:1f:2c:a1:c2:b0:
73:38:72:ca:47:6a:9e:95:dc:1c:b3:e0:92:87:f2:
c2:3b:73:0f:8e:e7:97:82:b3:53:6a:9a:f6:97:f1:
01:65:dd:df:e3:05:90:5d:09:fe:09:bf:24:56:9e:
39:7e:cc:8f:b7:ec:b4:d7:11:94:de:65:b8:99:e2:
5f:95:b5:b5:5d:1d:2f:b2:4e:d4:62:23:df:6b:c9:
d4:4a:46:b2:3b:be:35:13:8d:4d:db:45:d1:4a:1e:
49:21:ba:33:ef:24:cc:47:b9:06:af:ff:be:b5:8b:
a0:63:e9:2e:ee:d6:bb:27:e9:cc:78:bb:0f:32:5b:
de:94:62:3e:0d:e1:e4:e0:d7:95:0f:e8:e9:3b:66:
03:f6:b3:b8:00:46:c4:92:d2:ca:e3:53:54:d0:78:
6a:11:32:23:94:31:65:56:db:cc:93:60:70:da:3f:
32:3a:86:07:4d:28:0d:1f:c6:a3:c2:d6:c7:85:ae:
31:72:e0:01:92:12:5c:8b:f3:60:df:04:c5:29:9a:
77:8d:cb:17:74:cd:cc:e4:f2:8d:b5:e5:4f:b3:7d:
22:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:48:EB:F8:CD:D0:72:13:7F:6B:FA:57:85:FE:70:33:05:9B:82:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ujr-M3QchN_a_pXhf5wMwWbgmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:5c:be:22:37:2d:9c:65:0f:73:ad:87:b7:6c:72:f3:e4:07:
96:2f:e4:a9:9c:92:87:c5:41:61:be:ac:72:78:ec:06:9e:b5:
3e:ec:fd:24:9f:d8:9c:90:96:0b:58:f3:0e:33:a1:12:9e:70:
ab:84:dc:40:d4:d0:01:97:53:ef:80:a8:a4:39:37:d2:2f:e1:
ad:ea:c1:76:f1:87:73:0d:17:38:e7:c6:1a:88:08:a7:22:61:
c8:9e:d4:f3:2a:e0:9b:88:e6:df:93:ba:70:03:61:a0:b6:5c:
f2:61:3d:b9:3d:24:1f:21:0f:69:66:2e:81:2b:26:cf:49:80:
ea:b0:00:a9:73:ee:13:95:db:ff:29:33:2a:70:66:93:13:45:
80:1f:f8:c7:dc:ec:f4:43:6c:ff:08:48:bd:f0:12:06:10:07:
10:ca:0e:c9:cc:d2:92:cc:82:df:bb:57:3b:ea:17:87:75:8e:
17:ae:ed:11:e5:c7:63:68:22:ec:0b:c9:d8:f8:5b:e6:8e:92:
c3:6d:dc:b7:df:69:c2:22:a1:e5:92:75:c8:c2:8d:f9:6a:e3:
4a:e1:22:21:22:55:5b:8f:17:2f:0c:0a:0a:c3:a3:4f:89:40:
16:4a:d1:99:da:81:24:1e:91:f8:96:06:08:79:66:4b:e9:3f:
b6:58:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:31 2025 by rpki-client