Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ufrCIea1fxtDsJ29DYcYujryTs.roa
File: 1-ufrCIea1fxtDsJ29DYcYujryTs.roa (raw, json)
Hash identifier: EdyCQpbmpH2G9e0AmRLhnDptjPO87P18i3h+KP7WZAc=
Subject key identifier: FA:E7:EB:08:87:9A:D5:FC:6D:0E:C2:76:F4:36:1C:62:E8:EB:C9:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FB44A9FE6CC1FA036B8FFEE52442FCAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ufrCIea1fxtDsJ29DYcYujryTs.roa
Signing time: Tue 15 Aug 2023 22:15:28 +0000
ROA not before: Tue 15 Aug 2023 22:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:44:a9:fe:6c:c1:fa:03:6b:8f:fe:e5:24:42:fc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 22:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fae7eb08879ad5fc6d0ec276f4361c62e8ebc93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:38:9d:4f:66:45:c1:6f:f0:22:94:32:80:
e7:e8:c2:8a:80:7f:01:7f:f1:92:00:38:a8:66:7b:
f9:53:95:6d:fa:eb:dc:a5:d1:03:66:7f:b9:17:95:
41:07:f2:8b:f2:42:36:b2:55:32:89:f5:76:46:af:
cb:67:fa:e3:fa:81:3d:9f:31:52:ad:e8:df:44:8b:
a6:49:13:8e:ab:35:2d:75:6e:fe:ae:de:8a:10:74:
90:56:b2:8c:23:02:e5:49:c8:3d:f3:2e:4b:2c:a8:
97:2b:d2:37:28:32:f7:3a:e9:70:d6:73:07:b7:dd:
7e:a6:b7:e7:50:cb:85:3b:b7:a0:f0:25:e6:7f:a6:
e9:f5:9d:94:36:d8:d7:55:5a:e4:3e:81:18:5e:53:
18:b9:38:b6:ea:34:2c:a9:7d:67:78:c5:48:e4:96:
5f:9c:6a:61:22:02:77:79:83:01:eb:59:f3:0c:53:
b2:c8:eb:44:90:5e:81:bd:a3:00:bb:bb:dc:91:34:
32:5d:28:91:9d:a5:be:a8:50:a8:4b:2d:dc:5c:dc:
e5:1e:3b:ce:85:61:90:e4:b7:1d:9e:09:5e:d7:37:
fc:66:8c:4e:ef:e4:5d:07:ef:44:89:b7:74:5f:6b:
b1:28:dd:2f:28:33:ad:2b:4c:0d:8b:64:b8:35:a7:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E7:EB:08:87:9A:D5:FC:6D:0E:C2:76:F4:36:1C:62:E8:EB:C9:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ufrCIea1fxtDsJ29DYcYujryTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:47:ca:16:ae:72:63:4f:b9:75:e6:c6:43:55:7e:31:ad:a4:
df:5c:79:32:57:46:68:77:30:a8:5f:bc:23:44:e2:51:76:77:
4a:b9:34:24:b0:8b:ef:c3:05:b7:f7:5c:97:a9:be:d4:de:e7:
b8:59:6a:62:50:bf:65:6e:56:4b:59:96:ab:25:40:18:39:02:
fc:15:5e:bb:f4:82:f1:8f:45:4c:4d:db:d9:56:91:1e:89:d2:
73:33:0d:ef:e8:7d:cb:d5:e8:51:20:74:fc:97:ec:40:c1:69:
78:ed:a0:c4:5f:da:6b:3d:53:b0:ae:d3:f9:36:5b:11:63:16:
0e:6a:fb:f1:8f:26:e7:2e:ff:d0:55:bb:38:db:31:ed:c5:f1:
dc:9c:43:45:5a:ab:30:8d:42:e3:f1:a9:53:0d:0f:ad:79:33:
54:50:8f:f7:18:16:e0:11:f3:34:dd:d8:cd:f0:cd:ca:52:8a:
69:47:78:9c:4a:c6:5b:68:0b:fb:25:c5:70:16:61:2b:bc:03:
7d:a3:5e:a8:57:45:16:e9:02:07:57:1e:01:1e:71:2b:65:66:
3d:8f:21:c9:0d:59:c8:30:d7:a6:c6:ea:12:af:67:21:f7:f8:
96:e4:ec:e7:b6:c9:1b:84:b8:d3:9e:d0:c5:2d:6c:59:8f:92:
d5:27:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:09:02 2025 by rpki-client