Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-uqRVfNtyq-9nfcpbdKB1r8FPLw.roa
File: 1-uqRVfNtyq-9nfcpbdKB1r8FPLw.roa (raw, json)
Hash identifier: KQQDkM1w7PphkcV0bDS+mDbnJX7fxiFoGMhHHyGOkfs=
Subject key identifier: FA:EA:91:55:F3:6D:CA:AF:BD:9D:F7:29:6D:D2:81:D6:BF:05:3C:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018277CD5BFA57E9339CB774CAEE1818C79E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-uqRVfNtyq-9nfcpbdKB1r8FPLw.roa
Signing time: Sun 07 Aug 2022 10:15:23 +0000
ROA not before: Sun 07 Aug 2022 10:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:77:cd:5b:fa:57:e9:33:9c:b7:74:ca:ee:18:18:c7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 10:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faea9155f36dcaafbd9df7296dd281d6bf053cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:32:7f:a9:96:5b:8b:c8:45:da:c1:9c:0e:61:
34:bc:4d:ac:a7:2b:1e:a9:ff:85:d3:34:05:9a:93:
a7:2e:be:e4:0d:e0:67:20:d7:67:3a:ba:26:74:83:
f8:4b:53:e3:74:b6:6e:54:31:51:d3:e9:9c:f2:5b:
7d:a2:45:63:b3:61:2c:35:8d:e7:2c:0c:b9:55:c6:
ce:86:fd:69:d6:a9:56:0e:ff:60:ed:1c:9f:28:f5:
94:5f:5e:93:de:08:2e:b7:6d:e6:4e:de:45:67:4f:
ef:31:8e:8a:7f:34:d9:aa:5d:16:20:62:05:94:4d:
c2:8b:c6:45:fc:7a:81:de:b9:99:e5:52:c2:69:ba:
18:87:bf:2f:ae:56:3a:eb:25:16:04:f8:4c:c3:89:
01:3b:f8:03:ec:26:16:db:ca:f5:f6:ca:36:eb:50:
1d:bc:1c:01:61:e6:6c:a4:09:8c:f3:60:be:fe:0d:
cc:5f:5e:89:ee:86:0a:7d:85:2f:f9:0d:af:c3:da:
41:c4:bb:09:ff:37:0d:bd:d9:fb:f1:c4:83:78:72:
24:61:16:42:f4:1b:26:5d:37:9e:6d:23:60:e1:38:
be:fb:dd:17:b3:eb:29:9e:d5:e5:25:d6:f9:c2:8d:
fa:56:c0:6a:4d:e7:78:e0:bd:66:66:ab:f7:d2:a6:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EA:91:55:F3:6D:CA:AF:BD:9D:F7:29:6D:D2:81:D6:BF:05:3C:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-uqRVfNtyq-9nfcpbdKB1r8FPLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:3f:9c:d3:1d:ef:fb:95:83:1a:fc:95:45:6d:5b:dc:3d:fe:
ea:e8:60:f0:20:56:6c:70:d3:45:2b:73:04:c8:68:1b:cb:b3:
65:b2:8a:db:5b:03:ff:a8:ae:2f:07:f1:6a:ff:83:11:48:38:
49:71:bc:d7:17:7f:16:cc:41:15:ac:91:98:68:96:fe:38:7f:
cc:0a:2e:f1:2b:77:41:f3:89:b8:d6:49:68:e5:7a:ec:e1:4f:
83:f0:2e:8b:a5:ee:a3:1c:24:8a:1b:82:02:8d:72:2a:b5:22:
47:62:d8:41:d8:a6:4e:b8:2c:6b:52:e2:f4:0b:f9:47:75:73:
c2:c4:9a:02:6d:26:2e:a8:ed:56:44:d1:15:00:9b:79:e2:76:
2e:5e:7a:3f:b9:a7:4f:a3:b7:f5:3f:47:f8:aa:89:eb:70:ad:
cc:f3:fc:7d:48:35:90:5d:8b:a9:ee:93:b4:4e:25:96:0b:0e:
14:58:41:c1:d0:f1:e9:13:91:6c:b4:00:cb:8d:6a:89:06:4d:
08:9c:11:25:13:9d:7f:42:14:fd:dd:b1:ec:3f:b6:dc:40:d6:
1e:2f:66:c1:9a:6e:6d:2d:a5:25:f2:d7:e4:8f:23:c2:ed:07:
e6:59:55:7a:70:cd:d8:00:9a:f1:4e:ba:c1:57:7e:57:05:c6:
22:4e:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:06:09 2025 by rpki-client