Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28UV07ncPtSTYTQoagmNjPvkEuE.roa
File: 28UV07ncPtSTYTQoagmNjPvkEuE.roa (raw, json)
Hash identifier: b6hWsnr0uTKDRXY0z9TVaAtVnQ7a/zKzpjvWWshZPOA=
Subject key identifier: DB:C5:15:D3:B9:DC:3E:D4:93:61:34:28:6A:09:8D:8C:FB:E4:12:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E37F6AA04795FB5169F85B246E6F2FAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28UV07ncPtSTYTQoagmNjPvkEuE.roa
Signing time: Mon 05 Dec 2022 18:14:49 +0000
ROA not before: Mon 05 Dec 2022 18:14:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:7f:6a:a0:47:95:fb:51:69:f8:5b:24:6e:6f:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 18:14:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbc515d3b9dc3ed4936134286a098d8cfbe412e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:cc:95:92:c0:17:84:56:9e:58:db:20:90:
3c:59:45:bd:c7:a8:2c:c6:3b:b8:31:1d:b6:25:d4:
1c:42:33:29:44:cf:af:5e:5e:1e:59:75:38:45:8d:
68:b5:0c:b7:e8:0d:4a:3d:d5:f9:78:b7:3a:62:56:
23:e7:aa:60:3d:92:cb:04:aa:7c:5e:f0:3b:cd:bb:
55:4d:d5:38:82:09:b5:db:82:04:b9:0d:b5:e5:64:
7f:b0:d4:0d:7b:fa:4c:80:c4:d5:9d:c5:0a:bd:b2:
5c:5e:4a:75:cb:e7:14:af:db:02:ab:10:43:d8:f6:
32:9d:50:83:14:a9:fe:42:22:47:18:51:1d:37:2a:
01:00:90:53:07:ad:ac:46:c9:7f:2a:63:e9:9d:9a:
c7:f4:f7:ba:f2:35:b7:1b:54:13:6d:86:d9:64:1f:
cc:5b:15:a8:5d:3f:d0:5b:fb:bc:ec:db:d7:0d:85:
97:b4:64:0e:27:dc:b7:8c:0d:f0:16:c2:ed:9c:4d:
12:52:1c:40:74:78:67:12:49:4a:5c:71:73:08:35:
17:2e:8b:7e:65:de:85:cd:3f:99:f3:6f:3e:c2:c7:
69:f1:df:c2:99:93:30:32:51:33:34:ea:10:56:2e:
16:ba:26:86:f1:01:45:03:6d:c3:17:5e:9c:85:72:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C5:15:D3:B9:DC:3E:D4:93:61:34:28:6A:09:8D:8C:FB:E4:12:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28UV07ncPtSTYTQoagmNjPvkEuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:3d:4b:be:87:2c:d1:6e:9e:23:b4:38:5d:c3:e4:d6:13:25:
9b:67:de:d9:87:ce:6d:4d:26:60:c7:87:24:d8:08:02:65:95:
8a:93:93:8f:aa:2a:4f:16:e2:6a:32:4d:d1:ad:21:e6:18:f9:
c4:a0:34:4a:d9:7b:0b:15:f5:bf:7e:72:2d:d4:cb:75:87:4e:
b1:b2:ea:f3:52:ea:8a:e6:fe:29:44:c0:d6:f4:ce:27:ee:a6:
dc:9d:9a:14:b4:f0:2e:f3:bd:d6:3d:bd:37:20:2e:8f:e5:5b:
7b:50:79:d8:27:a4:04:74:5b:81:e2:aa:b2:b5:41:7b:96:ca:
38:be:f5:71:1a:7a:89:fd:6b:66:9e:d9:1d:7a:c1:b6:9e:d8:
32:6d:34:a4:41:a3:df:da:eb:46:31:c6:89:d9:e4:71:41:4f:
cf:57:70:2e:3c:20:49:f4:2e:1d:f9:78:7b:f4:24:bc:88:d6:
b2:8e:4a:ad:94:c6:55:39:90:1e:f3:13:40:ed:4c:3b:3e:7f:
ba:19:6a:46:02:51:66:a3:77:1c:c0:8b:e7:76:2e:cc:81:85:
cb:84:3d:57:1a:9d:fb:32:01:a1:dd:aa:8d:b4:6c:53:34:e3:
ba:82:96:25:11:97:bf:e7:89:ad:ea:e0:98:36:25:7d:9b:65:
27:49:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:40:32 2025 by rpki-client