Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4UKpFILupwh8za0i5E_JsBg97nU.roa
File: 4UKpFILupwh8za0i5E_JsBg97nU.roa (raw, json)
Hash identifier: h3PuAcRVcv3zqbiTv7iGXqAeSnCYekBxH9nKPwk0bs4=
Subject key identifier: E1:42:A9:14:82:EE:A7:08:7C:CD:AD:22:E4:4F:C9:B0:18:3D:EE:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F77775078D00DBFC0084CFD0BB41755A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4UKpFILupwh8za0i5E_JsBg97nU.roa
Signing time: Wed 13 Jul 2022 12:10:09 +0000
ROA not before: Wed 13 Jul 2022 12:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:77:75:07:8d:00:db:fc:00:84:cf:d0:bb:41:75:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 12:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e142a91482eea7087ccdad22e44fc9b0183dee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:ae:43:22:46:1c:85:1e:6c:23:5c:5d:f7:
8b:1c:ff:d0:aa:4a:b0:67:79:98:4b:35:5b:92:3d:
97:cc:a0:47:84:6c:d1:9f:16:02:96:b0:b6:b6:26:
8c:9d:48:96:20:f5:70:23:d8:d6:ed:6c:f7:4d:cc:
c6:57:f5:5b:5c:4e:95:50:ee:58:ea:56:41:f0:51:
ff:a6:74:e2:ba:79:a8:46:33:6d:bc:51:dc:7c:cd:
0e:65:6b:d5:e6:85:a8:dc:dd:1f:dd:2f:93:21:c9:
5f:b1:3b:7b:81:9c:e6:6f:5a:4a:09:29:0f:54:49:
46:19:5a:3b:fa:f4:da:71:f3:23:5e:8f:f9:c6:3d:
4a:17:d6:b6:d3:11:00:c4:75:9d:2d:4f:2a:ba:ab:
7d:b3:f3:fe:66:22:50:5f:77:89:52:90:7b:26:95:
af:72:e3:4d:74:a3:b0:92:33:6b:6d:0d:9e:df:bb:
f2:e6:3d:45:cd:83:44:6b:4a:58:bf:fe:20:ba:46:
97:e1:80:47:0a:80:e1:ad:0a:ff:0f:96:ab:9d:6c:
e9:84:3e:54:96:fa:2a:58:fa:2a:5f:50:b4:54:af:
5a:30:c7:06:1b:c8:d9:53:35:6a:ce:7f:35:dd:b1:
44:31:c1:8c:17:cd:37:cb:79:90:59:82:9c:13:69:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:42:A9:14:82:EE:A7:08:7C:CD:AD:22:E4:4F:C9:B0:18:3D:EE:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4UKpFILupwh8za0i5E_JsBg97nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:42:b8:a9:6b:df:f2:e4:1e:96:fc:4d:1e:0a:df:da:d2:5e:
3d:82:1e:b1:93:63:0f:41:e8:86:47:5f:1a:be:fe:ce:6a:59:
38:a3:56:6e:6f:4c:f4:e0:65:32:21:9c:ca:81:b8:df:bc:0f:
00:90:69:7f:92:72:71:f7:89:de:3f:fd:74:ae:98:8a:41:21:
df:d8:92:7c:e1:4d:20:cd:91:76:c6:60:1e:d1:0c:57:e0:d3:
d4:05:3b:51:54:55:5c:96:06:fc:42:0a:9c:12:d5:ae:69:63:
02:9d:c1:b6:f0:8e:57:09:22:60:ab:42:11:f0:0d:fe:16:4e:
f4:71:6f:ee:f7:95:bb:c8:62:14:38:98:5e:94:97:98:76:d2:
d4:84:da:8c:cb:ae:e1:b2:89:82:5e:2b:3c:24:ef:23:15:ab:
a5:17:f7:9a:e5:81:cb:85:05:7f:44:1b:38:88:5f:04:82:f0:
d4:81:f4:76:b0:25:15:dc:58:8c:7e:1f:b5:e7:d4:e8:87:19:
7a:88:39:00:54:91:62:e3:2f:49:5b:20:ef:2d:ac:20:7f:b9:
70:01:1f:cb:2a:12:51:ec:6b:f3:92:2f:26:a8:97:9e:76:32:
7f:a4:5a:1d:da:81:30:a4:e3:be:99:c9:d0:54:c4:5a:99:3a:
b7:cf:5d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:31 2025 by rpki-client