Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UcBjtx-VIo4ggDaFFJ5FZi2rPU.roa
File: 9UcBjtx-VIo4ggDaFFJ5FZi2rPU.roa (raw, json)
Hash identifier: e/3or/HeijVlSJMC5xK/BwWgBa7T3GbArrQO6f8nbKU=
Subject key identifier: F5:47:01:8E:DC:7E:54:8A:38:82:00:DA:14:52:79:15:98:B6:AC:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186003A05A97A9B424481EB93CB84FC2AEC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UcBjtx-VIo4ggDaFFJ5FZi2rPU.roa
Signing time: Mon 30 Jan 2023 01:10:47 +0000
ROA not before: Mon 30 Jan 2023 01:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:00:3a:05:a9:7a:9b:42:44:81:eb:93:cb:84:fc:2a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 01:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f547018edc7e548a388200da1452791598b6acf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:00:eb:75:13:47:63:f9:72:f4:cd:be:62:
81:3c:7b:75:14:92:fa:a8:db:e6:19:20:e0:30:28:
3f:6a:8a:02:cc:cc:ca:20:c8:7b:ab:62:96:be:4e:
76:6a:a2:66:17:1b:3d:45:19:63:49:3a:70:52:38:
18:de:d5:e4:18:3d:e5:6d:66:ee:21:e1:67:1e:59:
0e:6e:5b:8d:73:e2:b6:39:3a:75:0f:dc:53:99:05:
23:63:28:ca:3e:89:23:51:cc:d2:79:ed:f0:6c:42:
59:19:59:7c:f0:d3:4c:4b:f6:2d:b5:48:17:72:04:
60:4f:54:ab:8f:f6:b4:06:f0:46:28:bd:c8:6f:cd:
45:d0:6f:ec:a7:c9:62:1a:48:60:90:8f:aa:8b:ff:
6b:8b:da:12:e6:f2:42:32:c1:6d:94:64:40:33:db:
28:7b:88:25:e7:c8:6e:65:cd:e4:24:1d:3a:56:bc:
91:54:01:92:eb:07:c4:1e:a9:57:aa:89:dd:ca:d9:
03:bf:8f:af:fd:3e:2b:f5:6c:24:70:16:cf:5f:2b:
fa:ee:eb:04:68:82:79:b9:1c:1f:10:bb:ca:7b:8b:
62:4d:3a:f8:d8:ee:53:81:45:0b:d6:1f:fc:57:30:
70:25:8f:c9:33:b5:17:c1:40:8b:9e:8b:f6:28:48:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:47:01:8E:DC:7E:54:8A:38:82:00:DA:14:52:79:15:98:B6:AC:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UcBjtx-VIo4ggDaFFJ5FZi2rPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:dd:64:3d:0e:b5:5a:a3:e6:86:4e:b9:7a:f8:e1:36:cd:82:
43:48:51:e9:81:8d:12:da:ef:a9:f2:24:54:29:b6:30:22:c5:
db:f6:bb:82:e9:ee:41:e1:47:b2:04:ef:73:32:7c:35:d2:28:
ab:cb:74:28:c9:f5:2b:3a:ae:ae:90:26:8d:78:11:6f:a4:90:
65:a2:60:a9:02:0b:02:72:23:56:ae:78:54:5c:65:96:9e:64:
85:da:22:60:7c:c3:33:fd:85:9c:ee:14:66:36:ee:57:a5:78:
27:dc:b8:cb:85:a6:f7:56:49:e2:5c:00:1e:e0:5f:42:74:ef:
68:5e:54:99:06:0a:ec:71:ec:ec:33:a6:02:ae:c5:52:3e:52:
d7:2a:b8:2a:ae:ae:6d:ce:ee:ca:70:2f:0d:57:3c:c7:3a:2a:
40:cf:8e:14:a6:9c:bd:db:bb:6e:b3:d6:53:f6:96:fb:af:a1:
08:a1:84:3e:9c:c9:a5:ee:d6:bc:c5:4a:c5:0f:50:11:bf:50:
00:0c:3c:f5:fa:52:80:48:ad:d2:d3:81:60:f0:aa:94:62:4f:
80:93:ff:b6:af:19:d0:60:b2:65:49:74:20:ef:77:5c:7e:ea:
cf:71:4b:f9:36:9b:01:52:98:17:33:1e:2e:66:fb:77:e6:ac:
61:b7:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:29:11 2025 by rpki-client