Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UgBs5WKhlf_V7LVbkunVkj2Dq4.roa
File: 9UgBs5WKhlf_V7LVbkunVkj2Dq4.roa (raw, json)
Hash identifier: e6NpzP7kik33aEfSH9ErcSDCP4Qu0OsUxyy4WxyC/Zg=
Subject key identifier: F5:48:01:B3:95:8A:86:57:FF:57:B2:D5:6E:4B:A7:56:48:F6:0E:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861EEA7EAF1EE62F2719FF91E09115B753
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UgBs5WKhlf_V7LVbkunVkj2Dq4.roa
Signing time: Sun 05 Feb 2023 00:12:09 +0000
ROA not before: Sun 05 Feb 2023 00:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1e:ea:7e:af:1e:e6:2f:27:19:ff:91:e0:91:15:b7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 00:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f54801b3958a8657ff57b2d56e4ba75648f60eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:d7:3b:97:16:e1:b4:22:68:8a:5d:da:5c:
35:a7:b4:5b:59:f3:78:cd:be:94:61:59:e8:a9:19:
51:d6:1f:6d:58:02:68:a9:a2:ee:11:32:94:a8:5e:
8c:fc:1a:77:ab:42:c0:da:2e:0b:00:46:b2:09:0d:
70:e2:3f:9c:5e:40:a8:b5:af:92:bf:5c:fb:31:21:
a2:e4:73:e4:65:9b:c2:a2:30:27:2a:db:cc:a0:e8:
8b:a6:1e:32:ac:cb:b4:35:77:e6:c4:b2:13:3d:8a:
fa:6d:77:cf:64:03:29:db:5d:1c:e7:aa:1e:ce:fb:
a6:b7:5f:7d:0a:33:95:f0:f8:41:1a:12:87:c9:d5:
d2:19:99:61:eb:52:27:2f:39:39:b0:73:4d:91:a4:
39:a9:b2:f0:a1:25:3d:b4:b1:5f:66:23:45:8e:9b:
80:bf:46:00:3a:fd:5c:76:c5:53:70:5c:ac:cc:14:
63:fc:a4:68:a8:55:6b:d0:6a:ce:b3:76:08:63:7f:
d7:6c:93:d0:64:af:94:3f:dd:9f:0c:2a:28:96:4e:
ee:7e:a4:3d:5b:32:69:c0:14:5f:7d:c4:40:be:52:
e6:86:7c:89:dd:f3:49:be:20:d5:cb:0c:15:6b:46:
43:e5:1a:f4:71:b7:8f:91:f8:df:bd:21:42:ca:41:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:48:01:B3:95:8A:86:57:FF:57:B2:D5:6E:4B:A7:56:48:F6:0E:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UgBs5WKhlf_V7LVbkunVkj2Dq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:eb:ca:97:bd:6b:7a:1e:7f:80:e3:81:82:22:50:99:62:1a:
07:bd:0b:32:b6:df:d8:ad:4e:4e:fc:bf:ae:10:7d:8e:57:71:
9c:a6:d6:c3:5e:fc:95:c2:91:0c:c1:9e:f3:66:f4:2b:c1:a0:
bc:7b:51:65:0a:3d:4a:ed:0c:6e:d2:f5:89:3a:3d:64:f0:5d:
ab:68:2f:9a:14:48:60:93:a9:e6:ea:74:c2:d0:cf:39:45:2e:
d0:82:49:42:68:d2:c2:26:e9:3c:32:55:37:a2:d7:35:a5:33:
51:a7:4c:d0:94:49:d5:69:0a:3e:dd:f3:e2:50:0e:4a:97:26:
42:e1:11:fe:67:51:84:ed:43:f0:1a:5a:9b:55:26:fc:5d:72:
9b:16:c6:44:92:0b:cc:f8:fe:a7:89:03:19:6a:91:2d:2d:d1:
43:8d:56:ca:98:83:0d:e7:c7:58:81:a2:33:a1:fb:74:d9:b8:
84:46:02:d9:a9:c7:20:22:44:16:06:82:30:55:b9:63:4f:94:
3d:1a:98:09:aa:93:fb:7e:00:e4:75:3d:fb:9b:d5:93:17:11:
49:c5:df:2f:54:e3:36:c6:61:8a:32:1b:47:20:f8:cf:ad:61:
03:ea:2a:a6:c4:99:1c:14:ed:53:47:02:e3:c9:0f:4e:d3:86:
c4:d4:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:50:49 2025 by rpki-client