Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_UfM8JQeTwYmxQFfoRfquBfVEU.roa
File: S_UfM8JQeTwYmxQFfoRfquBfVEU.roa (raw, json)
Hash identifier: wTimYbXuIz1c3K2voRtXMuvc1YRmLg9l0VXgK2AAKpI=
Subject key identifier: 4B:F5:1F:33:C2:50:79:3C:18:9B:14:05:7E:84:5F:AA:E0:5F:54:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860B61544F0C6A8E189898D37B71C3C789
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_UfM8JQeTwYmxQFfoRfquBfVEU.roa
Signing time: Wed 01 Feb 2023 05:09:33 +0000
ROA not before: Wed 01 Feb 2023 05:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0b:61:54:4f:0c:6a:8e:18:98:98:d3:7b:71:c3:c7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 05:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf51f33c250793c189b14057e845faae05f5445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:ee:24:d1:59:5d:6d:01:9d:0f:01:71:c6:
e5:0d:8d:fc:9a:0f:09:6a:aa:4f:2e:3c:0f:e6:af:
01:74:6d:14:74:5a:51:8c:ba:62:04:5a:f7:46:c6:
9a:d9:46:21:e5:bc:0a:75:ec:9f:a8:86:6f:41:23:
43:d3:8d:df:fe:21:0f:53:8d:5d:85:3d:82:83:28:
2e:3d:5b:ec:a0:db:5b:2e:b0:3d:92:f5:05:c4:96:
1a:49:81:be:cd:88:4f:b1:9a:ef:1d:f7:ed:21:ed:
f3:e1:2b:8e:7d:dd:9e:3c:1e:b7:5c:23:d8:5e:5c:
6b:96:f5:16:1c:b6:96:5c:51:b9:06:4c:bc:67:9f:
2d:b4:68:b5:f8:23:8c:12:e0:58:71:f9:1c:de:46:
ef:d2:5c:de:8b:8c:b3:a2:ee:9c:48:86:de:4a:6a:
e0:98:23:30:76:34:0d:5e:8d:e7:b8:b3:03:1d:08:
0a:05:8e:34:1b:37:c9:ba:ca:a7:e2:7a:8a:18:e4:
c5:26:ac:eb:c7:6b:27:1d:dc:99:0c:0e:87:a9:b8:
8c:5c:38:77:23:24:a9:b5:44:bc:12:f3:0c:f4:4b:
17:6f:5d:fe:09:cc:bb:50:26:eb:d5:38:d5:2c:c0:
6a:69:46:97:b1:d8:ee:b1:be:17:72:f6:0d:1d:42:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F5:1F:33:C2:50:79:3C:18:9B:14:05:7E:84:5F:AA:E0:5F:54:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_UfM8JQeTwYmxQFfoRfquBfVEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:ee:06:78:de:74:cc:c4:1e:3f:5a:17:34:40:ba:9b:de:50:
ad:86:ae:6a:31:21:a0:d6:00:59:6a:a3:31:f0:ea:16:75:f3:
79:84:6c:04:83:ad:e6:e2:1a:a6:a7:bc:fc:bd:f8:65:c8:fa:
e4:09:99:bc:05:77:9b:d3:b1:c1:f6:df:3f:0f:44:e9:ba:14:
9d:2d:d4:aa:5e:0f:7c:b9:c3:80:ba:fc:f4:b5:ec:dc:b2:45:
ee:f7:2d:58:e6:2e:7d:75:2c:6e:5f:fe:f1:1b:e6:20:f3:94:
e5:8f:d1:fa:e6:0b:57:fd:3a:f7:b7:1d:93:5a:cf:64:fb:60:
36:1a:e8:b3:2d:af:2e:89:cb:d4:af:72:38:41:fe:4b:a4:ba:
a2:41:d2:d6:24:e4:14:19:e3:ac:86:8d:1c:64:4f:53:a8:66:
94:d8:fa:e3:e6:b2:8f:a9:da:7d:be:5d:6a:a1:4f:b0:35:2b:
59:d1:ee:2a:a2:87:dc:ed:f1:12:1e:04:ef:71:25:d8:12:c0:
12:0f:fb:0f:7a:86:eb:9f:96:b9:52:3d:c0:19:09:05:b0:5d:
21:ad:49:99:ef:83:d8:47:7a:93:f9:f8:97:80:08:32:0f:ba:
e4:2d:95:fd:88:87:c7:64:2d:71:02:0d:ec:c4:88:5c:93:fd:
49:b7:40:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:59:53 2025 by rpki-client