Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U4R3Syw5zOOpJ-ulwxW_pg-yJ-I.roa
File: U4R3Syw5zOOpJ-ulwxW_pg-yJ-I.roa (raw, json)
Hash identifier: 9HQSyO5SEeTy+CWJKtxUp2+QL73kfeOc8gU7IE33kkk=
Subject key identifier: 53:84:77:4B:2C:39:CC:E3:A9:27:EB:A5:C3:15:BF:A6:0F:B2:27:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850AF604BDAA09C99780D86CD3785384B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U4R3Syw5zOOpJ-ulwxW_pg-yJ-I.roa
Signing time: Tue 13 Dec 2022 10:09:33 +0000
ROA not before: Tue 13 Dec 2022 10:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:f6:04:bd:aa:09:c9:97:80:d8:6c:d3:78:53:84:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 10:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5384774b2c39cce3a927eba5c315bfa60fb227e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:12:b4:7d:d3:36:a7:c5:46:2b:40:a0:bf:
44:50:eb:53:69:c3:e3:c9:95:10:fc:3c:15:f9:c1:
e7:e3:3a:e5:92:10:ba:30:e2:91:e1:c3:88:d8:6d:
6e:0f:3c:79:b2:8e:aa:ad:9d:f9:c1:db:84:4f:78:
48:fe:41:05:32:3f:21:20:5a:a4:94:b7:3f:7b:e1:
3a:c7:f1:78:e8:31:18:46:16:43:45:0d:bc:73:af:
5d:0e:37:ef:ac:20:b6:de:76:6d:62:39:cc:bd:e0:
78:9f:c4:a5:72:96:49:bf:2a:2f:c9:75:57:81:57:
19:f7:4d:b9:16:23:f3:14:0e:b5:6c:c1:74:43:21:
10:75:14:4e:77:f7:35:c9:15:84:26:9e:95:d7:fc:
c2:4b:dc:e5:44:92:ba:79:73:d5:17:7d:57:4d:59:
1a:80:60:ca:5c:ac:2d:9c:c1:eb:b3:e0:33:a3:54:
a9:c8:13:f0:89:a1:9d:08:48:49:20:42:91:ed:15:
d0:1b:39:49:47:e8:8b:c4:bb:1f:80:30:c9:bf:85:
1e:b5:96:e2:84:b2:ab:24:fb:1c:e6:78:74:90:46:
29:84:23:4e:4c:52:77:9c:d0:eb:8e:0e:84:74:42:
b6:2c:95:0d:c8:d5:01:a4:f4:60:a6:ba:7d:f3:9e:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:84:77:4B:2C:39:CC:E3:A9:27:EB:A5:C3:15:BF:A6:0F:B2:27:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U4R3Syw5zOOpJ-ulwxW_pg-yJ-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:9d:b0:f3:99:ff:9e:71:ba:78:29:ab:39:74:85:73:02:e3:
9e:b4:bc:34:12:29:0a:e9:aa:dd:2b:df:84:16:f9:de:99:4d:
a0:3a:32:5c:4e:10:27:fc:18:30:15:e7:1a:8a:f4:20:56:f7:
83:88:cd:3e:e3:b9:43:30:9a:4d:c6:0d:cf:f5:06:63:30:91:
3f:3b:ed:48:2c:27:f4:ee:2f:46:84:16:48:90:8b:48:a1:65:
b5:71:33:9b:be:7c:ca:25:7a:2a:df:76:2d:4f:74:2e:bb:f1:
54:ea:43:f0:0d:a0:15:a4:0b:a7:21:47:5b:57:11:1e:8e:e4:
29:80:f3:68:0f:9f:c9:ae:38:bc:c8:72:8f:d2:3b:9f:9d:e2:
90:51:3c:88:4d:72:65:bf:22:0e:0f:0a:23:1c:50:d0:2d:8b:
7a:04:0d:4d:e5:26:98:43:f9:68:06:8f:d3:bc:8c:63:40:93:
e1:39:6a:f6:ac:91:e1:2d:21:d2:12:84:2f:c9:9d:d3:32:62:
fb:39:9d:0f:08:1d:55:2d:1d:10:1f:2b:4d:04:42:be:24:a1:
4c:23:8f:da:c1:c3:c5:09:14:26:be:cb:22:14:fe:f8:4f:80:
f0:46:39:dd:66:6c:2b:01:52:61:e2:3e:ad:12:98:1d:dc:2a:
45:f2:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:34 2025 by rpki-client