Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U8nW5jLisLBR-SQ9T-KF8OOypXQ.roa
File: U8nW5jLisLBR-SQ9T-KF8OOypXQ.roa (raw, json)
Hash identifier: YzxR44e58fdXIumCn25b01tzSyWvSiErEHNsdCwtaV8=
Subject key identifier: 53:C9:D6:E6:32:E2:B0:B0:51:F9:24:3D:4F:E2:85:F0:E3:B2:A5:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185202FB321C1A4678348D5A4703DFE5247
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U8nW5jLisLBR-SQ9T-KF8OOypXQ.roa
Signing time: Sat 17 Dec 2022 13:04:34 +0000
ROA not before: Sat 17 Dec 2022 13:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:202f:3e5b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:2f:b3:21:c1:a4:67:83:48:d5:a4:70:3d:fe:52:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 13:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53c9d6e632e2b0b051f9243d4fe285f0e3b2a574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:c9:cf:da:cb:b2:a9:72:53:95:72:72:cd:
c0:c1:1d:22:c7:1d:f3:7e:e7:cc:92:a5:99:d1:67:
77:c8:d5:5e:a6:f0:c1:1c:2d:10:ce:6a:f0:2d:6b:
a1:bc:58:a7:53:04:af:03:12:eb:f4:e5:02:29:14:
97:3f:df:e1:d0:cb:d1:8a:0f:28:24:59:b4:dd:e2:
3d:92:ba:ea:eb:66:64:65:d8:b6:22:70:88:2e:6f:
e7:d3:da:14:7a:53:4e:00:9c:97:1d:d6:ef:6f:7e:
54:4f:28:93:c1:da:08:7d:6b:27:da:dc:bb:88:1b:
55:31:41:63:da:c5:62:3e:23:e7:4e:61:e5:8a:e9:
b7:ee:71:02:97:24:5b:fe:9f:19:37:cb:03:ca:f8:
fd:96:1c:da:ff:24:19:9b:99:6e:be:f0:eb:ec:e1:
8a:d5:8b:21:c8:ad:f5:c5:e8:95:2a:b0:88:41:71:
af:a0:c5:83:cd:2e:e2:2d:2f:26:52:92:5f:59:f9:
e9:01:0c:c3:67:b8:13:7f:e2:d7:09:b3:0f:f5:43:
d7:71:8d:b6:aa:05:cb:bd:22:a4:47:4a:12:88:14:
b6:57:2c:fc:54:ba:61:d6:d7:08:e3:35:3a:49:18:
b4:5e:30:fa:c0:ca:89:19:4a:97:cf:0f:ad:df:c1:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C9:D6:E6:32:E2:B0:B0:51:F9:24:3D:4F:E2:85:F0:E3:B2:A5:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U8nW5jLisLBR-SQ9T-KF8OOypXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:3d:ea:04:a6:5b:0b:40:72:a2:27:be:68:c9:cd:cf:69:f0:
d5:a5:05:72:64:96:68:e5:c5:14:9b:25:ca:eb:b8:8b:7d:2c:
a5:f1:86:50:12:4e:69:91:54:c1:9d:10:bf:33:6d:2d:bb:56:
19:d8:cd:89:c4:46:83:66:bc:0a:84:66:7f:43:c8:9c:c2:e1:
9f:8d:7f:fe:b4:96:90:8f:b5:32:ff:1c:35:ad:53:6b:66:7d:
11:9d:59:ec:af:e2:3c:b1:66:79:e4:85:cf:84:89:f8:97:a0:
d0:a6:04:a6:e0:fc:fb:0c:3a:16:ea:58:a7:e7:b4:31:62:29:
2b:5f:c5:48:8b:15:80:2f:cc:a1:7a:94:01:84:63:37:92:32:
65:05:12:c5:c0:e1:12:f6:5c:df:c3:19:bf:97:9c:cf:9a:85:
8a:4b:8f:9a:c6:26:f2:9a:9f:25:ce:85:00:ec:da:3c:f1:60:
24:4e:40:e2:52:b9:fe:81:c2:a5:12:3e:b2:47:54:b4:4a:4f:
de:e4:b1:9e:da:43:fa:f1:03:7e:0a:38:20:09:02:83:c5:04:
c9:70:fb:88:77:83:6d:c8:f6:3e:5b:49:2c:73:ac:55:c0:15:
65:4b:cc:72:7d:04:73:89:64:f0:54:27:90:ac:07:fa:17:12:
e1:c6:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:23:14 2025 by rpki-client