Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UAXuBZ8iD_0IKO4u8yaNS9tpXjw.roa
File: UAXuBZ8iD_0IKO4u8yaNS9tpXjw.roa (raw, json)
Hash identifier: gRe2npcsgU4+kCdeui2G/DTEiUHfp3Tpva56rWN0WVg=
Subject key identifier: 50:05:EE:05:9F:22:0F:FD:08:28:EE:2E:F3:26:8D:4B:DB:69:5E:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 775199D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UAXuBZ8iD_0IKO4u8yaNS9tpXjw.roa
Signing time: Thu 31 Mar 2022 20:11:49 +0000
ROA not before: Thu 31 Mar 2022 20:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001836502 (0x775199d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 20:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5005ee059f220ffd0828ee2ef3268d4bdb695e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:87:4b:42:31:56:6d:c9:6c:ac:16:bc:b8:
1f:a3:02:ef:9c:41:2d:bd:12:59:61:db:5c:4b:27:
68:4d:92:99:dd:06:93:5b:e8:86:39:cb:c2:b6:96:
30:00:b8:93:f5:ab:56:be:ee:bc:a3:69:6f:26:a4:
c8:88:b1:b5:5e:79:f4:4b:73:88:8b:29:f0:09:03:
65:93:03:69:b5:ee:ec:e9:46:9a:b7:e2:87:8c:a9:
13:ca:4e:02:b2:98:7e:74:a0:ae:63:03:6c:c9:ff:
e3:53:c6:ba:01:5b:52:ec:d4:28:1e:cd:8c:dd:9d:
e7:b9:9d:a6:a1:85:bf:56:ae:91:6a:a3:bd:cd:86:
6c:bc:00:b8:94:62:f8:bc:bf:2a:b0:95:53:33:40:
8e:8f:6a:0c:91:20:be:af:51:95:99:33:0c:cb:b6:
98:76:99:54:d6:c1:92:da:94:ed:20:f8:14:15:6c:
57:80:c9:a0:43:96:79:3f:3f:16:4f:1d:a2:bb:19:
24:08:29:cd:77:52:5e:9f:28:ab:34:8f:8d:73:dc:
a8:5c:a0:70:06:24:2d:62:10:96:67:ba:59:4b:30:
9b:a8:be:c5:85:02:93:5c:0c:2d:30:d8:2e:c6:35:
39:83:b0:82:58:45:13:a9:f1:30:7a:0e:45:ef:75:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:05:EE:05:9F:22:0F:FD:08:28:EE:2E:F3:26:8D:4B:DB:69:5E:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UAXuBZ8iD_0IKO4u8yaNS9tpXjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:a9:f6:78:8b:20:f9:d4:07:33:00:f7:ab:36:d7:cd:f7:00:
eb:83:2d:2b:b2:9d:df:58:f9:c6:6a:7b:7d:37:2d:b7:e7:cd:
b1:3b:16:79:8c:8f:4d:0a:3d:ef:48:83:c0:2d:3f:83:0c:85:
6e:2d:c2:94:36:50:de:44:df:e9:67:dd:87:a0:e7:11:87:3b:
dd:c7:80:e9:3c:59:80:2d:ae:a5:3e:f1:0e:c2:c2:b4:e7:45:
cc:69:e3:0e:0a:54:0d:21:48:d1:92:cd:f5:ef:ea:6d:1f:84:
bc:ed:5e:55:7c:4c:66:c5:ea:5f:b3:07:37:0c:c4:a3:c4:d1:
15:02:86:90:24:b5:2e:19:09:80:d1:98:cc:61:94:43:5a:9e:
d3:b8:4d:d7:05:3c:74:59:cd:ca:18:aa:a9:db:e7:0d:c9:4a:
e7:ac:29:16:ac:c3:01:91:78:97:12:6c:0f:83:78:cd:00:a0:
91:42:b7:09:a0:ed:1f:94:b2:24:e0:30:1a:50:5b:88:fd:52:
33:68:8d:12:e6:e3:1d:9c:39:13:6e:c2:d1:42:32:bd:d3:03:
af:9e:c4:5c:b9:6b:50:7f:af:d0:fb:be:41:dd:64:60:f7:51:
f2:9b:fd:2b:09:1f:2e:47:17:28:a5:70:21:50:08:96:b5:36:
04:0a:71:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:52 2025 by rpki-client