Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UDNyS-bpeZbvZVNLGma52IAKMK4.roa
File: UDNyS-bpeZbvZVNLGma52IAKMK4.roa (raw, json)
Hash identifier: XTzzYckb2rzEIPGqx4NMIQ6hVkfi67IC8OCoBgR+1yU=
Subject key identifier: 50:33:72:4B:E6:E9:79:96:EF:65:53:4B:1A:66:B9:D8:80:0A:30:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018447151FEA10F3FB579F81F8F852E6CF5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UDNyS-bpeZbvZVNLGma52IAKMK4.roa
Signing time: Sat 05 Nov 2022 09:17:57 +0000
ROA not before: Sat 05 Nov 2022 09:17:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:47:15:1f:ea:10:f3:fb:57:9f:81:f8:f8:52:e6:cf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 5 09:17:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5033724be6e97996ef65534b1a66b9d8800a30ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2c:97:b0:57:bc:a5:d0:9a:5c:e1:8b:ec:c9:
50:52:b7:73:6a:12:8c:96:77:2a:d8:5d:de:47:cf:
88:4f:10:a6:f1:00:92:9d:34:50:37:f3:98:1a:61:
29:03:da:71:e4:bf:87:c9:2d:7c:2c:2d:a1:99:48:
27:8b:95:04:c4:d3:90:32:28:79:78:4d:9b:32:55:
c8:94:13:dd:32:80:c2:77:01:48:ca:f4:60:5d:ee:
48:b0:5c:32:4f:76:66:c1:3e:8d:96:7a:8e:3c:88:
06:06:0d:a1:16:f8:ec:05:89:11:89:b2:e9:d6:0d:
03:9d:99:8b:7e:2b:2d:dc:1a:f3:b8:ba:32:ce:b9:
9a:09:f7:80:fd:81:66:df:17:4e:b2:36:44:67:c8:
c3:90:98:66:1b:9c:7e:c3:5a:5a:7a:58:5d:91:b5:
26:5e:de:83:ce:82:e7:11:2f:ab:06:5d:37:c7:06:
f6:0c:c8:36:9e:c5:fa:f0:29:9f:b0:7c:12:ec:8c:
a9:66:6c:8a:1f:23:08:62:92:51:77:b3:0b:ea:d8:
8e:0c:33:18:9f:71:db:b4:05:75:e7:39:1f:43:02:
04:e3:15:c8:01:fb:a6:fd:7d:86:fe:14:8d:f2:d6:
95:21:52:f1:b0:13:69:8d:91:d3:06:ea:f2:93:e7:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:33:72:4B:E6:E9:79:96:EF:65:53:4B:1A:66:B9:D8:80:0A:30:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UDNyS-bpeZbvZVNLGma52IAKMK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:79:83:c9:26:f3:d5:16:5e:73:a2:42:8e:05:ac:f0:76:6a:
1d:9b:23:cb:2e:91:c2:7d:61:7e:e8:43:e0:e0:4d:bf:b5:ad:
16:5f:59:70:85:90:6b:ed:10:60:6b:f8:a5:51:be:5b:4a:7f:
95:db:17:67:20:f3:a1:3d:f2:14:e1:cb:ba:76:f3:f4:00:54:
b5:b1:69:e3:f1:04:33:d9:d8:2c:28:9d:ef:15:e7:ec:d5:13:
0f:87:aa:2c:d9:d1:f7:a9:3f:75:46:c9:75:94:cf:f1:9d:94:
8b:f9:35:dc:82:4d:d0:71:f8:cf:0f:4b:a3:af:37:74:48:b1:
0e:fb:1a:23:67:77:55:41:e1:0e:54:3d:12:d2:cf:4d:54:c8:
ff:36:ca:08:58:34:ac:42:9b:af:3d:9f:bd:87:78:5f:28:ce:
a9:4b:33:12:10:85:bc:f8:09:c6:f8:26:60:f1:ea:01:9c:2c:
ba:eb:7a:38:1b:1a:cc:25:d0:ea:7b:eb:60:99:63:73:a3:88:
99:6b:26:06:fd:0e:55:69:5b:0c:7a:aa:e6:7f:df:e6:fc:16:
f3:96:45:a9:45:f3:4a:53:a3:e3:5c:29:ae:f7:f9:b7:f1:6d:
20:25:bb:47:89:e8:14:db:9d:c7:9d:33:54:a4:d9:95:75:5c:
b7:73:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:14:24 2025 by rpki-client