Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UGu1ho77oQ8poIyWLUTJqGyFwBo.roa
File: UGu1ho77oQ8poIyWLUTJqGyFwBo.roa (raw, json)
Hash identifier: cVmf9eqif6J929UXtBQfTEg4h+4YckrCdVZT3EBsFmk=
Subject key identifier: 50:6B:B5:86:8E:FB:A1:0F:29:A0:8C:96:2D:44:C9:A8:6C:85:C0:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852A4C0FD43A7FDD1737DC9DA5EB406983
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UGu1ho77oQ8poIyWLUTJqGyFwBo.roa
Signing time: Mon 19 Dec 2022 12:11:45 +0000
ROA not before: Mon 19 Dec 2022 12:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:4c:0f:d4:3a:7f:dd:17:37:dc:9d:a5:eb:40:69:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 12:11:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=506bb5868efba10f29a08c962d44c9a86c85c01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:88:09:40:5f:b2:eb:08:2f:b4:ee:79:0a:
f3:1a:8a:91:ac:e0:06:3f:d8:f5:73:93:3c:76:82:
c1:f9:e0:36:f2:58:0f:df:43:1b:d7:14:7d:02:7f:
71:cc:72:61:30:a2:e3:31:f1:62:87:32:2f:3d:54:
2d:db:9f:00:49:a4:dc:f1:0e:bf:62:f0:28:91:d0:
c5:a1:df:d9:13:d1:f9:b2:6e:c9:90:4e:1a:85:43:
35:ac:61:b3:f4:ac:ea:9c:3f:ec:0a:1e:70:ca:5a:
3d:28:09:b6:19:a4:0d:2a:0a:9a:03:61:07:51:e9:
dc:83:46:5e:d9:b4:2a:eb:2e:7b:61:79:81:56:14:
8a:67:1c:6f:9b:94:c9:43:44:e8:6f:fd:f8:33:ea:
89:3e:09:24:88:00:9c:fd:4a:b6:89:29:32:0e:a7:
b6:a8:0f:e5:c1:83:56:cf:36:ca:73:cb:97:cd:2e:
06:32:cf:c9:71:72:c9:aa:13:b6:00:17:7a:eb:1c:
1d:71:25:78:bd:ab:79:0f:0f:cb:7f:73:d3:df:36:
86:7c:2d:b3:78:fa:c6:dd:3b:38:21:7e:a1:8d:48:
5e:49:80:a8:bc:a2:c8:43:9b:47:bd:cd:14:bf:7c:
af:52:dc:11:b2:56:2b:db:3d:3d:29:ba:02:f7:c6:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:B5:86:8E:FB:A1:0F:29:A0:8C:96:2D:44:C9:A8:6C:85:C0:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UGu1ho77oQ8poIyWLUTJqGyFwBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:7b:ee:da:88:17:aa:a0:8f:e4:d9:dc:c4:47:be:b5:d7:49:
6e:44:0b:55:1e:95:1d:1e:c1:53:25:f9:96:64:94:c3:bb:94:
db:12:bf:5c:1c:d3:c0:f3:c5:75:08:4d:1c:b6:76:d6:d4:54:
aa:5b:57:b0:0c:28:d2:bc:9f:a5:59:49:91:e4:c8:57:aa:90:
e6:ad:94:73:b3:23:3e:80:f4:20:13:f2:d9:0e:63:73:84:b5:
9e:99:c6:32:7f:ed:89:66:d9:9f:74:3f:78:4e:df:a5:12:ef:
af:5f:45:b6:83:f7:f0:5c:4b:55:b6:ef:97:93:cf:08:46:76:
8c:e9:6f:2f:95:1a:b2:4e:16:4e:e6:f0:4c:75:ab:c9:04:35:
bd:68:29:46:64:89:fd:37:44:e3:65:27:e7:d1:c0:38:41:49:
93:d9:fe:09:f1:7b:f0:ff:2f:a2:83:fd:2e:bd:d5:4b:71:59:
1b:ce:7a:39:3f:a7:1d:93:f9:0e:23:db:75:c8:25:bb:41:f1:
7b:af:ea:11:90:7e:7f:0f:7b:a2:87:c7:e5:a0:81:8d:9f:0a:
1e:b9:fd:3c:75:51:07:50:b8:ce:bc:71:b3:72:66:92:d5:fc:
65:16:1c:47:97:84:75:a0:5b:74:82:95:7b:ba:4b:b1:0c:7a:
8a:d3:5d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:24:42 2025 by rpki-client