Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIODnJrlJo1xMsrGk7we7nHkFNM.roa
File: UIODnJrlJo1xMsrGk7we7nHkFNM.roa (raw, json)
Hash identifier: MpTUKP3jhdw1h2iabT+E5uzT9nQqa9aKdFal+HkjH5U=
Subject key identifier: 50:83:83:9C:9A:E5:26:8D:71:32:CA:C6:93:BC:1E:EE:71:E4:14:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843245130F10CF35DFD18AF381B386AD93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIODnJrlJo1xMsrGk7we7nHkFNM.roa
Signing time: Tue 01 Nov 2022 08:18:18 +0000
ROA not before: Tue 01 Nov 2022 08:18:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:45:13:0f:10:cf:35:df:d1:8a:f3:81:b3:86:ad:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 1 08:18:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5083839c9ae5268d7132cac693bc1eee71e414d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:c8:bd:db:1a:67:d6:e3:0e:b3:dc:22:32:
6f:84:86:66:18:8d:d8:05:fb:bc:07:f5:62:1c:58:
df:c5:ab:25:c1:59:e5:19:c0:d3:e2:e8:68:59:77:
61:22:48:62:c4:a8:d8:d6:7b:69:93:80:6a:a3:53:
9d:8a:b7:92:5d:62:69:b4:c8:9a:46:0f:04:ec:24:
9c:5b:0a:b0:cf:94:f8:c5:ee:60:82:3e:ac:08:2a:
e5:34:7c:3f:3a:f9:0e:4f:bd:cf:bd:45:cd:16:f2:
71:86:d4:cc:80:b4:f9:e8:b4:89:60:7c:0c:df:2d:
63:7f:b6:d1:f2:8c:ea:78:33:79:78:ce:b4:52:65:
4a:fa:3b:86:d3:c8:a4:75:7a:6a:9a:d7:b4:ab:54:
b8:9d:fd:08:ab:35:ec:69:a0:c7:9e:88:c3:85:eb:
32:7a:b4:59:44:14:b2:bd:3c:dc:6f:2f:8b:20:64:
d4:1d:f0:d4:f0:0a:81:31:9e:8a:70:af:1a:25:fa:
62:96:54:ee:e8:53:19:be:08:08:1f:67:4a:b5:78:
81:02:8a:74:fb:a1:4b:f7:52:65:27:e1:87:fd:29:
b8:dd:d0:fb:56:5d:20:3b:7f:f4:71:2e:5c:42:40:
de:3e:45:51:3f:f4:ae:33:11:70:c2:d8:27:da:d6:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:83:83:9C:9A:E5:26:8D:71:32:CA:C6:93:BC:1E:EE:71:E4:14:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIODnJrlJo1xMsrGk7we7nHkFNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:0d:7d:b6:f9:16:bc:0c:b4:61:15:a2:1f:a1:25:db:69:09:
63:51:e4:9f:23:99:99:58:eb:63:1c:12:42:e9:1e:a8:da:37:
68:02:26:6b:c9:eb:73:4e:3b:c5:e5:52:0e:a8:cb:87:32:d1:
31:c9:44:72:ec:de:e5:53:d3:22:19:b1:28:17:17:0e:29:a3:
e4:16:7f:f8:9b:b6:08:58:04:09:2d:7e:26:f3:e5:7b:fa:b6:
27:eb:ef:62:86:50:2b:86:e2:3b:e9:97:b3:c9:c8:75:95:26:
95:05:59:bd:63:e0:34:4f:30:d4:bc:dd:ac:69:af:3e:55:53:
b6:0b:82:0c:cb:8e:56:e5:e6:b2:5b:e2:3e:70:e4:b4:38:55:
22:47:85:4b:43:d2:3b:3c:ef:a3:00:46:de:4f:b4:40:8a:c9:
98:58:a8:5c:33:3f:2b:fc:40:04:e7:05:e2:06:56:80:0b:ef:
85:7b:31:b2:c7:80:22:94:0f:3a:35:24:1c:a1:37:ee:bf:0c:
17:4b:ba:be:1a:91:fa:fd:58:e1:4b:3a:f4:0f:c5:82:4e:19:
0b:a9:80:ec:f9:da:3b:a7:f1:52:66:c6:17:cd:31:0f:cb:33:
dc:76:e2:9c:0f:ee:3e:d0:69:be:a9:b8:a4:a7:13:4a:50:dc:
12:7b:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:11 2025 by rpki-client