Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIzVZADY_l9AoFLfBAFWeO7Q5mQ.roa
File: UIzVZADY_l9AoFLfBAFWeO7Q5mQ.roa (raw, json)
Hash identifier: 15hbsXvYgsutCpWJMq5X8IUthykUV/q7IrSyHHeotJk=
Subject key identifier: 50:8C:D5:64:00:D8:FE:5F:40:A0:52:DF:04:01:56:78:EE:D0:E6:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185368B6698B8B0F0D8FCEFE9EEFA8ABF10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIzVZADY_l9AoFLfBAFWeO7Q5mQ.roa
Signing time: Wed 21 Dec 2022 21:16:23 +0000
ROA not before: Wed 21 Dec 2022 21:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:8b:66:98:b8:b0:f0:d8:fc:ef:e9:ee:fa:8a:bf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 21:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=508cd56400d8fe5f40a052df04015678eed0e664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:b1:36:be:26:ac:0e:78:1f:91:f4:93:7b:
0e:7e:c8:62:55:c1:33:70:36:87:0c:1a:e5:a7:13:
c3:86:7a:9b:ff:dc:48:c3:16:50:d2:ae:0e:86:79:
18:d1:f0:f5:99:ff:de:83:da:f5:7b:98:d2:30:20:
a3:2e:3f:21:05:61:ae:fb:34:c6:be:c3:f1:03:e5:
f7:16:16:32:48:13:6d:3d:2b:82:49:43:10:fe:a2:
3a:bb:09:bb:32:fd:ef:80:54:ec:79:6f:94:1e:79:
e9:be:da:ac:3c:04:a9:9b:20:4c:b9:9c:1c:de:fb:
9b:c9:02:4a:eb:08:ab:36:36:44:ed:a9:a0:5c:af:
d1:6e:94:78:3c:ef:4c:a1:ae:94:20:5f:23:f3:5b:
f7:08:f1:8c:67:8f:75:86:7a:ea:ff:6f:98:7f:ff:
9b:c3:60:c2:f7:ed:25:a3:09:b6:64:88:2e:1e:e0:
8b:54:8d:02:da:49:c8:b6:40:84:48:93:b8:58:fe:
4b:d7:62:c9:8d:db:04:6a:26:02:49:d8:54:47:43:
4a:23:24:9c:7f:56:26:95:42:a7:14:05:7e:95:7f:
43:0f:24:5b:2a:ce:73:34:76:66:5a:7e:c4:c2:90:
16:fd:77:f1:b1:df:53:33:7f:70:eb:20:91:08:df:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:D5:64:00:D8:FE:5F:40:A0:52:DF:04:01:56:78:EE:D0:E6:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UIzVZADY_l9AoFLfBAFWeO7Q5mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:70:fe:11:28:55:8e:b5:48:63:b2:7c:a7:ae:c9:f8:f0:53:
7f:26:f4:ab:5f:4d:1d:91:e2:96:14:65:82:67:a7:8b:28:1b:
9b:9a:52:21:3c:70:52:b1:57:21:05:4e:65:81:0b:81:a8:db:
e8:81:03:3f:1e:90:b6:19:07:e9:77:c8:a5:54:32:4c:b4:88:
f9:0e:40:5e:44:18:dc:8a:0e:e4:56:eb:f9:a6:12:41:01:17:
d6:b0:78:5c:7a:31:45:4f:e9:6f:e1:0f:aa:cf:ec:d9:c5:bd:
9c:cd:8b:b0:6e:4a:79:fb:f2:d4:f3:d4:89:79:c6:92:97:04:
30:0e:9c:1a:51:68:80:76:91:af:6d:f7:1b:86:6f:de:36:08:
b6:2c:8f:c2:e9:05:52:ef:08:d9:f2:a2:c9:44:1b:46:2d:a6:
33:8d:22:a4:1e:8c:56:1d:17:94:16:88:43:20:95:d7:56:bd:
4c:d9:eb:a8:22:93:ca:d3:09:ff:ad:42:4e:34:b1:82:77:b9:
2f:f0:ab:8c:ab:be:c4:9c:a6:09:fc:4a:71:1b:1c:28:8c:56:
ba:36:59:bc:97:11:fa:67:49:9f:81:44:94:9a:aa:af:0c:2e:
b3:6f:82:c2:24:44:41:89:8a:b5:3a:14:fc:0e:b4:ec:8f:07:
1f:a2:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:15:07 2025 by rpki-client