Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UJf0JzBx32OmJ46cti9dGbojT2w.roa
File: UJf0JzBx32OmJ46cti9dGbojT2w.roa (raw, json)
Hash identifier: YaXgY5ZDJzue6lysgPJjs5/SkbtWocomAfEn1nMepbk=
Subject key identifier: 50:97:F4:27:30:71:DF:63:A6:27:8E:9C:B6:2F:5D:19:BA:23:4F:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81E20468
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UJf0JzBx32OmJ46cti9dGbojT2w.roa
Signing time: Sat 07 May 2022 08:04:35 +0000
ROA not before: Sat 07 May 2022 08:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:9d8c:89ee/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179073128 (0x81e20468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 08:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5097f4273071df63a6278e9cb62f5d19ba234f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:13:7f:29:aa:80:75:b2:8c:35:03:d5:bb:
d0:28:3d:ee:82:b4:fa:22:8d:76:b7:c2:de:f1:b9:
b5:85:1e:38:b9:ae:fe:88:35:0a:79:91:67:75:73:
6a:3c:d0:bc:f0:51:cb:9e:5a:c8:66:c3:1a:d3:f1:
c5:40:c6:13:0b:e1:ac:75:f4:ae:a7:98:f6:4b:c6:
b1:5c:9d:57:e3:39:b1:0e:ed:64:a0:73:ad:24:40:
9c:ba:06:db:91:21:04:d8:cc:a4:db:7a:a5:b8:99:
40:be:36:d8:ae:19:be:86:0c:68:6f:2c:b1:d1:ef:
e5:78:52:71:ec:5d:94:c8:e9:3f:df:e0:e9:54:c1:
52:5e:50:f4:4c:3a:bd:9c:0a:e9:b3:32:a8:f4:ad:
46:ac:d7:fe:07:9c:ee:7e:e0:04:11:78:9e:d4:9d:
9c:13:7a:29:ca:eb:70:14:69:1b:08:17:77:8b:91:
91:f2:3a:f3:83:6e:99:cd:d5:c5:69:b2:eb:60:8f:
32:78:60:44:a3:dc:3f:67:59:df:98:c2:e7:45:20:
7d:99:71:ec:63:da:e7:1f:78:b6:e0:b8:ce:5c:49:
ee:28:3a:e4:45:cc:1e:5f:6e:da:73:bb:6b:f4:20:
7a:8b:70:2f:7e:54:22:d5:b7:7b:3a:ac:f7:1d:51:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:97:F4:27:30:71:DF:63:A6:27:8E:9C:B6:2F:5D:19:BA:23:4F:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UJf0JzBx32OmJ46cti9dGbojT2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:8f:0d:24:9a:e8:70:5c:c9:09:64:d4:d2:4b:a4:a0:21:4c:
09:54:aa:23:e5:e3:40:9c:1f:41:a8:19:85:8e:c0:19:8f:d4:
74:10:4d:ba:a0:58:78:c3:dc:9a:ee:14:ce:cf:91:13:08:24:
2b:78:87:36:ab:c4:83:e2:5c:fe:c9:35:04:38:f1:bd:68:f1:
df:dc:09:f3:0e:bf:d7:e0:30:6d:7a:ad:17:dc:f3:59:d9:4c:
6a:8b:2d:df:f6:8c:b7:6c:17:71:71:25:e7:9a:27:4b:b0:47:
b0:31:f2:9d:57:7b:82:58:db:f4:f6:74:19:37:b4:7b:22:3e:
06:ab:c6:89:e7:a7:cf:cb:c5:4a:39:e5:bd:62:0d:88:90:cb:
b2:88:72:61:b7:fd:7b:6b:91:2e:72:33:ce:d9:56:5a:11:7e:
80:9d:cc:62:e2:ef:be:73:0a:c2:2e:36:19:00:3b:fd:a8:59:
c3:85:60:0e:9a:b0:69:56:ca:55:d0:f4:fd:62:85:23:35:01:
77:aa:c5:fb:89:64:78:28:55:dd:a8:78:83:b6:b9:30:3b:1d:
28:d2:4a:eb:91:1c:d0:d2:5e:ec:bf:cb:83:01:f4:f6:d4:28:
2d:2c:d8:ca:64:a4:39:ae:88:19:1d:3c:2e:df:95:58:7f:44:
ed:d0:c9:e3
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIHiBGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDcwODA0MzVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDUwOTdmNDI3MzA3
MWRmNjNhNjI3OGU5Y2I2MmY1ZDE5YmEyMzRmNmMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0rhN/KaqAdbKMNQPVu9AoPe6CtPoijXa3wt7xubWFHji5
rv6INQp5kWd1c2o80LzwUcueWshmwxrT8cVAxhML4ax19K6nmPZLxrFcnVfjObEO
7WSgc60kQJy6BtuRIQTYzKTbeqW4mUC+NtiuGb6GDGhvLLHR7+V4UnHsXZTI6T/f
4OlUwVJeUPRMOr2cCumzMqj0rUas1/4HnO5+4AQReJ7UnZwTeinK63AUaRsIF3eL
kZHyOvODbpnN1cVpsutgjzJ4YESj3D9nWd+YwudFIH2Zcexj2ucfeLbguM5cSe4o
OuRFzB5fbtpzu2v0IHqLcC9+VCLVt3s6rPcdUUJXAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUUJf0JzBx32OmJ46cti9dGbojT2wwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9VSmYwSnpCeDMyT21KNDZjdGk5ZEdib2pUMncucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAVI8NJJrocFzJCWTU0kukoCFMCVSqI+XjQJwf
QagZhY7AGY/UdBBNuqBYeMPcmu4Uzs+REwgkK3iHNqvEg+Jc/sk1BDjxvWjx39wJ
8w6/1+AwbXqtF9zzWdlMaost3/aMt2wXcXEl55onS7BHsDHynVd7gljb9PZ0GTe0
eyI+BqvGieenz8vFSjnlvWINiJDLsohyYbf9e2uRLnIzztlWWhF+gJ3MYuLvvnMK
wi42GQA7/ahZw4VgDpqwaVbKVdD0/WKFIzUBd6rF+4lkeChV3ah4g7a5MDsdKNJK
65Ec0NJe7L/LgwH09tQoLSzYymSkOa6IGR08Lt+VWH9E7dDJ4w==
-----END CERTIFICATE-----
Generated at Thu May 1 14:27:13 2025 by rpki-client