Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULxiAAtZFlnSECxQqatGVn-YgbY.roa
File: ULxiAAtZFlnSECxQqatGVn-YgbY.roa (raw, json)
Hash identifier: BxLRXPxRbmE3lQbAGnDsugiyp6hD/QmAedehGpORwmA=
Subject key identifier: 50:BC:62:00:0B:59:16:59:D2:10:2C:50:A9:AB:46:56:7F:98:81:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185590CB08C1669E1F0AE784CB0FFB95928
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULxiAAtZFlnSECxQqatGVn-YgbY.roa
Signing time: Wed 28 Dec 2022 14:04:41 +0000
ROA not before: Wed 28 Dec 2022 14:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:590c:487d/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:0c:b0:8c:16:69:e1:f0:ae:78:4c:b0:ff:b9:59:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 14:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50bc62000b591659d2102c50a9ab46567f9881b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:f8:51:5d:17:6f:5d:62:85:4e:5e:0a:04:
8f:e0:c0:86:0f:00:2d:73:3b:17:14:d8:3b:5b:70:
e2:0c:a3:b9:f3:e7:90:97:9a:91:8f:41:c8:b7:bb:
bb:65:52:23:c4:d7:bb:4a:85:59:81:27:a6:b0:1f:
45:5a:24:e6:9f:76:da:a3:bd:74:65:e3:a8:10:76:
ca:75:00:26:23:96:f4:47:c7:fb:42:a8:bf:32:8a:
2c:f2:4d:bf:6b:91:4a:57:62:50:92:9b:8c:02:d2:
be:35:5d:8d:05:24:14:29:04:35:71:9d:00:de:40:
26:0f:a3:09:7a:c0:c2:64:12:6a:ec:bf:c5:3f:ea:
ab:22:24:9e:91:e7:59:59:c1:79:70:47:4c:c9:b0:
4e:ec:c3:05:0d:b5:88:11:fd:55:33:80:02:b3:73:
38:f9:c2:bb:b0:dd:96:52:c9:4d:11:23:2c:c8:74:
46:c0:7a:f9:e7:1a:a0:48:fc:3b:e9:75:42:1f:4d:
9a:02:eb:f4:18:92:a8:b0:50:1c:1f:33:13:2c:f5:
94:78:01:75:a0:1f:d3:73:ab:68:5a:e7:30:2b:6f:
1c:7c:7b:4e:40:7b:44:d1:80:65:c6:81:96:31:85:
9d:6d:00:dc:41:f5:7f:66:c8:b3:9b:d3:08:a2:8e:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:62:00:0B:59:16:59:D2:10:2C:50:A9:AB:46:56:7F:98:81:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULxiAAtZFlnSECxQqatGVn-YgbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:c1:ea:58:99:01:1b:3e:18:05:75:2d:04:94:85:2b:e1:b8:
14:96:05:2f:85:0a:5e:02:31:11:88:9e:b3:79:2e:d3:fd:12:
c6:d3:14:bc:02:54:08:2a:7b:c0:80:d5:d1:5a:a7:71:72:22:
b2:58:e3:62:9a:c0:16:11:18:62:2a:d7:6b:d6:a9:4c:43:0a:
b6:39:a7:6c:d4:33:85:1a:65:c8:4e:bb:d5:3c:c2:38:6f:09:
e8:80:98:2c:16:2a:70:0a:43:c8:b9:27:b8:04:57:9e:da:85:
34:ef:ea:4a:93:37:3d:e6:02:9a:51:ac:60:cc:c9:34:3d:90:
fc:54:40:69:ab:bd:eb:25:b4:af:68:01:7d:61:b9:25:76:f6:
5e:c4:75:b8:ab:e7:16:cd:3b:96:3b:6e:97:95:1f:1f:87:f6:
60:08:30:b2:d0:e7:3e:5d:0c:f7:d3:1f:4f:0e:2c:b7:a0:95:
0f:73:34:67:73:83:eb:6f:c2:be:ab:be:68:8a:95:fa:e7:7e:
51:1d:e1:2d:6e:8f:d1:92:d1:c6:61:a5:70:a3:6f:35:fb:25:
d8:13:ba:9c:2d:4a:c9:f0:02:66:ba:bc:3d:6e:63:42:1f:61:
96:32:2f:a7:c3:08:6a:00:7e:ff:5d:59:01:a3:c0:f3:f5:25:
23:11:89:d1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVZDLCMFmnh8K54TLD/uVkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI4MTQwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGJjNjIwMDBiNTkxNjU5ZDIxMDJjNTBhOWFiNDY1NjdmOTg4MWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHH4UV0Xb11ihU5eCgSP4MCGDwAt
czsXFNg7W3DiDKO58+eQl5qRj0HIt7u7ZVIjxNe7SoVZgSemsB9FWiTmn3bao710
ZeOoEHbKdQAmI5b0R8f7Qqi/Moos8k2/a5FKV2JQkpuMAtK+NV2NBSQUKQQ1cZ0A
3kAmD6MJesDCZBJq7L/FP+qrIiSekedZWcF5cEdMybBO7MMFDbWIEf1VM4ACs3M4
+cK7sN2WUslNESMsyHRGwHr55xqgSPw76XVCH02aAuv0GJKosFAcHzMTLPWUeAF1
oB/Tc6toWucwK28cfHtOQHtE0YBlxoGWMYWdbQDcQfV/Zsizm9MIoo6FawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFC8YgALWRZZ0hAsUKmrRlZ/mIG2MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVUx4aUFBdFpGbG5TRUN4UXFhdEdWbi1ZZ2JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAITB6liZARs+GAV1LQSU
hSvhuBSWBS+FCl4CMRGInrN5LtP9EsbTFLwCVAgqe8CA1dFap3FyIrJY42KawBYR
GGIq12vWqUxDCrY5p2zUM4UaZchOu9U8wjhvCeiAmCwWKnAKQ8i5J7gEV57ahTTv
6kqTNz3mAppRrGDMyTQ9kPxUQGmrvesltK9oAX1huSV29l7Edbir5xbNO5Y7bpeV
Hx+H9mAIMLLQ5z5dDPfTH08OLLeglQ9zNGdzg+tvwr6rvmiKlfrnflEd4S1uj9GS
0cZhpXCjbzX7JdgTupwtSsnwAma6vD1uY0IfYZYyL6fDCGoAfv9dWQGjwPP1JSMR
idE=
-----END CERTIFICATE-----
Generated at Sat May 3 19:09:11 2025 by rpki-client