Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UOVRWjMH8gUKRegDG7pSDcVvFO4.roa
File: UOVRWjMH8gUKRegDG7pSDcVvFO4.roa (raw, json)
Hash identifier: snRuO/kjzSZjjp73MmYGDUKbbDAXlaRZk8iuMYHXvLs=
Subject key identifier: 50:E5:51:5A:33:07:F2:05:0A:45:E8:03:1B:BA:52:0D:C5:6F:14:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EA90ABB6098D0AA15273C6751DD5095C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UOVRWjMH8gUKRegDG7pSDcVvFO4.roa
Signing time: Wed 07 Dec 2022 03:11:00 +0000
ROA not before: Wed 07 Dec 2022 03:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ea:90:ab:b6:09:8d:0a:a1:52:73:c6:75:1d:d5:09:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 03:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50e5515a3307f2050a45e8031bba520dc56f14ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:a1:21:21:ee:e6:74:1d:49:f6:45:8a:2d:
ce:c2:9e:ec:0b:22:3d:21:35:54:99:7b:02:74:76:
71:06:c8:c0:3d:27:5b:03:ab:79:67:da:8c:2b:d2:
e1:70:29:0e:80:31:3a:dc:e2:21:0d:1b:b2:57:c4:
d5:b0:e8:6a:4d:79:ee:26:3d:8d:e8:4e:cb:75:12:
dc:1a:d7:c0:93:03:f8:d7:97:42:c7:36:23:75:e1:
a8:59:47:c4:98:12:a4:7e:2d:14:06:d3:14:34:5d:
bd:a1:4a:dc:0a:fa:c3:61:5b:e2:ea:aa:79:69:39:
5c:88:76:2d:f6:9e:0d:92:98:20:5d:f5:55:1d:fd:
3b:d9:59:d4:f9:f1:5f:87:5a:e1:95:33:e8:22:07:
a8:9d:7f:92:1a:73:ee:89:ef:2b:81:ca:90:56:ab:
39:57:84:58:fb:bd:4b:44:92:0b:de:ab:94:4a:7a:
16:3f:23:fb:d7:39:cd:37:05:ee:32:6a:47:aa:bd:
86:2d:42:37:13:3f:85:23:71:8c:81:e3:d9:57:68:
b3:74:94:d6:2a:dd:58:72:44:c0:4b:84:84:fe:bf:
62:a3:96:c1:c0:42:ef:2e:d6:3c:a3:05:05:c3:fb:
c1:01:09:1d:eb:20:67:11:10:54:2b:96:32:6a:da:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E5:51:5A:33:07:F2:05:0A:45:E8:03:1B:BA:52:0D:C5:6F:14:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UOVRWjMH8gUKRegDG7pSDcVvFO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:4c:66:ee:f6:74:09:3f:f7:f1:05:ef:43:81:82:55:6d:40:
88:69:17:23:e0:83:d7:8b:bb:58:1e:09:9a:90:46:75:e0:25:
6c:ba:8b:e8:8f:3e:8e:cf:61:71:a2:df:95:e8:b6:a9:0d:a4:
89:18:01:ae:34:be:05:00:6b:52:42:a2:cd:03:48:ba:e6:fc:
f1:eb:03:c4:7a:11:95:76:ba:c7:b2:ec:20:9c:92:db:01:33:
09:95:ee:0a:73:22:f6:1b:78:16:bf:d4:df:2b:b6:2a:a3:f8:
c2:9d:a6:01:6a:5a:04:c4:fa:96:46:bb:32:30:b0:13:9d:2b:
5f:a4:fc:e7:c0:70:0f:cd:2e:fe:5a:2c:08:c5:0c:6b:8c:3e:
05:6b:6c:3c:be:86:5e:97:a0:23:c2:c7:a7:8a:ea:ab:03:20:
1b:7a:76:15:f5:b7:47:0e:61:97:92:a9:95:19:3d:47:f1:e1:
57:d3:75:84:71:69:e0:e8:02:47:66:f8:13:c0:3a:e8:ec:8c:
a7:d4:2a:c6:94:4a:33:ae:47:fc:fb:87:19:ea:5e:8e:b8:48:
6a:c6:5f:b5:87:51:f1:1c:8c:4b:fd:45:88:b4:55:9c:37:1d:
80:29:57:f9:6e:7b:fb:73:63:40:40:6f:7d:76:0d:c0:ae:f9:
27:18:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:33:33 2025 by rpki-client