Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UPTCNu48yVzXXlL2-sXrYm6BRZY.roa
File: UPTCNu48yVzXXlL2-sXrYm6BRZY.roa (raw, json)
Hash identifier: FqbhWrefeEKShz35TuFFxWfxNvIEtDyUn6AZqE6iwZY=
Subject key identifier: 50:F4:C2:36:EE:3C:C9:5C:D7:5E:52:F6:FA:C5:EB:62:6E:81:45:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E719E60
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UPTCNu48yVzXXlL2-sXrYm6BRZY.roa
Signing time: Mon 28 Feb 2022 11:13:48 +0000
ROA not before: Mon 28 Feb 2022 11:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852939872 (0x6e719e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 11:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50f4c236ee3cc95cd75e52f6fac5eb626e814596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:61:6c:82:2c:56:ec:dc:3b:4a:d2:1a:24:
ec:04:71:7b:69:1d:23:05:9c:d0:56:2e:a0:32:e1:
70:dc:53:2d:d9:19:75:fc:a6:19:45:6c:31:56:f6:
fb:c7:49:ae:5c:c1:f7:9a:5b:00:4b:5b:aa:4f:3a:
de:f9:a6:f8:12:31:a1:ee:97:52:a7:e2:ed:67:1a:
38:8a:64:88:98:dd:e6:b8:c2:81:7f:3b:99:ae:0a:
61:b6:f8:df:ab:8d:ce:f3:ff:ad:64:67:47:55:a5:
c9:61:38:9a:6b:e7:77:ee:aa:cb:23:ae:40:97:2f:
ff:08:2c:d6:08:3a:f0:5f:59:c9:88:8d:39:ee:7a:
a6:6a:52:89:84:b4:50:d7:63:73:b1:3d:33:de:dc:
4d:39:e3:4b:f8:f9:ab:7e:19:37:ba:b9:1b:fb:a5:
de:a3:e2:d2:91:28:be:19:3d:2b:40:36:a7:fc:bb:
f9:51:99:e8:fa:d8:24:5a:51:e2:98:47:ec:ef:6e:
cf:79:28:ef:9f:f1:58:25:3c:79:38:ef:1e:f5:f7:
2b:3e:0a:e2:81:69:6b:89:e1:7d:7b:db:ce:84:0f:
e7:b0:6f:74:40:47:14:8c:7e:3e:b6:26:03:e8:a9:
fc:0c:bd:df:1c:7c:92:c4:5b:18:25:7d:b7:a5:8a:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F4:C2:36:EE:3C:C9:5C:D7:5E:52:F6:FA:C5:EB:62:6E:81:45:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UPTCNu48yVzXXlL2-sXrYm6BRZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:1a:7f:3b:cb:46:47:a5:6f:88:8d:40:e2:a2:e6:fb:be:54:
76:1b:f4:76:1c:f6:e4:7d:aa:4d:bf:1e:16:b1:c2:c6:b6:bc:
eb:6b:66:67:a3:af:eb:fa:42:3d:07:64:cd:f9:f9:51:71:d1:
0d:6c:68:94:a5:aa:24:a7:f0:20:5d:a9:34:83:41:f0:6d:9b:
c1:d2:32:04:55:ec:2f:b2:50:02:38:93:a2:b3:21:a8:cf:9d:
b8:a1:21:32:f8:5c:4d:d5:eb:3c:6a:ba:c7:13:d1:bd:a8:38:
f3:a3:a8:58:3b:d7:b1:c9:9a:53:cd:63:83:43:47:67:7d:dd:
7e:37:39:22:f9:14:69:e7:6b:57:51:d5:ce:74:a4:b6:8d:a5:
31:33:8a:1f:57:1d:91:39:08:52:6f:a3:af:11:42:8e:7c:8d:
22:44:d5:e4:1d:62:5c:c9:50:67:e5:e4:b1:63:5e:8e:e2:e5:
76:5f:ce:ef:63:16:aa:63:f0:b4:3a:d3:95:69:f3:6a:7a:96:
eb:f1:ec:13:74:28:43:48:b6:64:dd:01:37:f3:c6:38:51:3b:
33:9c:33:ae:86:ec:43:da:9b:69:d4:b8:80:0c:44:d3:09:a7:
dd:0c:86:11:ca:df:54:9e:0d:3d:4f:d3:1d:37:01:23:6b:72:
9a:38:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:57:09 2025 by rpki-client