Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UPv_TSnxJzPXgS00ou_dNBUeoi8.roa
File: UPv_TSnxJzPXgS00ou_dNBUeoi8.roa (raw, json)
Hash identifier: qgH0wdFAzRWAxqK4H8uWFcWoOHT5PuvY6i7CxHE2nNg=
Subject key identifier: 50:FB:FF:4D:29:F1:27:33:D7:81:2D:34:A2:EF:DD:34:15:1E:A2:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 87BBA0A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UPv_TSnxJzPXgS00ou_dNBUeoi8.roa
Signing time: Fri 27 May 2022 21:10:13 +0000
ROA not before: Fri 27 May 2022 21:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277220516 (0x87bba0a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 21:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50fbff4d29f12733d7812d34a2efdd34151ea22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:90:78:71:62:20:ac:88:34:0c:f8:69:38:
14:76:8e:b3:8c:17:b2:46:c6:5f:28:e2:c0:b5:4b:
bc:5a:b9:02:6d:f8:46:42:14:a7:82:a3:09:68:f8:
8c:f6:28:83:88:c6:b8:36:23:5a:be:19:75:54:31:
c8:b3:ed:b0:ba:26:d9:b2:66:a7:f6:ea:bc:f9:90:
f0:59:88:58:19:a9:27:8c:7b:11:44:9b:46:ae:19:
33:a7:39:28:00:18:76:b2:f7:5b:d5:cf:b7:9e:8a:
7b:15:4b:d7:52:79:2a:0a:07:3e:d8:b7:e2:52:c0:
de:e0:10:0e:f7:d0:52:53:d1:e4:ed:4d:ce:d6:d5:
72:c8:20:62:85:59:d1:d4:f8:c6:8e:71:d4:3d:7e:
25:53:ab:fa:e9:de:7c:ce:b6:39:5c:f5:55:1f:57:
e5:26:07:c6:f5:14:15:12:94:b3:34:65:bf:98:2f:
df:bf:e5:5e:18:ee:72:ed:4b:57:d7:a4:0c:82:85:
f5:4d:b2:82:f6:e9:33:32:7e:7f:16:32:35:14:29:
fd:f3:17:16:1e:d6:b0:b6:5a:68:66:53:93:60:e5:
90:b4:1c:76:66:49:eb:53:c1:77:91:cb:21:24:93:
50:ea:30:fc:0e:23:fb:4c:71:95:51:40:d9:53:c4:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FB:FF:4D:29:F1:27:33:D7:81:2D:34:A2:EF:DD:34:15:1E:A2:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UPv_TSnxJzPXgS00ou_dNBUeoi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:8c:91:63:cd:c1:f4:1d:06:82:15:ed:ad:97:ee:cc:62:ba:
e5:7f:92:32:b2:c7:8c:c7:2f:b9:7e:d6:f9:ac:c5:25:32:43:
2f:9b:ef:fe:78:d1:0c:b9:86:4f:49:53:97:e8:06:6d:ed:32:
c1:da:b7:04:cc:16:9b:a7:27:44:1b:61:3c:64:e3:61:45:36:
78:19:2f:a0:0b:49:b0:da:2f:1f:41:f2:fa:d3:ce:65:8e:6a:
07:72:6a:e1:28:0d:1e:b2:ce:16:63:4f:39:a1:3b:48:86:50:
0c:f1:6b:fb:d7:a9:84:a0:1f:4f:d2:ab:a9:cf:d2:9a:3a:b7:
c9:64:61:e3:66:a7:d9:f7:55:55:94:e6:d8:cf:a2:19:8d:fd:
90:d4:ec:bb:65:f6:1a:e9:54:9c:82:24:aa:2c:a4:bb:34:d9:
f6:ef:ac:2b:61:1b:2e:c1:6c:a9:f9:5d:5c:30:9e:f8:5e:1f:
a1:06:41:f2:66:9f:8b:e3:78:d3:f3:b1:70:bb:4e:fe:42:f3:
9d:71:9c:35:6f:16:d2:79:ca:06:cc:aa:97:da:33:30:59:14:
cc:35:0d:f0:13:d0:dc:62:9c:9c:ee:bc:29:72:da:0f:22:14:
77:e1:4b:f1:84:52:ab:23:d5:f1:be:c5:e9:ac:fd:c3:54:39:
ed:df:6f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:48:58 2025 by rpki-client