Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UQl0M2pjeq1q3WgMdaqyDPcjHWw.roa
File: UQl0M2pjeq1q3WgMdaqyDPcjHWw.roa (raw, json)
Hash identifier: gF84HbPfCJJqabLWKBBMyIH+8YQcn3bb7nbhZDm9bSc=
Subject key identifier: 51:09:74:33:6A:63:7A:AD:6A:DD:68:0C:75:AA:B2:0C:F7:23:1D:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B6B548A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UQl0M2pjeq1q3WgMdaqyDPcjHWw.roa
Signing time: Fri 15 Apr 2022 06:10:26 +0000
ROA not before: Fri 15 Apr 2022 06:10:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070631562 (0x7b6b548a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 06:10:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=510974336a637aad6add680c75aab20cf7231d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:64:6e:3d:3d:7b:aa:f0:08:9a:60:f3:81:
5b:6f:1d:ff:e0:50:93:56:91:2d:18:5a:66:a2:64:
e5:02:05:b1:12:9b:30:2b:86:b3:b5:ca:54:4c:e5:
aa:de:77:d1:11:8b:f3:f5:3a:53:55:44:4f:6c:d5:
3d:74:b1:25:bb:d3:4c:5a:40:94:9f:c7:6c:5e:f9:
ab:30:9f:95:9f:ab:a3:7b:c5:ef:aa:09:54:28:28:
ff:21:be:2b:33:28:52:e0:50:db:83:c8:94:9d:8e:
31:07:60:eb:ed:7e:12:a5:0a:f6:b4:ea:d0:67:6a:
29:88:ea:ff:b1:d3:2e:06:34:5f:cc:34:82:68:cb:
63:61:f5:67:94:7e:2c:cd:3b:bc:27:ef:cc:d8:37:
f1:99:1f:4f:8c:0b:ef:07:0f:73:b3:8a:86:5d:a0:
8b:fd:bc:48:d8:06:fd:49:48:45:49:df:0a:26:8a:
2e:37:ab:5c:c4:59:6e:78:ac:2d:f2:f0:5c:38:ce:
57:dc:ff:c8:81:6a:3e:0d:01:09:95:ca:a0:19:a3:
75:fb:e9:52:ad:29:ad:fc:95:43:42:ae:d0:b8:8b:
58:57:ab:c5:94:71:cb:ca:70:2e:ad:ce:0b:bf:37:
44:fe:6a:e1:cf:06:2b:e9:c1:55:8f:4b:92:1a:ca:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:74:33:6A:63:7A:AD:6A:DD:68:0C:75:AA:B2:0C:F7:23:1D:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UQl0M2pjeq1q3WgMdaqyDPcjHWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:64:68:18:24:bb:a3:08:1a:67:f8:94:a5:cb:5a:ec:2b:db:
94:a3:8e:ff:5c:f9:d1:c1:7f:0a:e1:5d:3c:c9:53:d6:60:3e:
be:95:25:59:21:f0:4b:df:95:f9:a8:ac:75:20:42:b2:67:96:
6e:c4:7c:bd:c0:bc:22:bd:d7:d3:45:a9:1b:8d:29:5d:ed:dc:
8c:19:78:de:cf:a0:a9:73:0a:d2:45:77:b4:3e:6a:2e:d3:fd:
b3:c3:99:ff:4c:f3:61:e6:b3:3f:ef:97:4a:f6:65:8c:fb:12:
ef:00:6f:d7:04:62:c4:9a:7e:cc:ff:09:07:d9:ec:2e:23:76:
51:2c:08:34:a2:1b:4e:28:f6:b7:85:cc:77:33:35:6e:5b:73:
7e:40:b9:ad:af:56:43:18:5b:fc:8a:c4:bd:52:fd:83:82:16:
ae:c9:70:5e:69:2d:3e:ce:14:65:3d:47:66:56:eb:ff:91:d6:
51:19:e2:5a:98:0f:42:1c:99:68:ab:87:32:a9:e5:67:ff:79:
a8:02:87:80:f3:54:1c:f0:26:18:53:ab:83:a0:f5:a2:73:17:
d4:65:3c:98:64:f1:68:cb:ad:f3:6f:43:c8:d6:88:f9:e7:24:
e3:b6:3d:90:a8:67:b4:db:9e:4d:35:96:6e:d8:41:2a:63:af:
8d:3c:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:07 2025 by rpki-client