Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UVulheoqX2-qHJA21h8HJw7fpcc.roa
File: UVulheoqX2-qHJA21h8HJw7fpcc.roa (raw, json)
Hash identifier: 9+oeiaC9r4JD6mWXdt/FftnAWYf5Rzu9xzcO0X8z+SQ=
Subject key identifier: 51:5B:A5:85:EA:2A:5F:6F:AA:1C:90:36:D6:1F:07:27:0E:DF:A5:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A1CCEA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UVulheoqX2-qHJA21h8HJw7fpcc.roa
Signing time: Sun 13 Feb 2022 01:08:32 +0000
ROA not before: Sun 13 Feb 2022 01:08:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780272803 (0x6a1ccea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 01:08:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=515ba585ea2a5f6faa1c9036d61f07270edfa5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:e8:14:36:92:36:a2:ed:a2:80:f3:5e:71:
64:8d:e5:b4:fd:63:d5:e5:87:50:50:99:1c:aa:07:
57:fc:48:a2:a9:93:86:f7:03:41:73:a3:93:f8:70:
b5:bb:07:8d:00:e4:e9:4a:f1:8d:37:4b:e2:48:ec:
04:ac:16:e7:b7:c4:c6:cf:c6:d4:c6:1c:c3:86:29:
d0:b2:d9:b2:4f:59:b2:26:7b:b6:3f:db:45:e6:b9:
80:fa:91:17:8a:01:2e:04:dd:74:6e:70:0d:29:bc:
c5:7b:3b:38:7a:eb:7e:33:23:fb:56:6b:0b:dc:2c:
a4:76:92:b8:88:a9:00:d7:64:e5:06:f3:7c:11:3a:
9a:8e:9d:8d:e8:7c:00:c0:c3:ac:9d:14:f3:9d:71:
10:b9:42:a4:d2:8c:f2:39:a8:72:ad:1c:a8:c8:7d:
b2:5e:57:b2:c7:92:a9:40:e6:d0:be:b2:f7:a7:0f:
63:34:06:8c:15:89:5b:a0:3c:99:cd:2f:53:8e:88:
c8:cf:9b:91:11:03:e4:70:06:30:21:5c:ad:65:52:
03:28:ce:55:f1:97:88:f6:cb:a5:16:17:16:2f:0c:
98:d1:5d:44:e8:df:2e:c0:7d:25:1e:4e:2a:f4:81:
9f:ba:00:1e:1c:99:3f:5e:42:f9:cd:41:30:6a:eb:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5B:A5:85:EA:2A:5F:6F:AA:1C:90:36:D6:1F:07:27:0E:DF:A5:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UVulheoqX2-qHJA21h8HJw7fpcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:97:08:06:91:66:ae:23:b1:8e:f9:3c:4e:40:8c:ea:84:52:
27:b9:b9:ee:4a:cf:f7:f0:ae:9c:bd:70:a6:8b:8c:1b:55:6a:
ae:f8:b4:36:67:f1:2a:2c:0b:b4:3b:fc:06:45:0f:36:01:7b:
01:6b:1e:7e:99:81:39:9e:86:5b:b5:7b:21:82:04:45:17:dd:
09:34:7e:77:3b:c5:a8:7e:b4:50:63:17:6b:cf:c5:1b:9b:16:
eb:29:7e:8e:28:17:7b:22:2e:99:16:8d:de:37:00:ef:3a:a0:
5f:6b:5b:a0:1c:4d:9e:54:cd:dc:08:a4:26:3d:e3:ef:55:5c:
48:4d:08:fe:7d:98:43:9c:35:c4:29:33:e9:d2:92:7c:4c:58:
ca:85:e8:77:43:d3:86:09:ce:fb:80:7a:aa:d3:e8:e8:19:d7:
a4:d9:dc:ba:fb:a0:d6:cb:0f:53:73:1f:88:d2:66:cb:a3:a0:
4e:45:97:d5:23:1e:c0:f0:67:87:64:09:96:93:45:42:65:99:
46:73:53:bd:0f:c0:ab:42:1f:f8:56:63:df:9b:99:89:c5:88:
8a:74:a1:45:e4:86:5e:20:a8:46:cf:6a:fa:e6:fb:5b:fa:8c:
ee:ed:55:fb:99:f5:55:84:c8:e4:6f:a1:91:1d:c3:d1:06:1a:
e9:af:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:32:00 2025 by rpki-client