Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UfooFEgeajBsJNV-8YlYKhOT0h4.roa
File: UfooFEgeajBsJNV-8YlYKhOT0h4.roa (raw, json)
Hash identifier: u9UYfAM/oPyaAgzblSYYcPZi2bbVedcL8OE34o8IZJc=
Subject key identifier: 51:FA:28:14:48:1E:6A:30:6C:24:D5:7E:F1:89:58:2A:13:93:D2:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F401A9E9A8A288BDBBE398EFB23116F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UfooFEgeajBsJNV-8YlYKhOT0h4.roa
Signing time: Thu 08 Dec 2022 23:11:00 +0000
ROA not before: Thu 08 Dec 2022 23:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f4:01:a9:e9:a8:a2:88:bd:bb:e3:98:ef:b2:31:16:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 23:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51fa2814481e6a306c24d57ef189582a1393d21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:b4:1e:e7:ab:5d:68:3b:4e:2a:e6:38:0f:
cb:f1:55:82:7c:2d:7e:70:0f:fa:f3:2c:42:ef:eb:
a2:b9:66:d7:34:7d:73:59:d7:ac:85:16:53:4d:72:
ae:cb:d9:0d:1b:1b:3e:6a:96:51:e2:ec:da:7c:10:
ec:80:14:b4:5d:7d:eb:c6:ab:1f:97:95:b2:7f:a2:
bc:93:f6:7b:4c:e1:a9:e8:51:47:ae:21:c2:c9:4f:
9c:14:a8:76:9c:8d:d4:8d:a4:27:b3:51:e6:e5:e7:
db:e1:4d:d3:a0:3f:6e:3d:75:80:19:a4:89:03:8c:
85:7b:30:bc:5f:58:79:0f:6d:92:d9:e9:aa:ec:1d:
c9:df:e0:e3:ec:78:38:4a:83:06:41:4c:dd:28:59:
c2:3a:a0:31:06:88:eb:f3:56:83:7a:83:1a:9b:2f:
cc:93:74:d4:89:bb:d2:19:5e:f8:f4:b6:c5:4a:60:
31:7d:00:76:95:99:48:e6:66:01:fd:9f:7c:01:81:
0f:ed:ec:c8:76:dc:ab:96:01:7a:66:b3:fe:41:d3:
71:e9:97:46:e2:09:21:39:21:24:5a:bd:88:58:67:
14:66:23:da:42:ad:d7:f7:76:10:62:04:30:65:a2:
d8:b2:7d:3d:c1:b8:63:22:80:b4:ae:d0:3f:fd:ab:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FA:28:14:48:1E:6A:30:6C:24:D5:7E:F1:89:58:2A:13:93:D2:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UfooFEgeajBsJNV-8YlYKhOT0h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:3b:3b:0c:01:93:be:35:91:71:08:e7:0b:2c:1c:b5:30:da:
e1:a5:a4:fe:3e:d8:8d:b2:51:5b:b9:75:0e:9b:96:4e:ff:06:
ed:b9:1c:d0:b7:e6:cf:13:62:89:dd:8a:9b:b9:9f:52:16:d8:
bc:65:92:30:67:62:a3:47:24:a6:48:93:8e:a0:c4:6a:91:39:
a2:cd:4b:10:13:e4:45:4e:90:bb:20:fb:5f:50:71:29:f7:4e:
19:28:ce:9b:4e:fd:d9:fa:fa:d0:d4:a4:ee:62:37:4b:3c:0e:
bd:79:83:ef:5b:1b:38:a5:14:5e:99:c3:f1:45:2a:a1:fd:87:
af:bc:b0:06:7a:8f:9a:b4:55:ac:61:eb:f3:b2:6d:e9:e9:6d:
30:07:1b:54:28:38:4b:0e:3d:c1:63:14:9e:b2:9b:f0:45:eb:
84:22:bc:eb:eb:0d:98:11:5e:e7:93:e9:0d:0c:4d:a6:a7:12:
e1:fe:45:21:6e:ed:a2:7d:9d:26:f9:44:a0:31:1c:85:f5:d5:
d9:74:83:1a:33:20:88:f7:9c:a8:6c:87:86:ff:75:58:c8:03:
dc:57:5c:6f:28:61:31:0e:66:2e:13:5f:e7:2c:e0:26:43:41:
ae:29:90:08:35:67:25:3d:94:f8:fc:d4:93:c3:cd:e5:78:b9:
1d:a4:e8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:13:36 2025 by rpki-client