Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UlxhvGi6R77h-jY5oj4tTvzkRMc.roa
File: UlxhvGi6R77h-jY5oj4tTvzkRMc.roa (raw, json)
Hash identifier: +asPMF6x5eEwmVe3gw3Pk0YVWnpeN7xVkUX1EPqcR7A=
Subject key identifier: 52:5C:61:BC:68:BA:47:BE:E1:FA:36:39:A2:3E:2D:4E:FC:E4:44:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73290D4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UlxhvGi6R77h-jY5oj4tTvzkRMc.roa
Signing time: Thu 17 Mar 2022 04:09:38 +0000
ROA not before: Thu 17 Mar 2022 04:09:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932070220 (0x73290d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 04:09:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=525c61bc68ba47bee1fa3639a23e2d4efce444c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:29:1d:b7:f8:97:29:f9:8d:46:76:83:a9:
a2:d0:46:c8:3f:32:e9:07:ef:00:d5:53:3f:11:de:
3a:30:9f:29:a4:06:eb:cc:36:7f:9f:f6:dc:9c:a6:
f3:1c:98:2e:7f:30:c1:bb:c3:cc:c8:7f:d1:ee:46:
3e:11:5d:b3:bc:ba:c5:46:72:f5:4b:bb:f9:54:23:
fc:fb:cb:85:e4:80:74:4c:39:02:01:24:c7:8b:dd:
89:aa:a5:b2:a5:d0:64:85:99:f5:93:38:60:04:fa:
cc:92:cc:86:d5:c5:71:d3:67:55:9f:db:4d:98:2f:
ca:09:3c:f9:eb:84:bb:26:3c:5a:24:db:b7:01:90:
c2:fc:ec:5e:d9:9a:fa:2a:48:09:62:81:c9:c2:d9:
65:07:ec:bc:1b:d6:8f:b7:a1:df:9c:17:ce:52:8c:
6a:10:0d:b8:1e:14:f8:f7:44:4e:96:0d:0c:25:51:
81:c7:4b:6c:cd:fb:87:b1:36:6f:58:a2:c4:e2:18:
06:b2:88:10:72:6d:c5:4e:e5:97:cc:3a:c8:93:e0:
ec:7f:fc:fd:af:e7:f1:4d:45:9f:b3:be:a5:75:fa:
d4:43:f2:00:d2:3b:e4:67:79:d6:28:7e:69:29:b2:
43:ad:5f:d1:d2:0b:25:16:09:ec:b8:8a:e8:7d:bd:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:61:BC:68:BA:47:BE:E1:FA:36:39:A2:3E:2D:4E:FC:E4:44:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UlxhvGi6R77h-jY5oj4tTvzkRMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:c4:8f:d8:94:f9:bb:a0:f4:5f:e4:5e:4c:2b:10:10:86:31:
87:da:50:6f:93:89:69:a6:98:ec:fd:88:f9:de:cc:a4:d5:91:
6f:35:0c:9c:04:84:9c:49:ae:ed:cb:c2:68:8b:b0:58:1e:cd:
e5:9b:fc:09:cf:db:8d:e9:03:d5:d8:8b:42:b5:c1:1d:0e:a3:
af:5f:ce:49:42:1e:36:f8:90:cc:8e:16:fd:eb:a0:8e:37:a6:
b0:cd:77:90:25:e2:a3:c9:31:0c:dd:7f:09:f3:96:f4:a9:33:
a3:91:1a:ac:cf:bf:32:aa:8e:c3:2f:bc:66:56:a4:18:cf:1f:
56:43:9d:de:5e:e3:02:e7:6b:9e:87:0a:f2:bb:c4:c2:a6:c1:
c7:a2:62:55:5a:90:38:61:20:73:94:03:2a:a9:55:1f:5b:fd:
89:3e:ec:00:f9:49:70:89:7e:49:d2:dc:42:f0:6a:5d:69:09:
d9:de:da:4c:53:39:16:a0:31:1b:64:17:0c:d7:d9:5d:85:a4:
ae:5f:3d:96:6d:68:c9:d7:e0:85:ff:77:d8:85:f2:1f:29:0b:
4b:84:ce:65:7d:4f:20:5c:09:23:2c:6c:da:12:18:14:fc:89:
a1:57:d8:45:e2:cb:c3:b7:8b:b6:ec:7a:a7:0d:53:73:95:ab:
c8:88:84:0f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcykNTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
NzA0MDkzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTI1YzYxYmM2OGJh
NDdiZWUxZmEzNjM5YTIzZTJkNGVmY2U0NDRjNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZ6KR23+Jcp+Y1GdoOpotBGyD8y6QfvANVTPxHeOjCfKaQG
68w2f5/23Jym8xyYLn8wwbvDzMh/0e5GPhFds7y6xUZy9Uu7+VQj/PvLheSAdEw5
AgEkx4vdiaqlsqXQZIWZ9ZM4YAT6zJLMhtXFcdNnVZ/bTZgvygk8+euEuyY8WiTb
twGQwvzsXtma+ipICWKBycLZZQfsvBvWj7eh35wXzlKMahANuB4U+PdETpYNDCVR
gcdLbM37h7E2b1iixOIYBrKIEHJtxU7ll8w6yJPg7H/8/a/n8U1Fn7O+pXX61EPy
ANI75Gd51ih+aSmyQ61f0dILJRYJ7LiK6H29Vw0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRSXGG8aLpHvuH6NjmiPi1O/ORExzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1VseGh2R2k2Ujc3aC1qWTVvajR0VHZ6a1JNYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBJxI/YlPm7oPRf5F5MKxAQhjGH2lBvk4lpppjs
/Yj53syk1ZFvNQycBIScSa7ty8Joi7BYHs3lm/wJz9uN6QPV2ItCtcEdDqOvX85J
Qh42+JDMjhb966CON6awzXeQJeKjyTEM3X8J85b0qTOjkRqsz78yqo7DL7xmVqQY
zx9WQ53eXuMC52uehwryu8TCpsHHomJVWpA4YSBzlAMqqVUfW/2JPuwA+UlwiX5J
0txC8GpdaQnZ3tpMUzkWoDEbZBcM19ldhaSuXz2WbWjJ1+CF/3fYhfIfKQtLhM5l
fU8gXAkjLGzaEhgU/ImhV9hF4svDt4u27HqnDVNzlavIiIQP
-----END CERTIFICATE-----
Generated at Sat May 3 14:47:59 2025 by rpki-client