Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UpYtyvpWSJ77J5qq_jmkUNhEoE4.roa
File: UpYtyvpWSJ77J5qq_jmkUNhEoE4.roa (raw, json)
Hash identifier: fQH/gti+YMyONjF5QRShVw4WA6JBfbRICydskmYsTT0=
Subject key identifier: 52:96:2D:CA:FA:56:48:9E:FB:27:9A:AA:FE:39:A4:50:D8:44:A0:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6648C532
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UpYtyvpWSJ77J5qq_jmkUNhEoE4.roa
Signing time: Sun 30 Jan 2022 07:09:24 +0000
ROA not before: Sun 30 Jan 2022 07:09:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1716045106 (0x6648c532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 07:09:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52962dcafa56489efb279aaafe39a450d844a04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:d3:ac:9f:2f:c6:72:d4:52:ff:f5:c4:f9:
6b:21:8a:00:31:7f:69:6a:c7:5d:80:89:f9:56:4f:
de:6d:cd:4f:95:21:f3:fe:0f:40:d1:2c:33:40:e3:
45:0e:d7:0e:9f:65:6d:7e:0b:90:38:c3:48:68:00:
4c:3e:43:47:df:4b:49:75:53:a0:1b:2b:65:b3:46:
da:e7:71:86:80:42:87:15:32:9b:7a:af:7a:ad:d1:
36:4f:12:6d:e4:08:68:32:3b:d3:e4:cd:4a:0c:56:
bd:ee:fc:48:e4:09:ed:44:36:ac:02:ac:f5:53:57:
99:d8:73:0b:88:8c:3e:64:99:93:42:16:59:2d:4d:
6b:26:53:30:75:9b:e2:be:fb:23:06:d8:da:cf:ee:
bf:4f:06:30:28:87:9b:da:80:2d:e1:a5:39:fb:0a:
01:da:45:11:9a:18:b8:83:11:17:d4:dc:15:67:e9:
91:69:01:41:69:94:81:55:1f:01:40:95:e0:d5:9a:
62:a5:55:29:a7:df:db:98:ad:b8:68:13:7f:ad:e0:
bd:71:19:85:8c:ac:c8:74:db:ea:13:e5:64:ee:65:
c9:91:f2:69:03:18:62:09:a6:0e:61:b0:e7:02:ac:
85:44:1d:58:a2:18:c2:b0:c2:91:d5:db:9d:7d:35:
04:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:96:2D:CA:FA:56:48:9E:FB:27:9A:AA:FE:39:A4:50:D8:44:A0:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UpYtyvpWSJ77J5qq_jmkUNhEoE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:37:4f:de:13:1a:68:4a:e6:3a:c6:6d:f5:31:3f:7c:ad:04:
10:fd:c6:7f:cb:d8:b6:1a:dd:36:f7:03:8a:22:82:af:ce:8d:
44:53:78:31:27:52:76:43:c3:42:33:bf:2d:27:e4:ae:27:f9:
e1:a4:79:53:72:db:8f:3a:d2:b8:6a:85:fe:90:78:82:89:37:
5e:01:a0:71:7a:ef:52:8d:8f:fd:e4:88:ca:79:0f:58:4d:62:
f0:f5:81:28:fc:07:df:c5:45:d8:1a:ee:49:69:51:65:e0:ac:
e2:40:34:d8:9a:04:6f:d4:d6:c3:6b:19:92:de:2e:cd:e2:e4:
9a:ef:24:c6:79:7a:e1:14:0a:5d:3c:c4:69:54:e5:ef:e4:e6:
6e:3f:78:13:99:ab:61:f6:3d:e1:9a:35:89:cd:5b:c0:54:45:
8f:d6:79:85:33:9c:fb:a4:a5:e9:2d:0a:5f:1a:d4:5b:a9:7e:
0b:df:5a:70:59:45:64:9b:d6:56:59:aa:12:e6:7e:26:b0:18:
42:b3:04:4b:56:62:8b:d5:5e:e5:19:a3:5e:34:ce:32:6a:bb:
41:60:7b:32:61:6c:9d:0a:33:47:0d:9f:3e:8b:de:e4:c9:16:
eb:12:67:d0:2f:fa:e8:ea:b8:74:54:05:48:bf:10:29:b8:52:
3c:3c:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:38 2025 by rpki-client