Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uwyk_vfo__fpSTcNTKF77p6Qees.roa
File: Uwyk_vfo__fpSTcNTKF77p6Qees.roa (raw, json)
Hash identifier: jUADfN9Qr3sODSRDDu7CM6knp5L21dtDKWPy4t3XaSo=
Subject key identifier: 53:0C:A4:FE:F7:E8:FF:F7:E9:49:37:0D:4C:A1:7B:EE:9E:90:79:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A37F506F95B481295F29683D7D9CF1884
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uwyk_vfo__fpSTcNTKF77p6Qees.roa
Signing time: Sun 27 Aug 2023 17:05:19 +0000
ROA not before: Sun 27 Aug 2023 17:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:37f4:4a0d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:37:f5:06:f9:5b:48:12:95:f2:96:83:d7:d9:cf:18:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 17:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=530ca4fef7e8fff7e949370d4ca17bee9e9079eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:53:f9:dd:76:dc:54:47:8f:dd:6d:8b:7f:
35:b3:01:93:b8:b7:e7:55:27:b3:3e:49:4c:53:17:
5e:a8:37:3f:74:09:99:51:8f:f2:08:80:a7:83:c2:
1d:a5:73:65:90:3d:23:cf:82:fd:e5:87:29:50:5d:
a9:fe:44:50:a2:2b:c8:d9:d3:98:0d:f3:60:32:58:
85:6c:46:1b:a8:92:15:f7:57:9e:2c:af:68:14:ff:
6a:95:36:96:c6:63:03:c4:ff:8c:da:e8:e4:dc:5a:
8c:76:6f:49:2b:c3:25:38:5d:c9:5a:27:9a:25:8e:
fc:ee:64:a8:65:77:ee:38:37:9e:68:ac:02:f7:c2:
4a:a1:b2:d9:ee:57:1e:d7:0d:98:05:92:2a:69:f8:
7c:fa:ee:99:93:fc:b9:72:ce:f3:ca:ec:f2:1b:28:
4d:a1:cf:cb:5f:a9:9c:ef:7d:19:13:3f:b2:ce:2a:
dd:45:27:0c:cb:e7:d5:a6:01:33:ed:2b:23:77:22:
e9:b7:ba:98:88:f1:ca:e6:26:1b:c0:92:c1:a8:e6:
83:0a:ff:9f:f7:4a:7c:26:4b:58:62:96:c0:2c:a5:
d8:b0:62:9b:75:6f:00:d0:a3:3f:68:1d:ca:dd:9e:
7a:80:2d:30:85:ed:85:ac:12:79:cf:1e:3c:1a:f8:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:A4:FE:F7:E8:FF:F7:E9:49:37:0D:4C:A1:7B:EE:9E:90:79:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uwyk_vfo__fpSTcNTKF77p6Qees.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:d7:ab:c9:ce:f8:e5:fe:3d:b6:ab:2c:45:61:34:ec:38:4f:
ff:44:ae:99:c6:07:b2:ea:02:16:f4:03:60:34:30:b4:af:e4:
71:76:1b:92:d4:34:7e:df:cc:8a:0c:84:fe:3b:e8:13:7e:f3:
25:26:aa:ef:0a:75:f4:11:88:d5:e6:fd:55:09:3f:6b:06:44:
72:a9:a1:6c:6f:e6:9d:5c:4e:f5:e7:0a:b7:6a:f0:1a:8d:89:
62:22:b3:2c:64:4a:be:1d:b5:af:ba:60:e6:c6:92:16:69:73:
4b:e3:ad:6f:b0:c0:ac:47:0a:4a:0e:f6:9a:12:4f:fe:d1:2d:
d7:fe:ed:3b:5c:63:6a:52:5a:57:cd:6b:f5:22:a9:1b:09:fc:
a4:1b:7e:63:6b:e1:89:3b:0c:5c:2e:51:06:0c:85:11:1d:5d:
03:db:d4:66:e3:28:b7:5c:ba:62:bd:9b:b4:0c:d9:31:5b:e4:
58:89:09:e0:ef:56:d8:0a:c3:bb:88:ae:1e:c1:90:cf:44:23:
03:d5:47:ad:8e:6e:88:75:fb:40:cf:d0:6b:62:22:7d:49:a4:
aa:90:b1:6b:70:9f:39:53:49:fe:07:b4:0d:aa:f6:d1:b2:12:
62:cc:dd:b9:8b:d3:14:51:0e:02:69:59:8a:0a:e0:65:fe:d1:
ad:e9:66:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo39Qb5W0gSlfKWg9fZzxiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI3MTcwNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzBjYTRmZWY3ZThmZmY3ZTk0OTM3MGQ0Y2ExN2JlZTllOTA3OWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/5T+d123FRHj91ti381swGTuLfn
VSezPklMUxdeqDc/dAmZUY/yCICng8IdpXNlkD0jz4L95YcpUF2p/kRQoivI2dOY
DfNgMliFbEYbqJIV91eeLK9oFP9qlTaWxmMDxP+M2ujk3FqMdm9JK8MlOF3JWiea
JY787mSoZXfuODeeaKwC98JKobLZ7lce1w2YBZIqafh8+u6Zk/y5cs7zyuzyGyhN
oc/LX6mc730ZEz+yzirdRScMy+fVpgEz7SsjdyLpt7qYiPHK5iYbwJLBqOaDCv+f
90p8JktYYpbALKXYsGKbdW8A0KM/aB3K3Z56gC0whe2FrBJ5zx48Gvgl7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFMMpP736P/36Uk3DUyhe+6ekHnrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVXd5a192Zm9fX2ZwU1RjTlRLRjc3cDZRZWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABLXq8nO+OX+PbarLEVh
NOw4T/9ErpnGB7LqAhb0A2A0MLSv5HF2G5LUNH7fzIoMhP476BN+8yUmqu8KdfQR
iNXm/VUJP2sGRHKpoWxv5p1cTvXnCrdq8BqNiWIisyxkSr4dta+6YObGkhZpc0vj
rW+wwKxHCkoO9poST/7RLdf+7TtcY2pSWlfNa/UiqRsJ/KQbfmNr4Yk7DFwuUQYM
hREdXQPb1GbjKLdcumK9m7QM2TFb5FiJCeDvVtgKw7uIrh7BkM9EIwPVR62Oboh1
+0DP0GtiIn1JpKqQsWtwnzlTSf4HtA2q9tGyEmLM3bmL0xRRDgJpWYoK4GX+0a3p
ZtA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:38 2025 by rpki-client