Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__uKWzkjRQDmJ0Hn18fRFEG2mjs.roa
File: __uKWzkjRQDmJ0Hn18fRFEG2mjs.roa (raw, json)
Hash identifier: B13TK7O32Wd1zDQpt8gWWfPx9vOtirKExEFNHod+a3M=
Subject key identifier: FF:FB:8A:5B:39:23:45:00:E6:27:41:E7:D7:C7:D1:14:41:B6:9A:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018638048E8FEBCA0609731D81C58794CE13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__uKWzkjRQDmJ0Hn18fRFEG2mjs.roa
Signing time: Thu 09 Feb 2023 21:11:08 +0000
ROA not before: Thu 09 Feb 2023 21:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:38:04:8e:8f:eb:ca:06:09:73:1d:81:c5:87:94:ce:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 21:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fffb8a5b39234500e62741e7d7c7d11441b69a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:71:74:06:66:1b:8d:d8:7b:b5:10:9d:aa:
dc:6a:cf:82:d2:2f:28:e6:16:dc:f2:4a:3d:1c:6e:
aa:20:35:a0:54:f9:37:c7:c8:d2:e4:4e:b7:16:53:
54:4e:79:b1:07:36:db:e5:df:64:94:38:ab:29:29:
9b:b8:fc:de:84:5d:ad:0d:6d:f6:26:83:99:e9:62:
fd:f7:53:f7:17:de:10:ce:e9:a4:62:79:98:f4:eb:
f4:35:03:be:8b:2b:48:cb:1a:43:cf:f7:5d:0f:2f:
e4:85:58:ef:4f:18:9f:ea:c2:a2:be:00:dd:7d:4e:
19:f0:fb:31:82:a6:1b:9d:5d:27:17:20:51:0f:47:
9b:7a:4b:97:67:36:20:03:4f:dc:3a:11:b1:b3:af:
84:c0:df:90:fd:1a:eb:0a:6c:f6:2b:d7:61:5b:0f:
59:f6:f3:87:94:13:e0:62:9e:49:6c:3f:7d:4c:f1:
52:72:cf:73:9c:12:68:08:d8:1f:97:90:a5:88:46:
7f:98:ea:92:27:c4:0e:6e:19:75:46:74:3c:b0:80:
20:87:29:ef:54:5d:20:87:fe:21:a3:b0:2a:be:38:
4c:50:23:33:f1:41:40:ea:9c:5d:6b:1f:6c:e3:61:
16:b0:cf:4f:f7:14:4d:95:72:af:86:07:35:0d:ef:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:8A:5B:39:23:45:00:E6:27:41:E7:D7:C7:D1:14:41:B6:9A:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__uKWzkjRQDmJ0Hn18fRFEG2mjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:6e:e5:6a:5f:70:eb:bf:d0:a5:8c:aa:9b:65:9e:13:b2:be:
5d:99:03:32:95:c8:5f:59:5f:7e:0f:8d:c6:44:9b:86:b2:8e:
93:0b:8d:ab:c7:a6:64:d2:fe:39:76:fa:15:be:68:04:dc:ab:
ad:45:4d:c9:14:08:b2:b2:32:26:f6:94:50:d3:4c:d1:ca:42:
3d:4e:82:0a:ea:5e:98:07:59:ba:29:c1:8e:55:8b:7f:5a:f0:
f4:c2:8c:cf:f7:dc:1a:af:cd:6f:2e:20:ec:c2:1c:6e:c4:eb:
31:c5:d2:0b:bb:90:b8:1f:92:4b:0a:50:8d:cf:41:bd:86:18:
f0:a5:00:ac:3a:63:c0:49:1d:51:07:05:f5:fb:df:59:8e:2c:
d8:99:6a:bc:22:6b:ac:6f:84:ea:aa:c2:65:05:1b:f2:24:f3:
60:0e:ca:f6:03:ef:29:26:6d:24:2f:1d:55:04:d8:a9:5a:7d:
de:64:6f:5a:15:c5:a1:80:a6:f6:c2:97:2f:31:b5:cb:c9:88:
ef:bf:55:aa:6d:b7:12:78:fa:d8:65:1a:bd:30:1c:65:dd:d5:
02:af:d2:31:6a:01:9b:3c:c6:51:f6:5e:f4:26:18:e9:f7:39:
73:b8:ec:ce:91:1f:a4:a3:16:bb:21:44:bf:9b:56:36:84:37:
86:e3:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:45 2025 by rpki-client