Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ubaRTkp-MYyvpaTImkkd0bVHnQ.roa
File: _ubaRTkp-MYyvpaTImkkd0bVHnQ.roa (raw, json)
Hash identifier: 7h3jNvXTX619x/nVQwI45qZ220E9otePEJJf6VujnXk=
Subject key identifier: FE:E6:DA:45:39:29:F8:C6:32:BE:96:93:22:69:24:77:46:D5:1E:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F47928DA3E22A6A09DC158566441275B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ubaRTkp-MYyvpaTImkkd0bVHnQ.roa
Signing time: Tue 12 Jul 2022 22:13:09 +0000
ROA not before: Tue 12 Jul 2022 22:13:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:79:28:da:3e:22:a6:a0:9d:c1:58:56:64:41:27:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 22:13:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fee6da453929f8c632be96932269247746d51e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:02:8a:0e:ba:44:1c:30:50:5d:9a:fb:a2:
57:88:14:01:fe:58:1f:08:bd:ab:bc:fb:e4:bf:ce:
f7:db:2c:13:c1:d2:27:54:69:fb:a3:67:c2:30:53:
04:df:a1:33:78:cc:a8:9b:37:ac:2d:05:2b:a1:a6:
15:35:94:15:04:fd:0d:ae:6b:78:d5:19:58:d8:2d:
27:dd:0b:c9:41:0c:90:77:b7:41:04:c9:a3:85:d8:
0a:e2:ce:5f:4a:81:1f:0e:7f:e7:c3:aa:05:2b:0e:
16:af:5a:43:4e:e2:b8:f1:9d:e4:a9:0a:32:60:6b:
b8:c7:93:a5:cc:7e:0b:26:f3:5e:d9:c3:11:75:06:
3a:92:c7:fb:e7:4d:21:03:fa:07:4e:8d:73:9b:d3:
72:06:3a:13:e3:8a:6d:a8:c1:c7:4a:e8:1e:8c:17:
ad:45:04:f7:58:7b:a8:ef:78:4a:8a:43:07:6b:b6:
e0:db:45:21:11:54:1f:2d:4c:27:60:5b:51:80:b6:
b1:26:4e:2d:54:7c:16:d3:3d:a2:13:e6:9b:2a:3f:
b5:5b:ef:0f:da:fe:61:a2:37:6a:8d:4d:cd:92:75:
a1:2a:68:c4:d0:0b:f1:ad:75:db:ce:ab:65:2e:e9:
1f:95:f6:fc:69:55:09:8a:da:c5:a7:a2:09:59:ad:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:DA:45:39:29:F8:C6:32:BE:96:93:22:69:24:77:46:D5:1E:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ubaRTkp-MYyvpaTImkkd0bVHnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:e5:14:12:02:d3:1c:e9:6a:1a:9a:59:4f:ab:52:51:ed:f4:
b0:a6:d9:2d:6c:60:52:fe:24:b1:fa:25:51:8c:c8:2e:65:7f:
2f:26:34:aa:46:6d:b3:1e:d2:b5:ba:f1:8a:6d:d4:b2:46:d8:
46:7b:69:de:f0:c4:0a:66:d0:8c:a4:71:5b:b1:31:19:7e:04:
aa:7a:b2:1f:e0:a5:c5:68:b0:71:ae:7d:ee:28:00:0f:f1:4f:
a9:5f:09:69:75:f2:10:12:15:38:7c:3e:2d:7e:a6:7b:02:5d:
6e:9f:63:33:32:40:38:0e:8a:2b:9c:f6:ae:ea:bb:ce:66:5a:
d1:32:bf:0f:40:fc:e3:f8:83:0e:7e:ab:68:2f:5b:03:19:e3:
9e:c3:b8:a8:3f:a3:51:50:ed:be:8f:a5:91:f2:f9:54:97:f4:
b6:b7:50:ce:49:1d:91:c2:da:e3:02:2d:d3:81:26:0d:34:bb:
1b:be:e0:17:61:33:60:c9:6c:08:86:43:7a:cb:63:61:fb:86:
3f:e6:3e:4a:b5:c0:85:0a:70:72:bb:5c:c9:e3:da:ad:c0:f2:
44:c0:31:c7:33:34:ad:10:bb:b3:ed:c0:38:cf:6e:54:7a:88:
bc:66:f8:ec:aa:06:87:65:9b:89:3f:d5:7c:a8:2d:d2:07:6d:
e0:7c:11:59
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYH0eSjaPiKmoJ3BWFZkQSdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzEyMjIxMzA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWU2ZGE0NTM5MjlmOGM2MzJiZTk2OTMyMjY5MjQ3NzQ2ZDUxZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKACig66RBwwUF2a+6JXiBQB/lgf
CL2rvPvkv8732ywTwdInVGn7o2fCMFME36EzeMyomzesLQUroaYVNZQVBP0Nrmt4
1RlY2C0n3QvJQQyQd7dBBMmjhdgK4s5fSoEfDn/nw6oFKw4Wr1pDTuK48Z3kqQoy
YGu4x5OlzH4LJvNe2cMRdQY6ksf7500hA/oHTo1zm9NyBjoT44ptqMHHSugejBet
RQT3WHuo73hKikMHa7bg20UhEVQfLUwnYFtRgLaxJk4tVHwW0z2iE+abKj+1W+8P
2v5hojdqjU3NknWhKmjE0AvxrXXbzqtlLukflfb8aVUJitrFp6IJWa2G+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP7m2kU5KfjGMr6WkyJpJHdG1R50MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX3ViYVJUa3AtTVl5dnBhVElta2tkMGJWSG5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHrlFBIC0xzpahqaWU+r
UlHt9LCm2S1sYFL+JLH6JVGMyC5lfy8mNKpGbbMe0rW68Ypt1LJG2EZ7ad7wxApm
0IykcVuxMRl+BKp6sh/gpcVosHGufe4oAA/xT6lfCWl18hASFTh8Pi1+pnsCXW6f
YzMyQDgOiiuc9q7qu85mWtEyvw9A/OP4gw5+q2gvWwMZ457DuKg/o1FQ7b6PpZHy
+VSX9La3UM5JHZHC2uMCLdOBJg00uxu+4BdhM2DJbAiGQ3rLY2H7hj/mPkq1wIUK
cHK7XMnj2q3A8kTAMcczNK0Qu7PtwDjPblR6iLxm+OyqBodlm4k/1XyoLdIHbeB8
EVk=
-----END CERTIFICATE-----
Generated at Thu May 1 02:52:00 2025 by rpki-client