Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lUuxXbNATrSlOPEFTUIs9ScapD4.roa
File: lUuxXbNATrSlOPEFTUIs9ScapD4.roa (raw, json)
Hash identifier: 3sgPky3z/DNSxNF0+Z8lk55ucQ3cbpJ/xPCFFuuzjLA=
Subject key identifier: 95:4B:B1:5D:B3:40:4E:B4:A5:38:F1:05:4D:42:2C:F5:27:1A:A4:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C34924D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lUuxXbNATrSlOPEFTUIs9ScapD4.roa
Signing time: Sun 20 Feb 2022 09:10:49 +0000
ROA not before: Sun 20 Feb 2022 09:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815384653 (0x6c34924d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 09:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=954bb15db3404eb4a538f1054d422cf5271aa43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:ed:79:0d:bd:26:96:e2:d6:a9:02:2b:b9:
2f:5a:3c:f3:d1:58:59:0c:18:7b:c6:bc:09:fc:ee:
dd:d7:e8:00:2a:b9:73:53:60:2e:b5:9f:af:bd:de:
27:69:9e:e0:a2:f8:22:76:11:b0:71:7e:8d:6f:ee:
76:f0:1b:9b:39:e4:2a:a8:b6:91:96:c9:75:cf:1e:
98:4e:19:0c:fb:c1:e5:57:51:c5:02:0e:bc:7d:70:
88:d3:22:f0:8f:95:b9:99:87:17:8b:70:fe:20:5e:
23:08:8b:71:80:7f:f4:14:de:78:4f:48:67:81:2e:
9a:18:7f:a1:f3:09:b7:e0:43:eb:62:f3:c8:55:1e:
e8:97:45:66:9a:3d:65:dd:63:13:b5:c2:0d:ae:3f:
75:70:04:b5:97:b8:fb:76:84:b0:93:e9:6f:56:ec:
41:c4:d3:14:e3:07:53:79:56:08:24:4b:18:89:43:
c3:b1:8e:9f:ed:48:d6:24:10:00:ae:3f:89:78:2d:
31:e8:96:a2:5d:bd:d5:4b:ea:6c:a9:43:22:8b:18:
ec:f1:64:98:e7:c0:24:21:1f:63:59:16:4e:b5:b4:
3b:e8:e2:1c:66:8b:11:bc:9c:c0:3a:03:6c:6b:81:
8b:9e:20:03:cc:d6:44:47:ca:c3:26:f7:87:04:a5:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4B:B1:5D:B3:40:4E:B4:A5:38:F1:05:4D:42:2C:F5:27:1A:A4:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lUuxXbNATrSlOPEFTUIs9ScapD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:0a:74:02:26:c5:2f:ef:79:e3:56:ef:61:01:b3:c7:f6:42:
5a:6f:74:b1:5f:c8:27:be:40:1a:8a:9a:01:62:b0:59:c1:ae:
6f:04:51:ba:10:03:b7:a2:c2:10:55:0a:9f:43:61:17:55:7d:
2f:d6:76:2e:09:c4:d5:19:5f:85:fc:4f:52:c2:0b:3c:86:6a:
d7:5c:67:da:a1:0e:26:32:4d:65:28:4b:47:48:59:7e:84:8e:
1a:ce:0c:a7:3f:96:5c:6f:b9:20:80:85:95:02:a5:1d:78:29:
5a:3b:e2:5c:f2:00:f6:1d:93:db:10:44:9a:36:71:19:74:5f:
ea:85:14:28:4a:cc:4a:c9:7a:82:11:a7:93:8a:6f:cf:2a:d1:
0b:f2:3a:d3:c8:90:9a:33:fc:db:dd:8d:b7:91:12:34:97:46:
2c:1b:d1:38:44:e3:8f:31:68:84:54:75:d9:29:38:57:03:05:
2e:81:c5:3b:b5:19:b5:95:24:6b:c8:75:e6:e1:b0:19:da:b2:
7c:29:49:9b:b8:f8:f8:83:11:9f:0d:3a:18:86:c6:26:58:99:
62:41:8c:14:fc:36:99:8f:f6:00:0d:d5:43:64:6c:29:05:07:
6c:01:fe:24:08:ec:41:07:34:19:da:dd:7a:14:a4:50:50:52:
3a:12:23:59
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbDSSTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
MDA5MTA0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU0YmIxNWRiMzQw
NGViNGE1MzhmMTA1NGQ0MjJjZjUyNzFhYTQzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJGU7XkNvSaW4tapAiu5L1o889FYWQwYe8a8Cfzu3dfoACq5
c1NgLrWfr73eJ2me4KL4InYRsHF+jW/udvAbmznkKqi2kZbJdc8emE4ZDPvB5VdR
xQIOvH1wiNMi8I+VuZmHF4tw/iBeIwiLcYB/9BTeeE9IZ4Eumhh/ofMJt+BD62Lz
yFUe6JdFZpo9Zd1jE7XCDa4/dXAEtZe4+3aEsJPpb1bsQcTTFOMHU3lWCCRLGIlD
w7GOn+1I1iQQAK4/iXgtMeiWol291UvqbKlDIosY7PFkmOfAJCEfY1kWTrW0O+ji
HGaLEbycwDoDbGuBi54gA8zWREfKwyb3hwSlxZcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSVS7Fds0BOtKU48QVNQiz1JxqkPjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2xVdXhYYk5BVHJTbE9QRUZUVUlzOVNjYXBENC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCgCnQCJsUv73njVu9hAbPH9kJab3SxX8gnvkAa
ipoBYrBZwa5vBFG6EAO3osIQVQqfQ2EXVX0v1nYuCcTVGV+F/E9Swgs8hmrXXGfa
oQ4mMk1lKEtHSFl+hI4azgynP5Zcb7kggIWVAqUdeClaO+Jc8gD2HZPbEESaNnEZ
dF/qhRQoSsxKyXqCEaeTim/PKtEL8jrTyJCaM/zb3Y23kRI0l0YsG9E4ROOPMWiE
VHXZKThXAwUugcU7tRm1lSRryHXm4bAZ2rJ8KUmbuPj4gxGfDToYhsYmWJliQYwU
/DaZj/YADdVDZGwpBQdsAf4kCOxBBzQZ2t16FKRQUFI6EiNZ
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:32 2025 by rpki-client