Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sUVJDDUhHAndVq4gl6GlWog-IUY.roa
File: sUVJDDUhHAndVq4gl6GlWog-IUY.roa (raw, json)
Hash identifier: JKePgBJE4IS4JvkZvJZiFNz4t0ZBdvPLlqqHF5IP2n0=
Subject key identifier: B1:45:49:0C:35:21:1C:09:DD:56:AE:20:97:A1:A5:5A:88:3E:21:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851E0A617682536469AF36F7B3C9C298AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sUVJDDUhHAndVq4gl6GlWog-IUY.roa
Signing time: Sat 17 Dec 2022 03:04:34 +0000
ROA not before: Sat 17 Dec 2022 03:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1e0a:51da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1e:0a:61:76:82:53:64:69:af:36:f7:b3:c9:c2:98:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 03:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b145490c35211c09dd56ae2097a1a55a883e2146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:e5:0d:41:ce:bb:9f:e0:f5:e0:cd:bf:df:
18:25:8a:06:4f:22:db:7c:9e:bf:85:8d:fd:6a:0c:
34:f6:9f:ec:ce:2f:08:77:06:e2:5e:eb:6a:8e:44:
b3:00:c2:60:eb:0e:7c:f3:d3:1b:2c:33:26:04:64:
d8:d2:14:8f:0c:52:60:3f:e1:54:48:2b:5e:75:85:
64:f1:62:ee:e4:30:e1:d7:9f:cc:9c:fc:f0:ff:34:
c4:bf:d6:05:fb:59:4c:90:fd:37:71:44:ac:78:ac:
ba:a6:9f:ff:bd:42:48:18:f8:8c:6a:12:a0:d0:49:
42:ae:2b:e2:f4:66:ec:eb:52:6e:da:ee:f5:9f:ec:
eb:65:2c:bf:63:78:ba:4b:86:49:a7:f6:59:29:54:
04:2e:53:d1:8c:28:15:e8:69:4a:2f:a4:3c:65:99:
bc:c7:5a:7d:67:1b:70:08:ad:26:d3:5b:e8:35:0d:
2e:2b:26:60:da:b0:18:a8:d1:c7:5d:34:4c:90:57:
c1:df:96:3b:2c:2f:5d:7f:54:09:60:00:39:36:06:
9a:13:8e:a0:b1:f5:f7:e0:ab:e2:c4:80:18:e3:d4:
5a:dc:65:d0:f1:15:29:fb:bd:d4:42:49:b8:16:19:
56:c8:4f:fa:c2:77:50:11:5b:2a:44:36:61:6f:55:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:45:49:0C:35:21:1C:09:DD:56:AE:20:97:A1:A5:5A:88:3E:21:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sUVJDDUhHAndVq4gl6GlWog-IUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:a9:54:32:1f:96:73:ab:2e:09:2b:86:45:4b:34:a8:4d:67:
c1:00:a0:e3:df:20:53:5d:0a:ab:05:81:55:65:bf:85:ed:2a:
80:40:4d:e1:de:db:70:f5:e2:68:a6:82:83:32:80:df:d2:81:
8a:cd:be:b5:19:af:f8:37:53:8a:ef:a3:5b:d5:ae:6d:8a:d4:
22:78:c3:32:52:1d:f2:b1:8c:34:61:dd:62:ff:0a:cd:4d:49:
8c:5e:9b:75:bd:9f:e4:94:32:51:05:d4:0d:c0:de:93:38:04:
40:52:21:72:5f:c7:a6:27:01:69:b8:be:59:e3:3d:43:4c:7a:
e5:0a:97:4e:76:d6:ce:ce:13:77:ad:30:fc:f0:9b:6c:da:84:
d7:8c:ee:0b:6e:8b:67:06:20:3e:3c:0a:eb:d0:bc:5b:a3:45:
61:38:0e:b4:4c:c8:c7:6c:cc:cf:b6:59:62:91:a9:9f:d9:a9:
d0:2d:9f:03:25:46:86:3a:4d:e0:02:7e:5c:92:39:cd:d7:23:
40:f9:f2:6d:12:21:7d:42:89:a5:cf:2c:80:1c:b3:fc:d4:d3:
0c:5e:c7:04:66:d6:82:d1:69:cc:a6:f9:b0:16:ef:56:55:3c:
1c:67:cb:54:1c:5f:39:c9:88:2a:3d:43:f3:fe:01:81:62:d6:
1d:14:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:39:16 2025 by rpki-client