Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u3rcx7drOQR7exlOidKwjCRzY5Y.roa
File: u3rcx7drOQR7exlOidKwjCRzY5Y.roa (raw, json)
Hash identifier: 6kFqM+FaY3rrtq4YWQArcF6Z/F3YItInCxH/dv9EopM=
Subject key identifier: BB:7A:DC:C7:B7:6B:39:04:7B:7B:19:4E:89:D2:B0:8C:24:73:63:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018562EB8C6EFEAACC1BB416661E0D22D06E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u3rcx7drOQR7exlOidKwjCRzY5Y.roa
Signing time: Fri 30 Dec 2022 12:04:42 +0000
ROA not before: Fri 30 Dec 2022 12:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:62eb:5465/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:eb:8c:6e:fe:aa:cc:1b:b4:16:66:1e:0d:22:d0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 12:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb7adcc7b76b39047b7b194e89d2b08c24736396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:e4:22:ee:b9:09:a4:e7:c5:ea:c2:54:77:
75:6c:c6:3d:64:87:ad:e7:b0:b4:3a:2e:a6:13:1e:
be:6f:85:45:21:2c:a5:2b:e9:6d:88:3e:d3:c1:2e:
49:5a:74:70:f8:7c:db:73:ed:28:82:8e:01:b0:bf:
64:56:63:62:e3:0b:7b:27:e0:5d:70:45:b9:9d:63:
95:4a:64:11:2b:43:8b:7f:2c:e0:7e:87:dc:cf:d4:
f5:fb:1b:f9:35:7a:d1:51:9f:7d:32:59:5c:19:60:
d1:b9:82:fe:35:f5:05:4d:8e:63:31:14:1f:41:a4:
a5:a5:32:53:15:25:01:ed:cd:56:69:81:92:e2:ed:
35:d1:aa:a8:7b:fb:3e:ad:98:f6:99:04:3b:48:c9:
8d:9b:6a:02:bf:26:b2:89:95:9c:3f:5b:f4:99:db:
ca:0e:99:f3:03:96:55:b2:e1:07:00:30:57:3d:5a:
75:30:2c:90:a4:80:92:47:06:25:f3:98:a2:e3:6e:
0b:d5:8a:f0:12:63:50:c5:fe:fe:89:4a:e8:50:3b:
66:e6:36:9f:35:16:de:71:01:78:71:4f:3a:3b:4f:
e1:62:7e:e4:cd:2a:b1:04:21:c6:6f:e4:ff:77:3f:
9a:22:20:c2:f0:6b:8b:fe:5a:0e:0b:8b:c5:a1:6e:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:DC:C7:B7:6B:39:04:7B:7B:19:4E:89:D2:B0:8C:24:73:63:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u3rcx7drOQR7exlOidKwjCRzY5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:c6:17:9d:91:11:1c:43:7f:21:d9:cd:ff:9e:7c:36:1d:f6:
ae:28:5f:17:ce:87:01:c1:75:59:e0:74:5d:1d:fc:5e:ff:9b:
c5:3e:fe:58:f9:0c:c1:41:dd:3c:d0:84:9a:d0:e7:bc:2a:8c:
53:90:d4:26:97:70:c6:a9:ba:9b:e2:59:6c:a5:21:37:6e:aa:
1a:e8:8f:86:f3:41:e8:59:98:b4:32:87:51:e5:f6:f8:60:80:
b2:d6:92:53:74:8e:35:d6:dc:68:5b:27:6a:94:a2:0b:dd:42:
f0:90:3d:da:9f:2f:89:0b:e5:b0:ff:d9:53:97:ce:69:f8:e9:
9f:1d:2d:43:1e:f7:40:51:89:50:e4:01:5d:04:27:c2:ad:59:
e1:44:3c:79:2b:c3:a8:af:a5:0c:bb:32:70:1a:30:bd:57:ba:
31:65:30:d9:26:8e:f5:6f:d6:d1:b4:08:ad:80:9d:d3:9f:4f:
66:10:a3:d0:a2:28:33:a3:08:b9:88:c3:55:14:7c:4c:69:c9:
34:a1:b3:0c:3b:c7:46:e7:d3:ed:77:7d:dd:43:65:2a:6d:b4:
24:26:bf:e7:e7:71:b3:76:db:bd:ff:0c:a4:ee:41:a0:92:50:
b8:b5:49:ac:5d:69:6a:ff:49:b5:db:79:61:dc:13:39:73:bf:
16:6a:64:3d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVi64xu/qrMG7QWZh4NItBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMwMTIwNDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjdhZGNjN2I3NmIzOTA0N2I3YjE5NGU4OWQyYjA4YzI0NzM2Mzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxPkIu65CaTnxerCVHd1bMY9ZIet
57C0Oi6mEx6+b4VFISylK+ltiD7TwS5JWnRw+Hzbc+0ogo4BsL9kVmNi4wt7J+Bd
cEW5nWOVSmQRK0OLfyzgfofcz9T1+xv5NXrRUZ99MllcGWDRuYL+NfUFTY5jMRQf
QaSlpTJTFSUB7c1WaYGS4u010aqoe/s+rZj2mQQ7SMmNm2oCvyayiZWcP1v0mdvK
DpnzA5ZVsuEHADBXPVp1MCyQpICSRwYl85ii424L1YrwEmNQxf7+iUroUDtm5jaf
NRbecQF4cU86O0/hYn7kzSqxBCHGb+T/dz+aIiDC8GuL/loOC4vFoW4yDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLt63Me3azkEe3sZTonSsIwkc2OWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdTNyY3g3ZHJPUVI3ZXhsT2lkS3dqQ1J6WTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIPGF52RERxDfyHZzf+e
fDYd9q4oXxfOhwHBdVngdF0d/F7/m8U+/lj5DMFB3TzQhJrQ57wqjFOQ1CaXcMap
upviWWylITduqhroj4bzQehZmLQyh1Hl9vhggLLWklN0jjXW3GhbJ2qUogvdQvCQ
PdqfL4kL5bD/2VOXzmn46Z8dLUMe90BRiVDkAV0EJ8KtWeFEPHkrw6ivpQy7MnAa
ML1XujFlMNkmjvVv1tG0CK2AndOfT2YQo9CiKDOjCLmIw1UUfExpyTShsww7x0bn
0+13fd1DZSpttCQmv+fncbN2273/DKTuQaCSULi1SaxdaWr/SbXbeWHcEzlzvxZq
ZD0=
-----END CERTIFICATE-----
Generated at Thu May 1 04:29:06 2025 by rpki-client