Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uFmYgS2wnzOqAs63mMKKlvGYuHY.roa
File: uFmYgS2wnzOqAs63mMKKlvGYuHY.roa (raw, json)
Hash identifier: MvKyBdNTjj3lbqzbYg/R+T8Lsf+wZMouCvzDXiLOPPU=
Subject key identifier: B8:59:98:81:2D:B0:9F:33:AA:02:CE:B7:98:C2:8A:96:F1:98:B8:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FCDB91D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uFmYgS2wnzOqAs63mMKKlvGYuHY.roa
Signing time: Sat 05 Mar 2022 05:09:34 +0000
ROA not before: Sat 05 Mar 2022 05:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875753245 (0x6fcdb91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 05:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b85998812db09f33aa02ceb798c28a96f198b876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:19:8a:f5:89:42:ae:33:54:0c:ef:1f:13:
7a:c1:ec:23:01:b8:3f:82:c0:79:ab:de:14:cf:45:
fe:2e:ad:bc:93:81:b2:39:56:40:18:4c:e5:c3:a9:
94:df:df:61:64:c8:36:a2:bf:43:8d:67:23:35:56:
d0:34:65:76:4a:63:31:6d:39:e8:8e:3b:95:0c:4e:
9d:ec:fc:13:34:55:3e:5a:21:1c:00:2b:f4:48:b8:
13:7f:c8:d3:69:d7:de:83:1c:ce:f2:dd:8d:27:ad:
6f:59:76:58:58:ac:49:43:bf:ce:39:e2:36:9c:80:
39:b5:d5:5b:ff:09:b0:57:8b:fc:4a:34:82:b4:31:
f4:ca:07:f1:76:7b:b4:b3:e4:1e:07:10:a9:24:9e:
1f:28:b3:fc:6c:b8:cf:85:b6:be:21:9d:f0:82:e2:
91:af:02:61:50:a0:34:8b:c2:f1:6e:13:57:d2:ab:
9d:49:46:80:74:c5:6e:f8:1a:7c:e9:db:b3:bb:a1:
28:e7:57:d1:f1:37:1c:b7:82:79:1b:19:d6:bb:ea:
84:47:0e:aa:cc:e4:a0:18:ec:63:f2:79:48:eb:a4:
dd:2c:c1:d0:f9:d1:75:9a:5c:c2:13:20:2a:75:a8:
2a:cc:ca:66:9f:d0:bc:b3:e1:1a:85:b4:bd:11:26:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:98:81:2D:B0:9F:33:AA:02:CE:B7:98:C2:8A:96:F1:98:B8:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uFmYgS2wnzOqAs63mMKKlvGYuHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:d2:41:38:ac:aa:e1:c9:15:dd:fe:1c:e7:92:e9:c4:aa:2e:
94:48:57:fd:04:05:c9:5b:da:5a:07:8c:b7:09:b2:ca:88:df:
9a:26:31:d7:94:a7:6d:7b:47:fd:62:f5:2a:6a:00:55:1b:69:
ce:d0:1b:a5:fc:08:53:3f:32:de:59:87:2b:17:59:71:af:02:
a0:ac:b9:4e:e5:2c:fd:55:15:d7:ef:d2:21:f8:bc:c5:17:2d:
95:31:00:e7:b3:a4:ed:2f:40:a4:3f:d9:43:55:a3:8c:13:71:
bc:4f:c6:e0:c7:1e:14:49:d9:31:4c:8a:ae:a2:6b:d5:a3:54:
a6:f2:8d:29:9e:a2:83:84:fd:c7:cc:a5:ee:a0:67:0b:96:c9:
9b:c7:b5:a1:8a:bf:af:03:1c:af:2c:15:82:84:4e:8b:81:7b:
30:bf:27:48:06:04:50:ed:0c:4a:ee:f1:c5:c4:fd:e4:e7:1f:
f2:33:70:58:70:22:3d:fe:40:b4:9e:42:31:15:c9:dd:b6:88:
2d:fd:c3:f8:50:c2:c7:d0:66:df:79:c1:a4:72:e1:22:5a:f3:
84:7b:7c:5c:fc:e6:a1:a8:f1:37:26:2e:75:f9:2a:a6:3d:4e:
6a:67:af:6d:cb:63:f3:fb:50:20:ea:0d:b0:fe:48:1d:ea:46:
0c:6d:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:13:29 2025 by rpki-client