Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uG-wYc_KiFA_aRembY5Kt8isjmc.roa
File: uG-wYc_KiFA_aRembY5Kt8isjmc.roa (raw, json)
Hash identifier: hl9Dy7CSaKp0LCiRHnQPUQFCme8+5bBAaxJkwYVKkm8=
Subject key identifier: B8:6F:B0:61:CF:CA:88:50:3F:69:17:A6:6D:8E:4A:B7:C8:AC:8E:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018519F6AF72920D35437DF71B66DE8FE1BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uG-wYc_KiFA_aRembY5Kt8isjmc.roa
Signing time: Fri 16 Dec 2022 08:04:35 +0000
ROA not before: Fri 16 Dec 2022 08:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:19f6:7108/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:19:f6:af:72:92:0d:35:43:7d:f7:1b:66:de:8f:e1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 08:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b86fb061cfca88503f6917a66d8e4ab7c8ac8e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:6b:a3:73:78:d3:fa:c9:43:3c:c6:fd:7c:
19:71:8c:b6:aa:79:52:dc:e8:c4:23:a2:1b:50:fa:
88:96:37:38:4a:d9:6c:6a:0b:31:7a:13:25:bf:95:
cb:a0:72:b0:b5:02:d7:10:75:4b:de:68:8d:5e:e2:
9e:25:35:4e:19:0e:18:ab:8d:e0:5f:d7:89:8d:f8:
59:71:35:13:b2:36:0c:27:b6:14:f0:92:92:81:ca:
91:62:8f:ff:c0:8e:9b:ab:40:c2:ff:c3:9f:04:6d:
36:61:62:70:26:53:4c:98:cc:42:e5:5f:62:9a:1a:
61:b6:6e:a4:9c:6c:6e:80:c5:b5:43:09:2c:c0:15:
fc:33:e1:6d:1f:80:06:48:90:dd:9d:db:38:9c:6b:
bd:02:fa:d1:74:09:00:52:91:2d:90:45:20:f8:47:
cf:5e:60:c3:f4:3b:15:d5:ac:a8:b4:64:d5:58:da:
e7:3c:5f:4c:19:c3:3c:25:d7:4c:9e:d1:ca:b7:0e:
04:97:03:a5:76:c8:54:14:9a:bc:79:9a:29:eb:34:
ba:75:fc:a0:14:4e:11:72:20:99:b0:88:65:3c:c1:
c6:2c:60:6d:af:e1:0f:5a:a3:38:be:78:0f:f3:81:
1b:01:6f:fb:44:a5:0d:a8:f4:fb:51:f9:be:e7:cb:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6F:B0:61:CF:CA:88:50:3F:69:17:A6:6D:8E:4A:B7:C8:AC:8E:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uG-wYc_KiFA_aRembY5Kt8isjmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:c5:1c:a9:02:53:5e:93:ae:7d:d5:9a:7b:05:27:02:8f:07:
8e:51:0b:0d:b5:ae:c1:fc:62:0a:68:86:42:56:a8:9d:66:87:
ba:02:4b:b8:36:70:a8:c5:57:e0:4e:ae:38:5b:f7:51:96:19:
bc:7d:3a:58:71:47:08:a6:2b:4a:97:67:6b:88:04:82:88:d2:
20:c0:e7:aa:e9:c1:cd:d6:76:22:d6:87:e0:fd:38:45:c4:9b:
f8:d4:44:7c:64:71:d0:77:c0:b2:f9:cf:b3:ff:a3:c5:2a:f3:
ca:f3:2c:48:ec:f3:34:49:5d:61:eb:0a:28:c4:18:cf:c7:8a:
3a:ca:eb:5a:b6:06:7e:82:76:4d:a3:6d:b8:6d:f8:86:67:d7:
a6:d3:53:b9:00:4f:e2:3f:7e:69:a6:a4:e6:17:c2:4a:9f:9e:
5f:92:14:ec:91:f3:b4:1f:18:a3:8b:1e:16:95:9c:82:7c:bb:
00:95:2b:bc:57:1b:b7:12:a9:5a:ab:af:9e:a1:95:2f:ec:86:
9d:b1:df:98:f5:ee:6e:f9:04:a1:65:bb:f9:cc:4b:54:4e:1e:
66:2e:1d:68:13:be:0f:a2:3e:d1:af:50:7a:5b:4f:fa:9b:fd:
60:64:67:0f:81:5d:aa:b3:25:eb:41:b3:a8:47:d2:b5:d7:42:
ba:17:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:07:37 2025 by rpki-client