Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uH4ste-827DNXqru_nk0CN3N4UE.roa
File: uH4ste-827DNXqru_nk0CN3N4UE.roa (raw, json)
Hash identifier: zwCX/C2mAJebjmhrdmfX7nrlXfjrwUXoTJ0OCeGWi6E=
Subject key identifier: B8:7E:2C:B5:EF:BC:DB:B0:CD:5E:AA:EE:FE:79:34:08:DD:CD:E1:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 662A86E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uH4ste-827DNXqru_nk0CN3N4UE.roa
Signing time: Sat 29 Jan 2022 18:09:30 +0000
ROA not before: Sat 29 Jan 2022 18:09:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714063079 (0x662a86e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 18:09:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b87e2cb5efbcdbb0cd5eaaeefe793408ddcde141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:36:1d:ed:fc:b7:b7:d8:bb:e5:cb:e4:bf:
26:15:1e:55:c9:ed:90:bd:c7:55:b3:3f:be:7c:94:
2c:5a:f6:96:1c:38:c2:95:af:94:81:57:d4:9e:c2:
35:3d:1a:ac:85:9f:0c:12:55:64:33:dc:ed:5d:ec:
2b:a0:53:ba:88:f6:46:de:67:2d:66:0f:dc:22:04:
68:06:d4:02:f5:b1:f5:15:08:c2:7f:77:46:6b:98:
0a:9f:c1:e2:c1:5a:54:a4:6d:60:19:a1:0d:73:79:
eb:f8:25:ca:ea:93:e1:7a:e3:73:65:3c:39:ad:e4:
e7:00:97:5f:c1:2f:ee:f2:97:9d:49:91:8d:90:36:
2f:38:f9:24:64:d6:d1:21:d3:36:8f:6f:fa:d3:5d:
0d:cb:8d:de:da:67:89:b4:ac:72:0b:fe:af:d9:dc:
f7:e8:d4:8a:06:29:c7:34:b3:a0:15:6b:90:9d:ba:
f2:7e:1d:13:0d:87:cb:55:36:33:ff:be:c3:78:c0:
2b:2c:1c:a7:9e:47:58:24:bf:f1:76:4f:f4:f8:6e:
76:ae:5b:b3:f2:37:5f:42:b1:01:07:dd:55:7e:f8:
2b:1c:d0:a9:59:d6:5e:de:65:0d:03:19:45:5f:69:
dd:ce:bd:e8:ae:84:fc:4b:4a:1b:75:56:1d:2b:7b:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7E:2C:B5:EF:BC:DB:B0:CD:5E:AA:EE:FE:79:34:08:DD:CD:E1:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uH4ste-827DNXqru_nk0CN3N4UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:d9:d3:b9:69:e5:31:b3:be:a3:5f:69:1d:01:67:10:ab:5e:
a8:d4:71:b4:64:37:94:bc:28:94:4b:64:8b:f0:ea:a1:5d:c7:
d9:10:f0:6d:10:48:09:36:7d:96:dd:20:0e:8e:88:07:6c:5d:
f3:ef:de:49:51:0e:7e:0e:d4:53:eb:e2:70:f4:e1:e7:df:2c:
24:14:55:2b:99:25:d2:84:bf:13:ab:36:21:da:81:e3:3b:10:
8c:34:76:54:75:a1:39:e3:01:13:89:3e:b4:48:ab:6a:d3:0e:
72:d3:ce:47:f5:c2:47:80:bf:3e:45:a2:70:4f:ce:de:c8:ed:
cb:c7:5d:a8:bd:7c:f9:64:00:7c:79:fe:fc:ff:f0:50:ab:58:
8c:09:b6:fb:63:6e:91:fd:32:e7:1d:69:24:60:a2:76:1f:59:
7f:d6:63:dc:a4:c0:3b:01:d1:07:b6:2c:a5:55:fb:89:e7:25:
c7:ae:c3:2e:e4:17:b4:1a:1f:52:1e:47:e2:16:2f:4f:9c:49:
89:f7:f9:ef:74:3a:83:20:1d:72:f6:44:b4:81:eb:ac:b5:73:
df:7d:bc:7f:ad:6e:05:65:48:7c:30:fe:f2:e4:3b:df:b5:45:
15:2e:d7:9e:05:e9:36:62:50:6b:84:8b:a9:b1:ef:34:05:2e:
fb:32:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:53:30 2025 by rpki-client