Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uHL4dSpXB_KbcO0X0XG2VG6AmJ4.roa
File: uHL4dSpXB_KbcO0X0XG2VG6AmJ4.roa (raw, json)
Hash identifier: kHts2XfV4HSbQX6s7yQnmuUhz0+awpfo/l1iuL1ebFo=
Subject key identifier: B8:72:F8:75:2A:57:07:F2:9B:70:ED:17:D1:71:B6:54:6E:80:98:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 90ADCC1A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uHL4dSpXB_KbcO0X0XG2VG6AmJ4.roa
Signing time: Tue 28 Jun 2022 20:10:03 +0000
ROA not before: Tue 28 Jun 2022 20:10:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2427309082 (0x90adcc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 28 20:10:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b872f8752a5707f29b70ed17d171b6546e80989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:5d:00:6d:8d:59:b8:4f:19:e8:16:49:5e:
0f:51:95:92:24:77:c8:e4:61:3e:97:65:d0:aa:75:
fe:f8:e2:97:89:0f:fc:4b:ab:29:6d:18:e0:bc:2d:
87:a0:da:bc:ed:21:0e:3c:4f:ec:74:f0:86:d9:c6:
d2:85:fb:ea:7d:18:b4:d8:fa:a4:43:24:79:c8:b8:
bf:be:cd:6b:80:09:cb:3d:0d:0a:b9:b4:e7:cc:f9:
6f:46:90:07:2b:a8:fc:83:90:9a:21:aa:88:5e:33:
de:de:a3:75:88:ec:c3:d5:60:c9:1f:eb:18:ed:f8:
6a:cf:80:1c:95:27:84:c8:66:61:76:5e:4f:6b:c5:
8d:c8:2d:85:4a:87:4f:cf:19:6b:c4:13:5c:34:e3:
da:33:54:9d:29:e4:8e:ea:c9:88:fa:d9:4f:fe:aa:
2c:f5:ca:e3:32:dc:b6:79:f4:1a:dd:2c:3b:f3:ba:
81:d6:7c:f9:3b:7e:46:f6:b4:22:20:c4:fd:d8:65:
27:92:a6:3b:1f:3e:dd:d8:34:52:47:5e:bd:8d:75:
63:06:77:42:97:07:fa:2a:61:24:65:bc:d6:38:71:
82:51:7b:63:48:b7:f2:2d:d2:60:84:8a:ba:b4:9e:
06:9c:7a:c0:ef:b7:fa:d4:aa:c1:01:16:f7:46:b3:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:F8:75:2A:57:07:F2:9B:70:ED:17:D1:71:B6:54:6E:80:98:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uHL4dSpXB_KbcO0X0XG2VG6AmJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:a2:1e:53:17:34:78:38:dc:1b:09:cb:ef:07:0d:e5:df:8e:
c3:a6:4c:40:95:1b:cc:59:58:6f:cb:b4:6a:37:27:dc:b7:c5:
87:af:6d:25:09:b2:53:61:a8:9c:66:80:4e:1a:16:1d:d3:b1:
2f:42:76:fd:6c:b3:59:36:f0:47:1c:05:93:48:19:6e:52:09:
e6:97:2b:7a:9e:40:3e:4c:1a:18:c2:9b:6b:10:69:4a:6a:35:
f9:5e:c8:6f:10:79:f5:61:1e:3a:bf:43:22:25:3d:b4:3d:40:
38:d4:99:41:2d:2a:30:4c:d0:c8:3f:0d:1b:b2:e6:72:d9:14:
cb:fc:19:2b:70:43:0b:a5:ec:86:24:f8:a0:58:f5:28:b8:85:
54:10:6b:d6:6a:fc:22:45:49:b9:cc:54:48:e8:31:74:b3:12:
24:4b:06:6f:e8:cd:88:aa:b2:fc:41:7c:74:8e:73:d3:13:0f:
95:8f:db:b3:2f:d7:4b:52:d5:1b:59:74:fb:9d:20:c2:6f:49:
ed:92:37:3d:56:c3:99:b5:b8:d9:01:c0:d5:5e:ff:a5:43:e4:
d8:19:d0:12:f9:46:8e:72:1f:e6:96:73:16:14:21:79:1f:14:
b1:6f:e0:7a:c3:98:38:a4:6d:7d:03:29:03:54:75:6d:cb:bd:
8f:dd:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:02 2025 by rpki-client