Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uMax2X_Ky16jqz8-H4mpdwkpEVs.roa
File: uMax2X_Ky16jqz8-H4mpdwkpEVs.roa (raw, json)
Hash identifier: s5pAKmY8UUOZUoXug5N1/UdApSZ4KTaimPeu6yMvuDw=
Subject key identifier: B8:C6:B1:D9:7F:CA:CB:5E:A3:AB:3F:3E:1F:89:A9:77:09:29:11:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E8A333F719B3B72A8B36E642978EBA5E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uMax2X_Ky16jqz8-H4mpdwkpEVs.roa
Signing time: Tue 06 Dec 2022 18:12:00 +0000
ROA not before: Tue 06 Dec 2022 18:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:a3:33:f7:19:b3:b7:2a:8b:36:e6:42:97:8e:ba:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 18:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8c6b1d97fcacb5ea3ab3f3e1f89a9770929115b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3f:dd:85:8a:f9:2e:a6:dc:c9:c7:2e:21:20:
74:ab:74:12:1e:37:3b:45:1e:d4:7b:8a:5d:4f:4b:
1e:69:40:9c:e8:d9:57:bb:a5:55:69:0f:b5:c9:ad:
90:c1:7b:15:cc:d2:b0:c6:24:4c:ad:95:ea:cc:50:
c8:b8:41:72:ea:31:a0:13:0e:40:ae:86:bb:fb:67:
eb:82:f2:b6:41:95:89:f3:22:1f:78:ca:2e:74:3d:
1e:51:0a:62:1a:7f:86:bd:61:f7:d7:5b:03:b0:73:
3d:94:d1:bf:4c:64:58:89:d8:0e:1d:12:c1:c0:e8:
08:49:a0:9f:e3:5c:f7:9f:ec:8f:84:a6:e9:62:00:
43:ea:86:a7:32:33:e2:d8:d7:8b:38:7e:95:5c:17:
e1:9c:7c:a0:34:d9:1d:29:f9:63:f1:c4:a0:09:87:
bd:2f:6a:82:20:3e:64:c5:7c:40:5f:8d:d1:63:14:
44:bc:d8:c2:3d:46:01:04:61:b4:fc:06:cf:29:9f:
4a:5a:31:bc:8f:d6:3e:f2:bb:31:c6:fd:e2:99:ec:
83:ba:d0:e6:8a:c1:60:02:80:f3:c5:d8:67:74:e5:
df:b8:32:44:ae:fa:2f:0e:d9:34:cf:8e:93:02:b4:
a1:c1:d2:d3:0a:83:e9:ba:66:35:aa:b4:26:95:94:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:B1:D9:7F:CA:CB:5E:A3:AB:3F:3E:1F:89:A9:77:09:29:11:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uMax2X_Ky16jqz8-H4mpdwkpEVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:cd:e1:2e:61:ea:42:42:d1:4c:00:d0:5b:e6:a9:04:34:ea:
9f:83:22:fc:da:f4:37:e6:16:c5:16:27:18:4b:44:c0:17:70:
b9:7d:dd:67:b9:92:73:72:e3:10:51:fa:97:52:0b:7c:f8:37:
78:8a:25:65:f6:7c:10:62:83:8e:36:6d:5f:e3:31:1f:75:81:
d8:ec:52:ff:6c:e8:12:a0:ba:e0:6a:d1:a2:43:c7:63:0c:a0:
fd:08:11:03:7f:b8:57:a3:ee:bd:40:45:a3:2e:e8:23:8a:ad:
9a:42:d2:ce:fd:f3:87:25:01:79:4f:c2:0f:ef:02:57:a4:72:
97:be:bc:ae:3f:69:8f:2d:0b:45:c0:b0:62:ec:3f:1c:70:b7:
5a:11:b5:48:a5:f2:38:d1:26:34:1d:f2:7f:c2:09:c7:95:03:
bf:a1:21:bf:12:85:c2:ff:a1:49:f5:e7:9d:d6:d6:24:cd:78:
96:ac:12:22:76:e6:4d:4e:43:d6:de:52:6b:01:52:08:82:0c:
8f:ee:ae:99:37:c6:e7:33:4e:f6:b2:11:2a:0f:d6:7f:1d:6b:
0f:d0:15:a4:e0:7b:7c:eb:aa:1a:82:a1:9a:70:4d:2d:cb:0e:
29:78:a5:d0:66:39:e5:06:80:2a:e2:66:ce:64:e3:ce:e1:6d:
8a:b6:98:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:03 2025 by rpki-client