Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uTFPC2116T1yFWMfL6oGFct7yKA.roa
File: uTFPC2116T1yFWMfL6oGFct7yKA.roa (raw, json)
Hash identifier: guiGh/VrSL59fi0kQy94AUdwP15EwnLSwHFhj5cJOdk=
Subject key identifier: B9:31:4F:0B:6D:75:E9:3D:72:15:63:1F:2F:AA:06:15:CB:7B:C8:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018640CFD70C241390863269F3875218FF46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uTFPC2116T1yFWMfL6oGFct7yKA.roa
Signing time: Sat 11 Feb 2023 14:10:08 +0000
ROA not before: Sat 11 Feb 2023 14:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:40:cf:d7:0c:24:13:90:86:32:69:f3:87:52:18:ff:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 14:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9314f0b6d75e93d7215631f2faa0615cb7bc8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:2a:c6:e2:56:eb:2a:2e:23:f1:c4:3e:d7:
2b:dc:d8:59:39:23:03:0c:a1:3e:39:f8:aa:c7:2b:
a3:3c:d4:1a:aa:96:81:b8:35:c4:c1:18:cc:42:2e:
e4:74:b3:72:5b:98:e6:01:2d:ee:e0:fb:ef:78:e9:
07:96:3b:63:c3:fa:8c:48:47:9f:bc:65:28:05:29:
4b:4f:6a:c8:f1:b7:4e:f9:38:2c:dc:08:c4:0e:99:
01:4b:ae:1a:8b:c2:5c:b4:ab:de:3c:35:49:7c:c0:
11:75:65:15:93:82:59:61:90:06:e5:9e:04:e8:f3:
c6:f7:ba:7b:7c:26:c0:57:d6:7a:4a:fa:9d:8d:23:
87:eb:7b:04:35:64:63:a5:22:ee:ed:34:0b:03:f3:
ae:a9:f1:c0:b8:e4:67:67:43:31:e9:46:42:22:e8:
43:f4:51:5c:fa:e7:d6:b9:08:e3:3c:c8:2c:99:03:
53:b7:e8:be:51:d4:99:14:56:a8:57:05:60:39:47:
28:83:66:fb:0f:b0:ba:a7:c1:c0:c0:69:36:6f:7c:
11:9f:ce:94:01:4b:1a:a3:57:69:85:bd:a9:02:df:
c2:31:b1:3b:39:e4:34:61:80:69:3b:69:de:dc:c7:
1d:8c:25:31:d8:11:26:db:30:2d:64:a8:ec:d7:11:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:31:4F:0B:6D:75:E9:3D:72:15:63:1F:2F:AA:06:15:CB:7B:C8:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uTFPC2116T1yFWMfL6oGFct7yKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:58:5a:ee:57:24:a1:c8:58:30:39:ac:99:38:e4:b1:03:f2:
38:12:f7:1a:10:b6:e4:ac:25:f8:a4:63:35:8f:f7:e2:3b:5e:
72:d5:08:43:b3:9e:29:2b:19:5e:e6:fb:fa:15:75:22:35:13:
9a:d4:fe:bb:69:ca:b9:4e:ed:19:fd:67:ad:fd:aa:18:a7:32:
4f:4e:fd:e2:84:72:09:1e:7e:d6:c6:b8:65:f8:94:32:ca:f7:
a1:23:aa:e7:2c:d4:bc:5c:1b:b7:17:1f:7b:85:d3:92:70:1d:
01:ed:fa:7c:bc:06:b9:2c:ca:bf:87:c3:49:dd:80:53:1e:7b:
df:8e:7a:96:f6:2a:a8:84:df:1f:40:e7:9d:42:4d:ac:8c:08:
39:77:aa:9e:56:d2:ae:da:d4:26:77:b9:44:15:4f:21:a6:d5:
25:fa:47:4a:5c:2b:2f:c6:be:1a:04:c4:37:13:ce:5d:62:75:
78:fe:f6:a7:1a:48:bf:d5:c6:43:1e:d5:75:6e:32:56:0f:b0:
54:0a:7f:6f:c7:49:76:d2:7f:65:60:4c:fe:5e:da:db:24:0e:
22:47:75:35:00:2c:fc:42:e9:d8:3e:d7:a2:cb:fc:be:d9:64:
95:64:61:ac:4e:e1:d5:de:99:43:df:cd:6f:22:92:a1:a6:72:
08:43:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:44:32 2025 by rpki-client