Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uUYauyTHZivnLKOf4HbUxF1JjIU.roa
File: uUYauyTHZivnLKOf4HbUxF1JjIU.roa (raw, json)
Hash identifier: 3N5DuIMWlKToIQL6rkNVVzfx3pEfbnQbgbhMbqgS2U8=
Subject key identifier: B9:46:1A:BB:24:C7:66:2B:E7:2C:A3:9F:E0:76:D4:C4:5D:49:8C:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843652D957E64C69ED744914F30A2537D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uUYauyTHZivnLKOf4HbUxF1JjIU.roa
Signing time: Wed 02 Nov 2022 03:11:50 +0000
ROA not before: Wed 02 Nov 2022 03:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:36:52:d9:57:e6:4c:69:ed:74:49:14:f3:0a:25:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 2 03:11:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9461abb24c7662be72ca39fe076d4c45d498c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:48:db:9d:64:9c:06:16:62:68:1e:d3:25:
d1:cf:3c:0a:78:3b:6e:0e:63:27:9b:f6:c7:50:0e:
8c:94:2d:57:09:3a:fc:4b:9e:c3:39:66:2b:9f:95:
cd:97:7e:30:51:ab:69:01:1e:76:c3:cb:4d:58:9f:
53:b2:e1:b6:56:ce:36:8e:bb:48:fd:42:f5:b3:92:
f5:3c:b8:1e:f5:49:c5:86:72:b5:a1:90:e3:f1:98:
46:c3:b9:e8:a3:ca:b8:02:52:67:12:36:b6:5c:70:
70:84:af:7e:85:60:24:97:a9:80:b3:ea:ec:f0:d6:
7f:87:4f:f0:d2:77:05:d8:88:a6:4a:bc:48:dd:c6:
fd:e8:38:34:d6:ff:ca:43:1a:65:91:ad:bc:ac:64:
cc:eb:92:60:7b:68:20:de:46:93:a7:0f:45:d8:fa:
ef:1f:b4:ea:0e:8b:0a:b6:97:64:03:75:a9:fe:7f:
9d:3b:dd:22:60:46:79:c0:f3:cc:69:2e:81:c1:84:
98:4d:dd:57:29:c5:a6:64:87:ea:e4:c6:2c:94:cd:
06:a4:ed:33:40:87:e4:04:e8:e0:10:06:be:eb:50:
c7:c6:1d:b4:13:b0:d3:0e:53:16:34:f9:ee:c7:b1:
64:54:b4:c1:e1:5c:a6:de:fc:1e:c6:8d:96:4d:54:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:1A:BB:24:C7:66:2B:E7:2C:A3:9F:E0:76:D4:C4:5D:49:8C:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uUYauyTHZivnLKOf4HbUxF1JjIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:c6:91:81:c5:0a:60:76:62:1e:79:48:b8:26:7e:44:e6:46:
54:54:9d:e9:6e:c8:15:e8:11:5c:e5:7d:13:47:37:6a:06:98:
5d:7d:57:e1:29:b3:bb:8d:92:c9:3c:a9:21:59:43:c7:92:64:
eb:97:7b:6b:f9:26:46:7d:c6:94:e5:bb:12:ee:9f:5d:6a:e6:
71:61:07:c0:87:91:90:d9:48:8b:33:3a:09:e4:4d:d9:5a:2d:
9b:42:a8:d2:db:2a:d9:99:50:8b:28:a5:7f:8a:6a:7f:84:43:
91:f1:e3:2e:4d:89:7f:c4:9b:8c:ac:55:53:81:d1:b8:86:a0:
c6:b9:10:e9:ed:69:57:cd:bf:87:19:6a:69:bc:b1:95:4c:7d:
36:62:26:a7:31:ee:a0:5d:f1:a4:cb:84:f4:4f:d6:3a:a1:de:
16:b9:ec:5d:cf:5f:a2:77:a4:52:f5:83:26:3d:b7:d2:34:10:
34:08:5f:ff:86:89:53:1b:1b:b6:d7:e2:71:49:a3:4a:60:fe:
57:de:f7:91:00:88:fc:81:c5:5d:ee:ad:1a:ed:27:05:52:fd:
8f:eb:e5:f1:32:31:4c:63:71:f1:3a:a9:1a:66:d0:80:91:df:
2d:13:2e:64:27:2b:78:85:56:c8:1e:13:65:33:5b:b6:bc:19:
48:fe:9a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:50:55 2025 by rpki-client