Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uYynCwhWazkiIYZpRGwZSJCYQyM.roa
File: uYynCwhWazkiIYZpRGwZSJCYQyM.roa (raw, json)
Hash identifier: O56Lqp8TpkhTGZcNYplOXKpKFJKJ4X9BOae8WUGpY6U=
Subject key identifier: B9:8C:A7:0B:08:56:6B:39:22:21:86:69:44:6C:19:48:90:98:43:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E43141B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uYynCwhWazkiIYZpRGwZSJCYQyM.roa
Signing time: Sun 27 Feb 2022 20:13:31 +0000
ROA not before: Sun 27 Feb 2022 20:13:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849889819 (0x6e43141b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 20:13:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b98ca70b08566b3922218669446c194890984323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:2a:f4:12:4c:f9:38:a3:aa:27:e2:d8:21:
75:75:f5:fa:64:2b:c8:32:13:2c:b8:2c:69:0e:1c:
41:dc:91:91:98:9b:6a:8b:00:76:ec:bd:8b:0c:26:
e8:65:d2:a3:36:98:42:00:75:9a:cb:1f:68:cf:87:
f5:74:4f:01:8e:1e:44:ed:ae:d8:71:8e:5f:ed:a7:
60:1e:9f:5a:21:17:8b:bd:ee:b9:34:3f:ff:b5:71:
00:9a:0b:ea:e5:40:75:e6:3e:a3:b3:f3:c8:a1:cc:
94:86:6f:61:7b:08:35:70:be:fd:32:7e:65:a6:62:
f2:ab:1d:82:66:e0:b3:a1:73:fd:90:9b:4d:9e:c1:
ec:2c:14:57:42:5b:d1:70:46:85:f7:45:43:6b:5c:
41:34:31:03:d7:94:89:a0:75:f4:fa:a4:5b:2f:16:
6a:0f:dc:20:87:4b:18:4c:c1:ac:8d:13:3f:69:ed:
0f:41:96:ef:b6:be:75:5d:c6:a2:ce:3a:67:18:ac:
64:d7:89:51:b7:7b:7b:13:a7:2f:bd:21:76:1c:96:
6f:37:fb:af:0f:fc:38:11:28:c7:d8:e9:a7:4a:c1:
af:03:47:02:2e:f9:94:0f:d7:b4:eb:fa:04:84:b2:
71:c4:b9:e5:58:3d:69:76:42:18:cd:1b:e4:b9:3d:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8C:A7:0B:08:56:6B:39:22:21:86:69:44:6C:19:48:90:98:43:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uYynCwhWazkiIYZpRGwZSJCYQyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:51:3f:59:1e:5e:df:6c:df:e4:dd:ee:fb:42:53:8d:b6:71:
80:b1:72:e7:e2:75:f5:45:04:26:cd:d7:4e:15:02:63:0c:81:
7a:5f:33:e6:3d:0a:20:c6:4c:7e:66:fd:e9:f1:8d:da:d9:98:
f8:8d:9c:7f:d2:92:3a:a4:72:d8:c9:68:b5:71:c7:92:70:54:
1f:2a:8a:60:ab:3c:42:4d:b2:11:74:1a:64:b4:61:dd:a1:96:
87:44:1b:78:0a:5b:4d:3d:54:d5:23:25:03:e7:3a:38:75:d8:
45:17:75:b8:e6:10:84:aa:d9:c0:95:ab:52:a0:60:d9:ab:17:
87:f4:9b:38:da:86:09:48:df:f6:55:52:b5:60:e9:a2:02:8a:
cb:3e:fe:1b:49:80:26:61:55:24:47:2b:5b:ff:b4:b6:a6:16:
d7:42:af:82:d0:8d:f0:99:3e:4f:4b:a8:b6:50:56:48:92:fc:
46:0f:c2:18:0b:c3:28:50:2c:30:61:4a:37:e7:ef:25:e0:a2:
20:c3:b6:ec:76:57:93:50:61:6e:55:cd:32:dd:47:77:3e:dc:
17:e0:15:3a:ed:da:2e:8b:3f:0a:ac:35:0d:b8:31:f5:52:58:
66:c6:eb:d7:c0:bc:75:4b:51:f6:73:18:5d:f3:91:2f:f2:ad:
9c:ca:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:58:18 2025 by rpki-client