Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubIFJ5_Fs7OwIpUX-8daVObfB3w.roa
File: ubIFJ5_Fs7OwIpUX-8daVObfB3w.roa (raw, json)
Hash identifier: ogFj+rX09zNkn0aA4hQ8vtSyqS5n0JSUUTiGdNueDik=
Subject key identifier: B9:B2:05:27:9F:C5:B3:B3:B0:22:95:17:FB:C7:5A:54:E6:DF:07:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018557FF8546907B9A6D6FED80499A153001
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubIFJ5_Fs7OwIpUX-8daVObfB3w.roa
Signing time: Wed 28 Dec 2022 09:10:41 +0000
ROA not before: Wed 28 Dec 2022 09:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:ff:85:46:90:7b:9a:6d:6f:ed:80:49:9a:15:30:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 09:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9b205279fc5b3b3b0229517fbc75a54e6df077c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:07:3e:b0:5f:e7:cf:b1:55:25:2a:79:cf:b6:
d5:01:30:23:1c:d9:88:54:a3:ad:ea:38:34:12:33:
03:69:9d:09:81:60:35:38:9f:45:8f:41:00:57:a5:
5e:74:b9:0d:53:3f:50:87:7e:8b:82:bf:d6:b9:3b:
8f:8c:ff:d4:32:78:fa:bd:53:dd:53:25:e6:00:48:
d2:a8:d3:80:f8:cf:9b:e9:3e:c2:12:a8:60:f4:a4:
f9:56:4d:a9:98:24:41:6c:ce:82:48:6e:e4:65:45:
a8:d7:0c:7b:6e:ae:57:a2:e0:6c:3c:24:7d:8e:f4:
f1:09:64:61:33:12:f3:03:8e:dd:c1:a7:b3:f8:e9:
5b:5c:6d:61:73:50:5f:0c:25:d2:e1:59:f7:d2:55:
cb:0e:48:95:1b:70:2e:0d:c1:bb:52:7d:d3:25:7b:
b8:e8:08:1e:fc:58:33:c3:bb:29:bf:96:fe:9e:d4:
ff:cd:33:f6:6c:15:b7:f4:6f:8c:a4:56:b0:f0:d6:
92:c8:e7:64:dc:4b:05:4c:3c:20:3e:a8:e6:45:20:
33:a0:c8:ac:15:3b:e1:41:7f:a5:ff:cb:df:8d:c0:
16:7b:57:63:ed:b9:21:89:53:11:3d:da:47:f7:bd:
e7:b5:8c:b9:02:99:27:bd:4e:9e:8f:5f:38:9c:e1:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B2:05:27:9F:C5:B3:B3:B0:22:95:17:FB:C7:5A:54:E6:DF:07:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubIFJ5_Fs7OwIpUX-8daVObfB3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:86:52:d1:90:96:a8:96:30:37:8d:51:c6:af:76:44:2e:74:
f7:53:22:29:35:3f:39:0c:9b:23:09:ac:54:8b:09:bd:80:9b:
e2:b5:78:81:e5:a4:60:09:25:62:98:30:a2:ab:ec:4e:82:92:
c2:27:ac:b2:08:75:52:3f:75:8e:5b:af:63:e8:a7:af:7c:90:
31:0d:ff:30:a9:e5:c2:02:61:89:71:a5:a5:ed:18:2b:bb:a1:
4f:2b:53:29:e8:92:b6:a3:e7:9a:cb:b0:95:bb:8f:85:d4:ff:
0b:a6:24:36:77:5b:ee:2d:c4:d7:1b:d0:6d:c3:0b:26:e6:99:
6e:76:08:ec:7f:5a:3f:26:d2:df:9a:a3:f7:58:46:6d:26:b0:
50:83:ff:fe:41:a3:1b:9d:02:50:52:1e:20:82:ad:08:75:ab:
02:b7:19:05:6b:23:6a:d5:20:09:fb:0b:67:ae:9e:14:4c:7a:
53:28:37:90:13:90:5d:a3:1c:61:1e:b2:7a:c5:6b:b9:af:ee:
25:be:28:b5:c1:f8:86:be:84:73:d1:d6:5a:c6:0d:9b:c5:01:
55:2e:58:04:5e:27:85:60:04:b6:57:ea:9d:ee:85:df:df:dd:
f1:20:16:fd:b6:78:0c:30:29:3e:ea:c6:e1:6d:a2:71:0c:29:
69:db:0d:78
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVX/4VGkHuabW/tgEmaFTABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI4MDkxMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWIyMDUyNzlmYzViM2IzYjAyMjk1MTdmYmM3NWE1NGU2ZGYwNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQc+sF/nz7FVJSp5z7bVATAjHNmI
VKOt6jg0EjMDaZ0JgWA1OJ9Fj0EAV6VedLkNUz9Qh36Lgr/WuTuPjP/UMnj6vVPd
UyXmAEjSqNOA+M+b6T7CEqhg9KT5Vk2pmCRBbM6CSG7kZUWo1wx7bq5XouBsPCR9
jvTxCWRhMxLzA47dwaez+OlbXG1hc1BfDCXS4Vn30lXLDkiVG3AuDcG7Un3TJXu4
6Age/Fgzw7spv5b+ntT/zTP2bBW39G+MpFaw8NaSyOdk3EsFTDwgPqjmRSAzoMis
FTvhQX+l/8vfjcAWe1dj7bkhiVMRPdpH973ntYy5ApknvU6ej184nOFb1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLmyBSefxbOzsCKVF/vHWlTm3wd8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdWJJRko1X0ZzN093SXBVWC04ZGFWT2JmQjN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAISGUtGQlqiWMDeNUcav
dkQudPdTIik1PzkMmyMJrFSLCb2Am+K1eIHlpGAJJWKYMKKr7E6CksInrLIIdVI/
dY5br2Pop698kDEN/zCp5cICYYlxpaXtGCu7oU8rUynokraj55rLsJW7j4XU/wum
JDZ3W+4txNcb0G3DCybmmW52COx/Wj8m0t+ao/dYRm0msFCD//5BoxudAlBSHiCC
rQh1qwK3GQVrI2rVIAn7C2eunhRMelMoN5ATkF2jHGEesnrFa7mv7iW+KLXB+Ia+
hHPR1lrGDZvFAVUuWAReJ4VgBLZX6p3uhd/f3fEgFv22eAwwKT7qxuFtonEMKWnb
DXg=
-----END CERTIFICATE-----
Generated at Thu May 1 05:38:54 2025 by rpki-client