Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubJy7gzSuuUjxOIEep4qdeCshOc.roa
File: ubJy7gzSuuUjxOIEep4qdeCshOc.roa (raw, json)
Hash identifier: sxrbUhAbu2tHEjxHTPyjaiXhzkNN/gVp9Z2ycU5d6SA=
Subject key identifier: B9:B2:72:EE:0C:D2:BA:E5:23:C4:E2:04:7A:9E:2A:75:E0:AC:84:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185DB519DB3CDB06D90146D0277F74B1A63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubJy7gzSuuUjxOIEep4qdeCshOc.roa
Signing time: Sun 22 Jan 2023 21:10:37 +0000
ROA not before: Sun 22 Jan 2023 21:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:db:51:9d:b3:cd:b0:6d:90:14:6d:02:77:f7:4b:1a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 22 21:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b272ee0cd2bae523c4e2047a9e2a75e0ac84e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:bd:f2:09:de:14:ed:bc:71:db:22:98:20:
73:c5:eb:04:85:24:3d:2b:29:f6:dc:01:bd:44:cb:
49:58:3a:f6:83:3f:63:11:d6:10:1c:e5:b4:2b:11:
8b:5c:7e:da:e7:8a:87:95:6e:eb:ee:2a:49:dd:c0:
3a:38:a8:5d:62:45:8c:ed:2b:6e:fb:f8:b0:4c:5e:
79:47:92:e4:50:7b:4f:ec:c8:08:4b:01:da:e6:01:
42:34:75:ee:06:c2:c4:82:fc:43:91:04:09:18:09:
16:88:56:88:01:a5:31:3e:bc:3b:f4:8d:fc:74:70:
f5:ed:0e:0e:8f:10:4e:a1:80:94:e7:54:f5:bc:d3:
76:64:d4:00:27:42:62:51:a0:ca:f7:a1:1c:79:04:
40:d6:25:aa:aa:47:8c:2e:32:04:7d:b2:73:08:ec:
39:b7:b5:1d:e5:d6:27:8f:92:f0:e8:43:04:9d:2f:
68:05:73:5c:90:0a:44:3f:47:a5:15:d0:3d:96:7a:
50:a5:d6:10:e3:12:61:eb:97:23:f2:46:4f:17:f5:
c4:41:8b:4b:29:f2:2a:a6:10:5e:39:51:a9:42:3b:
b9:52:46:c7:14:0d:22:44:35:b9:57:af:ac:5c:09:
08:e9:e0:6d:c2:72:b7:f8:96:d8:c2:27:c5:43:3f:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B2:72:EE:0C:D2:BA:E5:23:C4:E2:04:7A:9E:2A:75:E0:AC:84:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubJy7gzSuuUjxOIEep4qdeCshOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:eb:c4:54:ee:13:fb:b6:f0:d2:f3:0c:33:4a:a3:ee:0d:00:
0f:c0:c4:ee:10:29:47:dc:b0:21:8b:5b:aa:d8:c5:4c:f5:a5:
bb:4c:83:33:a9:14:16:6a:6b:85:cf:1a:db:f8:a0:f7:b9:ef:
c4:2e:5d:4e:8a:a1:c9:20:5a:37:fb:b6:7a:ea:4b:d0:c5:69:
99:55:9f:c2:31:cf:81:c5:4f:76:81:f3:85:01:ae:ad:d1:21:
ff:82:e1:b3:1a:b2:b7:33:a2:6d:98:df:76:4e:4b:6c:9f:f4:
6e:48:bd:0a:0a:45:dc:3c:ca:cd:ef:04:d9:ce:de:fd:6c:33:
db:40:7c:9e:20:cb:16:36:18:6a:ec:10:42:3e:d8:cc:7d:27:
94:70:4e:95:f7:d5:83:12:e4:6a:ea:bf:28:5d:2f:99:b7:5b:
cc:3d:90:8f:6e:91:7f:05:af:4d:69:a6:fa:2c:0d:e1:87:b0:
ce:e8:86:7f:0b:5d:10:a5:a4:61:ca:4a:20:65:74:93:bb:bb:
1d:9f:ca:ef:11:8b:cb:ad:c9:39:cd:58:67:d5:9c:c2:22:4b:
7e:f9:c6:03:14:bb:8c:45:52:f0:5b:af:cd:e2:71:3c:3a:92:
57:86:d1:d9:5c:79:bc:45:c9:5f:0c:28:73:0b:53:3b:25:63:
53:c2:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:35:44 2025 by rpki-client