Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubg8J9d-MSuUW_91jlEuaxG0MLY.roa
File: ubg8J9d-MSuUW_91jlEuaxG0MLY.roa (raw, json)
Hash identifier: evugOc4F521DpZNM3qzmAGdh2k5rVbEh19PGKLUky+M=
Subject key identifier: B9:B8:3C:27:D7:7E:31:2B:94:5B:FF:75:8E:51:2E:6B:11:B4:30:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 671E854A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubg8J9d-MSuUW_91jlEuaxG0MLY.roa
Signing time: Wed 02 Feb 2022 07:04:26 +0000
ROA not before: Wed 02 Feb 2022 07:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:b93f:b28e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1730053450 (0x671e854a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 07:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9b83c27d77e312b945bff758e512e6b11b430b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9e:10:36:08:62:35:af:e8:be:7a:ed:76:58:
43:85:9f:1d:14:11:10:3e:31:f6:d1:12:19:9f:6a:
5e:2c:3a:38:20:7c:75:27:e3:a9:8e:29:10:85:c7:
f2:1d:f3:fd:cd:cb:32:d5:93:81:e7:94:1e:d4:8d:
7a:2c:d5:ab:31:50:59:a6:cc:e0:af:00:7e:b8:f6:
bc:01:a5:e6:91:3b:0e:8a:15:fb:88:31:93:cb:b9:
b9:18:d4:41:95:f9:91:fd:3b:a6:bf:87:7a:34:a8:
52:45:42:3f:0e:19:0d:fb:29:ea:bb:23:67:f0:48:
c6:a7:e5:ed:2a:f1:6d:40:02:d4:0e:ec:d8:2f:06:
9e:e9:b4:41:03:b6:66:af:9f:75:b6:5c:15:9a:5b:
c3:9e:ca:fc:07:4e:2a:3f:1d:f0:c3:10:b4:af:62:
24:23:66:48:ce:9c:a3:36:51:5b:f1:99:9b:16:3d:
bb:c6:75:3f:b9:77:e6:6f:1c:ff:90:3d:ba:90:bb:
2c:bd:64:e3:5b:3b:9f:b4:21:1e:b9:08:f8:9f:73:
3f:83:fd:f7:f3:d9:4e:25:9e:75:9c:e4:fd:fe:48:
82:1e:8f:f7:a0:6b:96:8e:cd:7d:76:1d:06:02:64:
59:2c:02:57:46:dd:46:50:78:07:52:c9:ad:05:db:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:3C:27:D7:7E:31:2B:94:5B:FF:75:8E:51:2E:6B:11:B4:30:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ubg8J9d-MSuUW_91jlEuaxG0MLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:cb:51:7c:79:a9:48:76:18:3b:d9:ab:95:34:87:2f:1b:69:
4f:7f:ff:15:19:29:fa:5f:23:e1:76:fe:12:5d:17:53:ce:a1:
9f:3b:80:16:d4:b6:79:7e:20:4a:91:56:28:e7:53:dd:3e:65:
ab:91:8c:2b:4d:9c:b4:e9:4b:b0:9e:67:f2:ea:0c:24:f6:fb:
19:0d:8a:26:43:da:00:32:2a:66:ef:a2:bb:cb:7e:7d:f5:a4:
cb:0c:26:b2:35:7f:e7:d8:80:79:4b:fe:f0:ba:36:20:f6:0d:
b4:ba:86:a6:91:ab:4a:72:33:dd:16:eb:67:4f:7a:b8:b4:23:
14:ab:e9:f3:e2:ec:2c:a1:02:75:5f:3d:2b:36:fe:92:c7:6e:
ba:67:f3:64:69:03:99:49:c3:b4:c9:3d:f3:28:91:0b:1e:c2:
5e:47:3d:76:b4:e9:12:c1:14:34:d3:62:58:29:fe:4c:6d:8f:
a6:cc:ea:bd:f6:af:75:c7:14:31:37:13:76:38:9f:6a:4d:e9:
75:6e:dc:4c:6b:c3:33:a3:01:ea:a1:81:22:89:94:1d:5b:61:
a0:ba:e7:70:4d:e4:18:5c:f7:f3:90:1a:a2:91:d5:a5:66:71:
cb:b9:d0:dd:bb:e6:c7:49:ca:0d:02:3e:16:b7:42:94:d8:f7:
96:74:6c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:36:07 2025 by rpki-client