Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ucuIvXKoj4mjHZEfMHwPpHcH1Yw.roa
File: ucuIvXKoj4mjHZEfMHwPpHcH1Yw.roa (raw, json)
Hash identifier: xMjwvutyNlCd1TN5V0Wdwzob/uOvZfLy7VaHLns5BGE=
Subject key identifier: B9:CB:88:BD:72:A8:8F:89:A3:1D:91:1F:30:7C:0F:A4:77:07:D5:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D252ED2F2E9E0BDE4EC84BF32DFC493F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ucuIvXKoj4mjHZEfMHwPpHcH1Yw.roa
Signing time: Fri 02 Dec 2022 10:12:40 +0000
ROA not before: Fri 02 Dec 2022 10:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:52:ed:2f:2e:9e:0b:de:4e:c8:4b:f3:2d:fc:49:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 10:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9cb88bd72a88f89a31d911f307c0fa47707d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:56:27:17:6e:f8:ef:e3:36:f2:53:f5:c0:
b9:b0:9f:83:60:a1:8c:d6:1e:27:ff:17:7c:4c:bf:
42:4f:22:6a:48:61:dc:8a:f0:d7:49:70:9b:89:c1:
6f:b6:1c:55:47:7b:a2:e3:db:a1:63:c9:fd:6a:4b:
7e:b0:d2:d3:ac:94:1e:c8:ac:4a:c0:1c:8b:e4:d6:
fe:96:97:86:51:2b:b9:f3:d9:9b:25:03:67:bd:ed:
88:ba:12:c2:10:e5:8b:fc:a3:19:cf:96:45:61:7a:
43:06:b6:96:4b:c8:bc:5a:3e:8d:a7:e2:4e:4d:cb:
25:40:0f:20:b5:71:1b:5e:ba:66:5a:46:11:2f:4d:
2b:4a:c7:8a:3a:a7:4c:4c:22:bc:cf:67:43:cb:5b:
4a:ea:54:7e:45:4b:d9:f1:c9:06:c8:84:7c:ee:5b:
28:bd:bf:ee:93:ea:c8:f7:5d:ac:aa:45:5d:10:f9:
64:e1:35:ca:cd:aa:47:d3:22:94:5d:21:34:79:8c:
3b:bc:82:b6:a3:f2:a1:a7:4e:f8:a7:57:de:8e:1d:
d3:39:1d:e6:57:b1:82:d1:86:fc:26:1c:02:38:af:
90:47:ad:c8:b6:f8:ee:57:85:ec:dc:b0:fd:a2:ec:
06:74:a3:62:ff:ba:e7:b1:97:f0:8e:ab:d2:df:15:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:88:BD:72:A8:8F:89:A3:1D:91:1F:30:7C:0F:A4:77:07:D5:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ucuIvXKoj4mjHZEfMHwPpHcH1Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:8a:65:2a:bf:ea:c9:6c:25:20:22:0e:d5:bb:d6:d5:c3:53:
56:ab:c7:62:aa:f4:45:82:59:7f:f9:a1:b1:63:04:4a:9b:f6:
5b:55:5f:83:d4:cc:f4:71:80:02:92:4c:e6:f6:8d:44:5a:68:
54:9c:08:02:08:f3:68:fe:2c:b4:2b:63:30:75:a9:4a:ec:f7:
a3:1e:84:0c:7f:02:9c:2c:45:01:7a:27:02:3d:3d:74:d0:1b:
42:a7:e7:59:27:1a:8c:35:f8:9c:72:58:1d:bb:df:71:0d:62:
eb:b8:99:02:af:2f:a1:12:9e:7f:83:a5:57:57:06:c1:97:68:
ff:92:1b:aa:7b:a5:de:5f:d5:cb:1b:2d:75:71:3a:ae:7c:26:
d1:e4:13:ab:64:37:83:76:ea:81:4a:e7:6e:ea:a4:15:51:1b:
91:de:db:6f:5d:da:bb:bd:93:8e:83:4e:48:fe:5f:cd:8d:b7:
2e:3d:74:58:a2:be:38:e3:77:74:6f:2c:3f:d4:98:09:c5:db:
ac:08:82:e9:8a:f9:ea:b3:7e:e5:fb:8d:c8:00:ae:9c:9c:2d:
da:d1:8f:5d:a9:51:d0:cc:72:66:fc:a4:d5:8b:20:ca:2c:ca:
09:86:6f:67:54:68:4c:34:79:03:b0:de:d9:4d:90:34:62:e0:
84:2f:1a:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTSUu0vLp4L3k7IS/Mt/Ek/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjAyMTAxMjQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWNiODhiZDcyYTg4Zjg5YTMxZDkxMWYzMDdjMGZhNDc3MDdkNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9dWJxdu+O/jNvJT9cC5sJ+DYKGM
1h4n/xd8TL9CTyJqSGHcivDXSXCbicFvthxVR3ui49uhY8n9akt+sNLTrJQeyKxK
wByL5Nb+lpeGUSu589mbJQNnve2IuhLCEOWL/KMZz5ZFYXpDBraWS8i8Wj6Np+JO
TcslQA8gtXEbXrpmWkYRL00rSseKOqdMTCK8z2dDy1tK6lR+RUvZ8ckGyIR87lso
vb/uk+rI912sqkVdEPlk4TXKzapH0yKUXSE0eYw7vIK2o/Khp074p1fejh3TOR3m
V7GC0Yb8JhwCOK+QR63ItvjuV4Xs3LD9ouwGdKNi/7rnsZfwjqvS3xUsnQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLnLiL1yqI+Jox2RHzB8D6R3B9WMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdWN1SXZYS29qNG1qSFpFZk1Id1BwSGNIMVl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACKKZSq/6slsJSAiDtW7
1tXDU1arx2Kq9EWCWX/5obFjBEqb9ltVX4PUzPRxgAKSTOb2jURaaFScCAII82j+
LLQrYzB1qUrs96MehAx/ApwsRQF6JwI9PXTQG0Kn51knGow1+JxyWB2733ENYuu4
mQKvL6ESnn+DpVdXBsGXaP+SG6p7pd5f1csbLXVxOq58JtHkE6tkN4N26oFK527q
pBVRG5He229d2ru9k46DTkj+X82Nty49dFiivjjjd3RvLD/UmAnF26wIgumK+eqz
fuX7jcgArpycLdrRj12pUdDMcmb8pNWLIMosygmGb2dUaEw0eQOw3tlNkDRi4IQv
Gq0=
-----END CERTIFICATE-----
Generated at Thu May 1 08:25:13 2025 by rpki-client