Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhXlbg7-HjaRdMTl_HSbtU6jKLI.roa
File: uhXlbg7-HjaRdMTl_HSbtU6jKLI.roa (raw, json)
Hash identifier: NHr9q7RijMUfdNhYyJZCWmK5GVrlPYs87Yngy/5PX/I=
Subject key identifier: BA:15:E5:6E:0E:FE:1E:36:91:74:C4:E5:FC:74:9B:B5:4E:A3:28:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E56F237
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhXlbg7-HjaRdMTl_HSbtU6jKLI.roa
Signing time: Mon 28 Feb 2022 03:10:05 +0000
ROA not before: Mon 28 Feb 2022 03:10:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851191863 (0x6e56f237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 03:10:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba15e56e0efe1e369174c4e5fc749bb54ea328b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:54:e7:32:37:c0:85:f8:00:31:ea:eb:d4:
11:18:22:1f:a3:f3:5d:bc:36:08:e0:5e:97:7c:2c:
77:13:f0:fa:34:e0:08:4b:6d:7b:9c:df:79:2a:8b:
e9:80:46:73:da:34:68:bc:c7:39:47:4c:5c:ab:d3:
0e:1c:73:a1:97:f8:30:c3:9e:bc:69:c2:f9:e5:88:
08:6b:a9:5a:b8:b3:f1:c8:e1:87:d1:6a:34:05:d7:
41:5a:27:03:c1:c6:bc:03:4c:ca:39:a7:a9:46:16:
a2:d0:ef:3b:a1:19:6a:6e:eb:82:29:34:6f:15:d2:
cd:87:ee:b1:45:68:0e:7d:d8:1e:1b:de:fe:f2:f3:
b1:99:e9:05:8f:1b:dc:f9:7b:0b:15:7c:11:a2:d0:
6c:d1:b1:58:f2:00:2d:d8:03:af:9e:6c:c5:48:c7:
9b:fe:40:15:ff:d8:d4:15:47:59:a9:d4:37:61:40:
99:f0:da:85:89:f3:63:9f:88:0e:6c:1f:f8:fe:42:
d2:e5:9c:fa:23:e1:45:66:cd:9b:ba:01:33:4f:f4:
cc:18:76:02:03:5b:e6:2e:e4:45:61:1f:e4:f5:b3:
0a:e3:fd:55:4b:91:52:f6:e0:68:89:bf:61:69:5e:
1c:41:87:3b:17:b7:fb:68:71:c0:0b:1a:df:4f:0e:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:E5:6E:0E:FE:1E:36:91:74:C4:E5:FC:74:9B:B5:4E:A3:28:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhXlbg7-HjaRdMTl_HSbtU6jKLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:ef:e9:24:19:9b:37:21:b0:85:7a:70:c3:5c:e0:b1:fb:a6:
11:c1:ec:9f:aa:7f:bb:78:e2:9a:25:7e:f0:3d:3f:8f:3f:bf:
cd:16:00:84:bc:d2:32:d9:da:06:f9:bb:a7:d4:18:9b:80:f6:
5e:df:2a:99:5b:24:e8:cc:f8:1a:ea:71:df:06:cf:a5:69:d9:
02:ec:65:6b:b1:6a:f0:38:fa:9f:7a:c6:04:e0:e3:8b:20:8c:
2f:fb:3a:0c:1a:fa:70:c4:32:7e:40:7e:73:c4:f0:73:ce:4d:
87:71:21:4c:c1:c6:94:48:68:53:d6:5d:fd:11:b1:b1:44:a1:
6c:75:f1:d6:d1:a3:56:d5:6c:9c:d6:ad:60:ca:e1:0e:06:12:
7d:1a:a1:61:c3:af:6e:ec:65:ec:0c:b1:fc:dc:ad:09:98:e8:
19:03:b0:8b:8b:d9:4b:e8:8d:37:b0:32:dd:f6:d3:4d:8a:06:
02:bc:b5:7a:ec:66:6b:01:02:06:c8:17:be:f7:43:32:fc:f8:
ff:e5:43:8b:99:a1:67:35:a7:65:75:d9:78:96:26:74:f2:72:
99:f6:01:8d:f9:94:02:a1:3d:4e:7d:1e:99:6b:f5:a8:69:e2:
94:b3:50:04:2c:df:13:3e:14:7a:dc:91:8c:6c:01:0f:a3:b9:
57:8e:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:23 2025 by rpki-client