Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhpGe4XQ1SeypMyOPcVhRPsvMJk.roa
File: uhpGe4XQ1SeypMyOPcVhRPsvMJk.roa (raw, json)
Hash identifier: 1rnK2/Wuy2GhYbkpIo/Be2o8wDtXRed4gwIqj0dSfME=
Subject key identifier: BA:1A:46:7B:85:D0:D5:27:B2:A4:CC:8E:3D:C5:61:44:FB:2F:30:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 784B7793
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhpGe4XQ1SeypMyOPcVhRPsvMJk.roa
Signing time: Mon 04 Apr 2022 07:12:20 +0000
ROA not before: Mon 04 Apr 2022 07:12:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2018211731 (0x784b7793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 07:12:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba1a467b85d0d527b2a4cc8e3dc56144fb2f3099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:50:da:89:a0:db:28:23:a0:71:b3:c2:14:
ae:e7:63:64:e9:de:e5:66:69:bd:8d:cf:55:65:5e:
30:61:55:68:bc:7e:9c:2f:95:6e:36:82:65:e8:b7:
fb:e7:cf:66:a0:ca:ac:35:7b:62:f6:7a:e4:76:86:
45:6c:3e:59:45:23:21:9e:14:84:86:e3:8b:19:08:
ef:52:b3:ed:d6:7f:60:52:d8:ea:6a:6a:03:f6:bf:
d6:4e:83:cc:6b:d9:41:c5:4c:6c:a3:c5:51:ee:d0:
16:8c:f6:7b:bd:7f:47:26:d9:be:75:5d:77:01:14:
f0:e3:c5:77:aa:96:81:45:5c:d4:d3:ec:15:7a:e5:
97:21:95:32:56:a8:ce:8c:4d:5b:8d:c1:cd:e0:b5:
c0:91:eb:a6:26:5f:93:3d:7c:90:09:09:6d:2e:a7:
df:b2:07:9e:35:35:25:dd:ad:40:6c:ce:e8:8c:4e:
af:6d:b0:d6:a5:b9:61:08:82:fc:77:7d:b8:79:23:
e3:f2:ed:76:a1:f4:ec:d4:e1:da:23:1c:96:7c:cc:
37:db:43:63:a3:a4:8d:b6:8a:c7:8b:51:27:e6:2b:
dc:1d:49:f6:9a:e7:33:a6:b1:93:05:42:3b:29:a2:
89:97:cd:18:6e:b0:38:c2:df:a2:59:2c:27:70:40:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1A:46:7B:85:D0:D5:27:B2:A4:CC:8E:3D:C5:61:44:FB:2F:30:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uhpGe4XQ1SeypMyOPcVhRPsvMJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:10:a6:c5:92:55:b3:10:e0:8e:eb:91:88:8a:68:c5:31:15:
4d:30:ab:60:63:e2:40:85:04:b9:c7:f0:5b:15:af:85:d0:e2:
fc:d1:d6:46:e0:12:1c:87:b5:17:8f:1f:33:2d:d7:3d:bf:44:
56:eb:49:99:8c:18:29:f9:0f:ac:42:1e:5a:cd:ed:9b:dc:a5:
2a:09:b6:96:58:da:32:45:d4:b1:73:bf:62:47:83:9e:12:6f:
58:29:54:6b:0d:b8:80:e7:b5:7a:e6:fb:84:89:a1:a2:8f:f0:
95:a8:4e:c9:d6:f1:a2:7f:e2:74:b8:25:fe:cd:f5:d7:ac:a3:
ae:56:d7:2b:16:e7:41:98:70:67:1c:d6:39:be:bc:50:0a:92:
21:b8:64:24:e1:7f:86:6a:fd:96:b1:23:6c:11:e7:8c:86:90:
6a:62:db:60:2c:5c:3d:c0:5c:62:70:c5:cf:e8:f8:52:2e:c5:
f9:53:8b:ae:98:14:47:22:ed:0e:1e:f6:4a:ba:15:9f:c0:ad:
ec:52:ca:7b:bb:d6:f5:f1:be:ed:37:c6:73:27:ac:ca:1b:fd:
da:56:11:f0:e3:91:6b:db:a4:f1:cd:19:6c:a4:7d:ac:e0:80:
12:ab:ca:d0:31:f3:25:b2:2d:61:e3:4b:d9:b8:2c:3f:1b:4f:
bc:9c:74:3d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEeEt3kzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQw
NDA3MTIyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmExYTQ2N2I4NWQw
ZDUyN2IyYTRjYzhlM2RjNTYxNDRmYjJmMzA5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANhzUNqJoNsoI6Bxs8IUrudjZOne5WZpvY3PVWVeMGFVaLx+
nC+VbjaCZei3++fPZqDKrDV7YvZ65HaGRWw+WUUjIZ4UhIbjixkI71Kz7dZ/YFLY
6mpqA/a/1k6DzGvZQcVMbKPFUe7QFoz2e71/RybZvnVddwEU8OPFd6qWgUVc1NPs
FXrllyGVMlaozoxNW43BzeC1wJHrpiZfkz18kAkJbS6n37IHnjU1Jd2tQGzO6IxO
r22w1qW5YQiC/Hd9uHkj4/LtdqH07NTh2iMclnzMN9tDY6OkjbaKx4tRJ+Yr3B1J
9prnM6axkwVCOymiiZfNGG6wOMLfolksJ3BAQT0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS6GkZ7hdDVJ7KkzI49xWFE+y8wmTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3VocEdlNFhRMVNleXBNeU9QY1ZoUlBzdk1Kay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBrEKbFklWzEOCO65GIimjFMRVNMKtgY+JAhQS5
x/BbFa+F0OL80dZG4BIch7UXjx8zLdc9v0RW60mZjBgp+Q+sQh5aze2b3KUqCbaW
WNoyRdSxc79iR4OeEm9YKVRrDbiA57V65vuEiaGij/CVqE7J1vGif+J0uCX+zfXX
rKOuVtcrFudBmHBnHNY5vrxQCpIhuGQk4X+Gav2WsSNsEeeMhpBqYttgLFw9wFxi
cMXP6PhSLsX5U4uumBRHIu0OHvZKuhWfwK3sUsp7u9b18b7tN8ZzJ6zKG/3aVhHw
45Fr26TxzRlspH2s4IASq8rQMfMlsi1h40vZuCw/G0+8nHQ9
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:53 2025 by rpki-client