Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uiJ2mA2uFH1_JO4kciT0Xo67nHM.roa
File: uiJ2mA2uFH1_JO4kciT0Xo67nHM.roa (raw, json)
Hash identifier: 7GzOWuCCao6dhiIBWFzt8Vgot/DY21bLVOzFHNwx5tY=
Subject key identifier: BA:22:76:98:0D:AE:14:7D:7F:24:EE:24:72:24:F4:5E:8E:BB:9C:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F3C9D0A241528207DB0846BA834A4404
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uiJ2mA2uFH1_JO4kciT0Xo67nHM.roa
Signing time: Thu 08 Dec 2022 22:10:00 +0000
ROA not before: Thu 08 Dec 2022 22:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f3:c9:d0:a2:41:52:82:07:db:08:46:ba:83:4a:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 22:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba2276980dae147d7f24ee247224f45e8ebb9c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:c8:19:5b:83:86:1a:c0:21:6a:51:88:87:
6b:21:33:2e:00:69:bd:b6:ff:93:ed:6c:f7:c0:98:
5b:7b:30:4d:08:38:cb:19:ef:a7:cb:f5:39:0b:1b:
13:52:8a:b2:4f:77:19:c4:46:15:b2:1d:0e:8d:bf:
98:93:ab:c0:93:c5:7d:83:bd:4e:95:5e:c3:03:8a:
10:f1:e1:c6:99:8d:89:4a:4d:e2:42:fa:a4:19:68:
28:47:80:7f:12:ca:5f:9e:ac:bb:e1:c0:d2:a7:b1:
dc:ac:9c:69:bb:1f:e2:d0:54:b3:cb:a4:0b:fd:d6:
55:66:a5:a6:15:23:fe:51:b8:f7:f6:7a:3e:c7:90:
ee:88:aa:02:50:c5:9b:e5:a0:9b:94:d5:d3:4a:6a:
53:04:f8:ac:2a:45:c8:b1:67:2f:4f:92:79:72:ca:
ef:69:03:9c:a0:4a:bd:a9:a6:dc:89:ae:85:1e:ef:
d3:2d:62:14:14:35:cd:9f:8a:52:bb:7e:12:7c:31:
b3:58:c2:f0:5d:2f:4e:34:c5:3d:5a:e2:ce:89:f9:
5f:ee:ff:7c:16:e7:65:e6:85:e9:e1:32:b9:3b:d1:
7e:3e:4e:63:46:84:eb:cb:3c:77:82:35:0e:5f:7f:
c8:e9:5a:ef:ba:7a:d1:cf:d8:c7:ce:a0:eb:da:c9:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:76:98:0D:AE:14:7D:7F:24:EE:24:72:24:F4:5E:8E:BB:9C:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uiJ2mA2uFH1_JO4kciT0Xo67nHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:00:9c:28:11:1a:31:e8:59:6d:19:84:3f:25:55:87:60:50:
85:3e:30:73:1c:a8:df:d4:cd:6d:d4:66:7b:8e:45:55:b1:30:
1b:06:f2:8b:f9:36:c5:0d:e0:bc:e4:05:71:1f:a6:c6:e6:6f:
3a:d6:c8:05:46:9b:de:db:f7:f0:e2:ea:8c:26:62:e6:68:31:
2e:3b:a5:c4:5c:a0:2a:77:59:3b:2a:b8:b3:05:49:ae:bb:c8:
8d:50:8e:ce:cc:e5:65:c8:3a:02:7d:cf:3f:3b:7e:94:93:7b:
d7:a5:f5:ce:33:9c:e7:e9:e9:94:5e:c5:b2:4e:f2:1c:35:7f:
0e:9b:62:54:ff:4f:dc:89:01:66:87:59:82:74:2a:e0:ab:72:
e5:94:79:e9:31:50:04:3a:04:e7:8c:af:6d:62:f1:82:39:aa:
10:aa:53:e3:fa:f2:16:d0:8c:c2:d4:21:04:c2:ab:a5:ad:4b:
dc:10:db:f2:5e:0e:5d:fd:8a:18:ff:be:75:09:10:92:fb:19:
b0:ec:6f:b0:70:1a:80:18:97:8f:ec:2e:3f:32:ca:a4:85:52:
70:99:36:01:6e:93:ac:db:99:57:f3:30:10:6d:af:98:25:7d:
ee:8d:5e:dd:44:7e:ea:72:02:ee:46:05:59:05:7e:bc:f3:79:
87:d7:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:57 2025 by rpki-client