Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/um5nI4IQdelGAcGZFE9zsupR9W4.roa
File: um5nI4IQdelGAcGZFE9zsupR9W4.roa (raw, json)
Hash identifier: Cxj04i+sSDhG2xVnGdrfplnTTrKnSUIoYUuQU4bHyi4=
Subject key identifier: BA:6E:67:23:82:10:75:E9:46:01:C1:99:14:4F:73:B2:EA:51:F5:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C048858EC881E6FD59D4C2F65BE170C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/um5nI4IQdelGAcGZFE9zsupR9W4.roa
Signing time: Mon 10 Oct 2022 05:05:21 +0000
ROA not before: Mon 10 Oct 2022 05:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:c047:dcf4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:48:85:8e:c8:81:e6:fd:59:d4:c2:f6:5b:e1:70:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 10 05:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba6e6723821075e94601c199144f73b2ea51f56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:e8:ad:25:a1:28:34:8e:a6:76:19:78:21:
01:6c:5e:d4:44:b5:d5:d7:55:68:94:ab:be:41:64:
c0:c1:07:a3:39:6b:03:b5:35:80:f5:d7:ff:62:a2:
a9:b4:3a:7a:b6:8f:08:5b:6d:f6:d7:59:64:07:79:
de:4d:2b:10:09:ca:0f:3e:38:f1:4f:00:cc:b5:cb:
50:c9:f6:83:23:c3:4a:6f:b9:01:36:1c:81:bd:0b:
32:39:3e:6c:4e:64:0f:27:2e:2f:8d:19:4d:bc:5c:
54:c9:ab:04:07:c9:b0:60:32:77:cc:4b:ee:1f:7e:
4e:eb:c9:18:35:29:aa:14:f3:20:a5:51:a0:f1:b5:
ac:cc:e6:84:da:e0:77:e3:b9:2b:fa:4f:5f:61:13:
28:2a:b8:7d:46:26:53:b6:9d:c4:84:95:9f:c1:09:
81:df:ab:c6:d2:de:6a:55:f7:6e:b1:ee:36:f2:2c:
51:b3:51:50:99:95:02:64:64:43:db:6b:37:0c:a2:
ba:3e:b0:ee:de:b1:45:0f:9c:2d:f2:43:6d:7d:4f:
22:10:c4:55:01:09:5e:7b:c1:65:d4:09:3a:46:9e:
e3:85:d9:ea:f7:33:ed:84:6b:92:64:6d:cd:37:db:
b5:87:14:29:44:bd:38:cb:06:e1:6d:73:e5:40:49:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:67:23:82:10:75:E9:46:01:C1:99:14:4F:73:B2:EA:51:F5:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/um5nI4IQdelGAcGZFE9zsupR9W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:5d:65:69:8c:31:c8:12:d6:1c:62:af:f3:63:ea:49:ac:d8:
48:a5:db:db:b0:69:be:03:d6:65:4b:7b:1c:e1:07:69:97:13:
71:32:c3:bd:8c:6b:80:5f:20:8d:2a:ff:2f:41:ca:07:0e:2a:
5f:fd:2a:8d:e8:a7:56:40:d1:df:fc:f9:a3:4d:64:e5:6c:74:
9c:ea:af:22:c4:de:78:47:98:72:5e:19:29:f6:c5:1f:7e:d7:
47:11:12:8e:d7:84:f7:4d:34:0b:a2:89:1a:b8:cb:38:99:bf:
78:6f:a2:eb:7d:b7:cd:e1:dc:89:aa:84:f6:f8:ad:4d:32:e8:
ff:70:be:3c:23:48:4a:ae:d3:e9:d7:21:df:62:3f:6a:ef:37:
15:6f:a6:1b:88:66:b9:f1:e8:35:58:f4:08:85:d3:ef:b0:42:
40:ba:0f:4d:58:65:87:c3:72:99:d8:e2:98:3f:db:d5:9a:2a:
55:5b:4a:ea:01:6f:43:8d:f1:54:e6:2b:e2:e8:82:bf:e0:ff:
3a:13:e1:c5:cb:4f:cc:32:cc:bf:ac:53:aa:13:16:92:62:66:
b1:d0:ac:69:c4:5f:09:07:95:87:7f:e4:ef:c5:46:1e:3c:c0:
30:d4:3f:75:b7:4b:48:93:41:d1:49:76:ba:75:ef:ab:15:4c:
b8:15:a0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:28 2025 by rpki-client