Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/upEZDQe71X8rcl96ZZEgilaM7vE.roa
File: upEZDQe71X8rcl96ZZEgilaM7vE.roa (raw, json)
Hash identifier: ilVJF0Bs+Ip8438pt4tOFBhx+DhoLP0+5E8V/BfW/6I=
Subject key identifier: BA:91:19:0D:07:BB:D5:7F:2B:72:5F:7A:65:91:20:8A:56:8C:EE:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F700E0A646FB6E90436E8292AC96BDE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/upEZDQe71X8rcl96ZZEgilaM7vE.roa
Signing time: Sat 28 Jan 2023 06:11:47 +0000
ROA not before: Sat 28 Jan 2023 06:11:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f7:00:e0:a6:46:fb:6e:90:43:6e:82:92:ac:96:bd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 28 06:11:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba91190d07bbd57f2b725f7a6591208a568ceef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ff:72:74:c4:40:ea:ca:5c:53:ef:25:91:d4:
5a:b0:6e:be:b3:e4:69:f2:49:e8:aa:0f:24:6c:31:
54:7d:c5:90:6f:82:1d:03:9c:8e:7d:26:1c:99:00:
32:9e:41:6a:11:ef:95:5a:6c:3d:24:fc:b6:c1:b0:
23:be:97:21:4c:b9:5e:80:76:ee:05:5e:b8:0f:07:
37:cc:4c:f0:3c:31:2f:9b:07:7d:16:30:22:c6:f7:
e8:5d:7d:72:07:63:80:89:db:67:50:28:02:c9:9a:
fd:6b:64:11:0e:9f:35:a5:67:87:a7:13:50:15:7d:
af:18:82:a4:03:33:c5:cb:6f:0b:ad:48:50:16:ff:
da:f9:07:39:48:50:0c:e8:65:0f:22:21:6b:f6:d7:
87:01:e4:20:93:8d:55:c3:35:9b:86:2d:06:73:aa:
b0:e5:0c:c0:d4:69:c3:ee:57:99:22:8f:fe:19:cd:
ea:84:a8:61:6a:cf:07:df:e1:69:48:c5:be:d2:41:
2d:f8:9b:06:93:72:c8:81:dc:27:51:27:d1:57:6b:
ab:7b:65:83:83:e7:98:04:04:6c:bb:a1:b0:ae:12:
46:a0:fb:88:a5:23:72:c8:8d:b6:0e:3e:db:9e:6b:
fb:1a:2c:0c:60:03:f9:1b:c3:93:b6:b6:85:30:46:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:19:0D:07:BB:D5:7F:2B:72:5F:7A:65:91:20:8A:56:8C:EE:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/upEZDQe71X8rcl96ZZEgilaM7vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:c5:59:56:bd:c4:f7:ea:a9:77:9e:4f:6f:bb:c7:ef:2a:d0:
c1:e3:f8:0e:71:b0:60:9a:07:76:75:e8:4d:c7:86:72:3d:3a:
1f:9d:de:46:a4:cb:d9:06:b1:0a:c4:57:2e:aa:2e:d9:eb:bf:
32:1b:c8:7a:78:2a:df:72:fa:85:fa:25:95:bc:0f:3e:a7:fd:
90:a9:1f:a9:c2:15:fc:45:1d:d7:f1:7a:d2:67:06:33:c3:47:
d4:22:39:c3:71:e7:b5:ac:4d:97:a2:53:bd:42:5d:61:33:6e:
ba:ff:36:1e:08:13:91:e3:5f:e4:8a:46:5c:25:4f:a4:c8:fa:
89:69:47:1e:e5:77:9c:46:50:eb:fd:2a:6a:82:52:6b:ab:bb:
12:f1:8e:ec:a6:2d:50:57:08:31:fa:5b:39:a2:99:1a:46:96:
d1:a7:f1:b8:8a:85:21:1d:42:94:28:f0:28:f5:06:ab:21:bb:
f9:ad:38:ce:96:60:ad:ef:8b:99:5b:03:86:8f:7b:29:5e:05:
08:d4:86:b4:c0:d9:a2:d9:b9:c0:2f:53:99:3b:fd:e8:eb:1e:
5d:b2:ed:a8:5f:12:4d:b0:36:1d:a7:cc:48:37:50:50:dd:82:
ea:1d:ad:42:27:f3:08:78:e4:cf:91:ca:45:74:92:58:99:9e:
30:2c:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:53:27 2025 by rpki-client