Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uqe0YbWOzbYoTMwZTVXMKyAGIs4.roa
File: uqe0YbWOzbYoTMwZTVXMKyAGIs4.roa (raw, json)
Hash identifier: NUmU1LhHN/7wITHpUInU6RdLu9zEAlqvqMnULScrsUg=
Subject key identifier: BA:A7:B4:61:B5:8E:CD:B6:28:4C:CC:19:4D:55:CC:2B:20:06:22:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81FFC046
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uqe0YbWOzbYoTMwZTVXMKyAGIs4.roa
Signing time: Sat 07 May 2022 18:04:22 +0000
ROA not before: Sat 07 May 2022 18:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:9fb1:a981/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181021766 (0x81ffc046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 18:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baa7b461b58ecdb6284ccc194d55cc2b200622ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:b8:f7:28:bd:1d:b8:49:47:e6:88:cd:0a:
da:21:78:c0:f5:ba:08:39:96:df:5c:44:a0:2e:48:
63:f9:9b:aa:b4:ec:54:d6:c3:2a:35:aa:0e:32:ef:
cc:4e:a0:87:b9:dd:7f:70:d3:4d:db:1a:48:14:89:
47:5e:e9:93:3b:5a:88:52:27:14:08:a6:1d:e3:31:
eb:11:09:e7:5b:20:86:93:01:41:11:eb:f9:e0:77:
99:3d:27:24:7a:43:3d:f0:6f:73:6b:e2:8f:1f:35:
62:15:47:f0:08:a5:12:18:a9:58:0e:d3:8b:0c:de:
2c:d2:48:8a:ec:c3:1b:b6:74:3e:fc:cd:f0:cd:ae:
c8:11:69:3a:11:61:11:dd:54:95:b0:27:10:fa:2e:
9e:77:f9:b7:d1:a5:78:ac:4d:52:0c:06:d7:cc:43:
9e:a9:e9:96:81:05:f4:84:ba:4c:dd:80:9d:b1:9d:
a4:96:d2:6f:05:39:ab:e7:c7:d0:23:e2:a4:c1:d8:
e6:ba:02:78:db:63:e6:e7:a4:36:ad:bc:90:3f:0c:
6d:8d:79:0f:6f:64:61:41:a1:7f:41:cd:f6:ec:52:
46:55:74:ad:8d:ba:0e:0a:f0:76:6b:e7:ec:aa:97:
dd:0a:2f:25:e3:37:21:b9:85:d7:72:b5:e6:45:5f:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:B4:61:B5:8E:CD:B6:28:4C:CC:19:4D:55:CC:2B:20:06:22:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uqe0YbWOzbYoTMwZTVXMKyAGIs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:bc:eb:db:03:64:40:4d:18:c3:14:34:50:aa:78:d4:41:0a:
df:0f:8e:f7:fc:84:92:76:9b:3b:a5:81:28:d5:9c:02:91:b0:
6f:b3:66:e9:63:20:1f:5b:6f:5c:11:94:0d:af:ce:b7:c4:a0:
f2:e4:9e:00:23:e2:f2:71:79:35:36:f5:bc:e4:7e:08:75:66:
28:0c:90:3d:22:0e:34:ea:6d:99:ee:17:8e:b4:81:0d:2c:2c:
96:76:e5:fc:50:0a:2f:6f:19:19:df:13:5d:cc:8e:6a:40:93:
0f:a6:b6:b6:90:09:3d:4b:1c:42:db:3e:06:f2:5f:23:e0:94:
cb:ea:23:ce:77:ef:bf:69:c4:3c:9e:4d:71:53:8e:23:b2:46:
bc:4f:67:a5:fe:67:60:65:f3:3a:36:47:3a:58:41:48:55:5a:
19:0c:1d:db:ff:51:b6:ae:f9:0c:16:6c:81:f6:3c:4a:93:2a:
ca:a7:8c:67:52:27:1a:b3:03:bf:af:1b:84:cb:51:8e:0b:b6:
80:8f:86:98:6f:76:61:6d:09:e7:88:80:5c:32:61:d1:28:83:
51:6b:13:c9:28:4f:ea:c6:d1:bb:45:60:8d:f1:75:06:92:ad:
87:fc:e3:32:ca:f2:29:cb:4f:f2:9c:46:0f:44:88:98:99:7e:
6f:5c:4a:14
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIH/wEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDcxODA0MjJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGJhYTdiNDYxYjU4
ZWNkYjYyODRjY2MxOTRkNTVjYzJiMjAwNjIyY2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRULj3KL0duElH5ojNCtoheMD1ugg5lt9cRKAuSGP5m6q0
7FTWwyo1qg4y78xOoIe53X9w003bGkgUiUde6ZM7WohSJxQIph3jMesRCedbIIaT
AUER6/ngd5k9JyR6Qz3wb3Nr4o8fNWIVR/AIpRIYqVgO04sM3izSSIrswxu2dD78
zfDNrsgRaToRYRHdVJWwJxD6Lp53+bfRpXisTVIMBtfMQ56p6ZaBBfSEukzdgJ2x
naSW0m8FOavnx9Aj4qTB2Oa6AnjbY+bnpDatvJA/DG2NeQ9vZGFBoX9BzfbsUkZV
dK2Nug4K8HZr5+yql90KLyXjNyG5hddyteZFXzyJAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUuqe0YbWOzbYoTMwZTVXMKyAGIs4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS91cWUwWWJXT3piWW9UTXdaVFZYTUt5QUdJczQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAhLzr2wNkQE0YwxQ0UKp41EEK3w+O9/yEknab
O6WBKNWcApGwb7Nm6WMgH1tvXBGUDa/Ot8Sg8uSeACPi8nF5NTb1vOR+CHVmKAyQ
PSIONOptme4XjrSBDSwslnbl/FAKL28ZGd8TXcyOakCTD6a2tpAJPUscQts+BvJf
I+CUy+ojznfvv2nEPJ5NcVOOI7JGvE9npf5nYGXzOjZHOlhBSFVaGQwd2/9Rtq75
DBZsgfY8SpMqyqeMZ1InGrMDv68bhMtRjgu2gI+GmG92YW0J54iAXDJh0SiDUWsT
yShP6sbRu0VgjfF1BpKth/zjMsryKctP8pxGD0SImJl+b1xKFA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:50 2025 by rpki-client