Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uvjp-nDEZ1YyKBzOv7iNvjM09nI.roa
File: uvjp-nDEZ1YyKBzOv7iNvjM09nI.roa (raw, json)
Hash identifier: g2ozluhxC18FaOt8MfCZruLXohUfuP1Z/Vk6W8TO2p8=
Subject key identifier: BA:F8:E9:FA:70:C4:67:56:32:28:1C:CE:BF:B8:8D:BE:33:34:F6:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D7E7E1CB3D8056A853FCA50FBCF5E87B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uvjp-nDEZ1YyKBzOv7iNvjM09nI.roa
Signing time: Sat 03 Dec 2022 12:13:28 +0000
ROA not before: Sat 03 Dec 2022 12:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:e7:e1:cb:3d:80:56:a8:53:fc:a5:0f:bc:f5:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 12:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baf8e9fa70c4675632281ccebfb88dbe3334f672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:26:08:70:49:fc:da:29:0b:05:d6:a2:db:
56:b1:32:c7:9b:1e:86:65:c8:28:ac:f3:54:b0:97:
eb:c6:2e:c5:ad:d4:ba:3b:cc:f2:88:b3:a7:96:aa:
4c:e1:ac:57:7c:73:a4:cd:41:e3:3d:39:85:54:1f:
b6:cb:a5:dc:e8:73:ff:99:87:1f:25:d8:a2:e0:95:
96:5f:14:08:ba:73:74:f2:53:55:13:70:f0:67:7b:
f4:4b:37:f4:b8:80:ec:1e:54:69:ed:99:48:97:64:
4f:5e:2f:52:16:97:c4:54:61:aa:9a:86:ad:fc:b7:
48:83:52:95:16:36:6c:2d:52:1e:2f:2f:fd:28:89:
2d:f7:3d:21:35:ea:16:c7:93:4d:ec:fa:f0:02:52:
9c:9b:78:43:79:67:f9:d0:b8:08:ed:9e:0b:cf:71:
c6:da:6b:6b:7f:0d:90:a2:19:03:e9:bc:f6:a8:c5:
7c:3b:78:05:62:fd:94:02:fb:00:c9:43:a6:4e:63:
f3:37:b8:35:91:70:2d:02:ca:cc:9e:fc:6d:72:97:
a6:54:81:bb:ab:61:23:bd:5b:76:12:f4:1d:39:31:
7d:1d:0b:81:8f:e1:ae:ce:14:0e:46:e8:67:52:c1:
08:06:2f:14:c1:41:81:b0:b9:4e:1e:1f:71:47:79:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:E9:FA:70:C4:67:56:32:28:1C:CE:BF:B8:8D:BE:33:34:F6:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uvjp-nDEZ1YyKBzOv7iNvjM09nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:94:bf:3f:4b:9d:b7:26:52:9d:64:e3:87:cc:da:51:58:47:
ac:5c:ac:24:0f:c9:89:a8:57:17:6d:8d:0f:38:2c:27:84:ca:
ec:5a:ee:90:b0:6e:29:81:3b:00:d6:ec:b3:9f:db:24:b1:f7:
f8:7c:8d:cc:57:a8:ba:aa:27:9a:66:39:15:43:79:e6:b6:31:
5a:70:0b:63:c9:d5:05:ec:d8:16:6d:f9:a4:19:91:82:7a:4c:
02:5d:a2:69:32:be:d5:78:d3:44:68:93:2f:e8:86:4c:97:cd:
9c:80:ee:82:1c:8c:42:a3:4b:cd:99:79:84:29:5f:d4:c6:0f:
ba:60:fb:82:24:ac:60:dc:cb:5a:78:0b:d8:30:3c:99:cc:a2:
01:0b:54:49:06:87:2c:4b:46:fc:7a:95:bd:6b:1f:c7:61:2a:
07:d8:a7:0b:0f:6e:99:76:fe:9d:e9:bf:89:5a:c8:6e:7a:b1:
11:f6:20:bb:64:7b:fe:87:13:92:2d:f3:19:2f:41:82:75:18:
77:8e:df:5a:27:76:ee:45:8c:5e:e7:bf:17:23:a2:91:9a:5a:
b6:42:7b:40:0d:7b:a6:88:02:ef:d9:73:8e:b3:10:63:46:c1:
3d:e8:1d:4b:17:07:f7:08:d4:44:49:2b:75:b9:a1:50:e2:9b:
ac:99:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:50:51 2025 by rpki-client