Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uyGaQDClQJ8wG8qcZVVqgSOwtXc.roa
File: uyGaQDClQJ8wG8qcZVVqgSOwtXc.roa (raw, json)
Hash identifier: WUg6xoDIFDFgPLlE1a+ntV/EJWvagH9pbtwVkh6HsMY=
Subject key identifier: BB:21:9A:40:30:A5:40:9F:30:1B:CA:9C:65:55:6A:81:23:B0:B5:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856403B0C875F55E5CBBB52F9C54C9EC3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uyGaQDClQJ8wG8qcZVVqgSOwtXc.roa
Signing time: Fri 30 Dec 2022 17:10:41 +0000
ROA not before: Fri 30 Dec 2022 17:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:64:03:b0:c8:75:f5:5e:5c:bb:b5:2f:9c:54:c9:ec:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 17:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb219a4030a5409f301bca9c65556a8123b0b577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:22:22:47:33:e3:f6:8c:48:54:38:a9:24:
ff:f5:f4:d0:f7:c1:81:c1:c7:4e:15:13:aa:e6:3c:
62:88:60:9d:c8:1a:f5:8d:8b:6b:07:8e:4f:3e:84:
61:94:e7:e4:5f:87:4b:ae:70:44:a0:0f:ae:46:0b:
81:31:59:3b:fe:8c:fe:f5:aa:80:c2:2c:dc:6a:ee:
a7:fb:d5:54:20:93:ec:44:42:9c:fa:5c:dc:f9:04:
2b:1e:a5:70:15:6f:ca:10:ce:85:34:02:ab:63:3c:
dd:c8:09:30:5c:35:e4:1b:78:8d:fb:2d:78:29:52:
b8:37:12:a5:c5:d8:a1:be:51:08:fd:da:68:60:88:
e0:bf:ba:bd:99:22:24:d3:1c:18:a3:e0:4b:3a:f1:
a2:ba:4d:c0:7d:73:56:2b:29:75:fa:74:55:da:d1:
62:09:54:55:19:22:52:06:1d:64:f0:8a:3f:e1:14:
6e:bd:92:ef:57:81:70:9c:43:6d:c6:25:1f:da:85:
d5:d4:5f:b7:ed:35:85:c0:9f:d0:44:54:a1:ed:72:
81:39:96:3f:69:2b:d7:20:f1:ef:f4:e7:f6:d9:95:
8e:72:07:71:7a:36:4c:b0:9a:68:af:15:f1:c2:34:
0c:4e:6a:1b:72:a3:5b:d0:64:70:c9:7c:b4:ce:7b:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:21:9A:40:30:A5:40:9F:30:1B:CA:9C:65:55:6A:81:23:B0:B5:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uyGaQDClQJ8wG8qcZVVqgSOwtXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:7e:2d:b8:20:e8:3d:53:e2:2b:5b:d8:99:42:d2:ca:4e:9a:
ae:43:13:69:41:c3:82:84:94:ae:a7:8e:3e:6e:50:be:ab:f1:
15:69:23:71:78:f1:f8:7f:0e:db:fa:d4:b2:b3:62:32:a6:55:
48:9e:80:41:5e:42:fd:40:0c:88:65:d7:63:c7:15:21:10:d9:
8b:26:2b:83:6d:44:e1:96:38:91:92:2b:49:ad:df:1c:29:df:
6c:ee:c2:71:fb:31:0d:bf:ff:44:bb:88:14:51:1b:d3:9a:fd:
46:dd:01:31:43:94:2a:f4:ca:e8:81:c8:ae:34:d3:f1:a5:36:
ab:9d:c7:e7:75:89:0a:77:88:02:42:eb:4a:3d:42:6e:32:b0:
57:c7:b1:3c:07:59:b0:1a:a9:5b:2e:6f:18:09:98:57:9b:fd:
b4:1a:1a:03:c0:d0:3f:a7:62:b5:f0:25:38:22:e5:a6:34:66:
7b:3a:0e:17:2b:42:53:cc:28:a2:ff:d6:f6:7e:6e:d0:f6:cb:
22:02:17:8d:a2:da:a3:5b:49:f2:eb:fd:56:06:fc:5b:f2:0b:
8d:88:ed:eb:5b:08:e2:73:4a:89:11:55:aa:c3:c1:24:69:3a:
9f:9a:14:26:78:cf:63:c2:46:df:cb:09:28:94:22:51:21:2a:
66:c5:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:25 2025 by rpki-client