Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uzlF20xyKdrUrI_p-6__jckLOj8.roa
File: uzlF20xyKdrUrI_p-6__jckLOj8.roa (raw, json)
Hash identifier: GSZVl6UOuw+NL3qOOV/VwBEKydE2oPNZyGwYG+7sgwE=
Subject key identifier: BB:39:45:DB:4C:72:29:DA:D4:AC:8F:E9:FB:AF:FF:8D:C9:0B:3A:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183AAA43B091BB4D3D9414469D1A80711F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uzlF20xyKdrUrI_p-6__jckLOj8.roa
Signing time: Thu 06 Oct 2022 00:13:53 +0000
ROA not before: Thu 06 Oct 2022 00:13:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:aa:a4:3b:09:1b:b4:d3:d9:41:44:69:d1:a8:07:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 6 00:13:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb3945db4c7229dad4ac8fe9fbafff8dc90b3a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:e3:13:c4:af:de:5a:26:15:2a:37:1a:26:
87:a3:12:5c:24:31:a3:a5:81:b5:3c:20:21:ee:e6:
ef:8e:01:01:5b:fe:f4:54:85:1e:33:5b:c0:5e:6b:
57:81:45:96:48:5c:59:c3:d6:eb:d5:fd:9b:26:92:
30:6f:21:c1:af:81:db:cb:d8:d8:08:4d:e4:e0:d2:
5e:c1:35:b4:ce:f0:32:06:b6:ad:c1:29:a2:92:f7:
4c:37:d8:d6:55:fe:4c:18:1a:4f:c0:b2:e6:93:f2:
08:76:e1:94:19:31:12:f5:01:3b:62:ae:d0:f9:09:
51:06:0d:d2:e0:67:f7:f1:6c:fb:ac:61:34:06:30:
35:7b:a6:95:1a:17:d9:8e:b5:78:1b:c7:1e:64:f6:
39:58:73:2e:09:ed:5c:e6:14:9d:48:60:6e:b5:9b:
28:bc:d0:01:38:56:98:2a:ad:92:66:96:e9:77:a2:
cd:54:6e:d7:d0:3c:92:54:fb:43:87:cf:a3:0e:4e:
45:ae:4a:5f:0b:6b:58:18:b5:5b:6a:0f:a1:ac:99:
d3:bc:ff:aa:e8:a5:a7:40:74:d4:5f:c2:32:c5:8c:
ec:61:9f:e8:17:fb:3a:9a:2f:e9:7e:c8:9c:8f:97:
86:5c:3c:67:d7:b4:fa:20:b1:f2:79:d7:04:d7:3d:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:39:45:DB:4C:72:29:DA:D4:AC:8F:E9:FB:AF:FF:8D:C9:0B:3A:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uzlF20xyKdrUrI_p-6__jckLOj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:95:1f:bf:94:f9:91:d8:98:91:f6:31:ad:3f:94:da:05:e9:
aa:4e:db:e1:de:d0:ce:7f:68:13:43:71:fe:66:c5:b2:7a:af:
71:73:5d:20:d1:e1:16:ac:b9:7b:2a:d3:2c:50:ea:fb:6f:f1:
8b:3d:13:cd:74:18:9a:85:26:e5:d7:7c:af:aa:c6:46:4c:b3:
c7:50:7a:35:5c:2d:74:13:3a:64:ef:b4:9a:c3:04:2f:ca:38:
48:e3:d1:1c:ec:f5:60:c7:b0:8a:60:8b:72:6b:d3:c2:f3:9e:
ce:fa:38:ba:50:3a:9f:d1:aa:fe:fb:7d:0a:93:57:cd:0c:5f:
2a:89:e9:f5:b8:90:4f:16:18:f1:e5:81:2a:8a:f9:bc:d4:a7:
86:6d:54:2b:b2:94:22:7b:73:83:25:5c:3c:47:d7:a2:14:1f:
53:8e:10:e3:ab:ac:31:29:a3:66:67:5c:5e:f9:65:69:7d:80:
41:9c:14:f5:14:7f:27:3d:6d:87:51:53:4b:24:93:f2:17:c5:
fb:8d:73:11:0a:57:ec:15:59:8e:81:98:69:d9:db:ce:1a:31:
04:7c:14:55:11:73:58:81:9d:c1:7a:e2:99:ac:dd:b6:2a:44:
0a:2b:87:5b:25:f2:aa:25:91:77:2e:5a:e1:38:cd:77:5c:66:
04:f8:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:58:51 2025 by rpki-client