Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2UhvncaY0bc69hIaNwSoYRFcDLg.roa
File: 2UhvncaY0bc69hIaNwSoYRFcDLg.roa (raw, json)
Hash identifier: odktfINEyP/B4Yj9Xl+93hEL/H/A+Hg27clvjYBfq0w=
Subject key identifier: D9:48:6F:9D:C6:98:D1:B7:3A:F6:12:1A:37:04:A8:61:11:5C:0C:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018657FD72BBA62D26D5C5FFB5609952D8F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2UhvncaY0bc69hIaNwSoYRFcDLg.roa
Signing time: Thu 16 Feb 2023 02:11:12 +0000
ROA not before: Thu 16 Feb 2023 02:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:fd:72:bb:a6:2d:26:d5:c5:ff:b5:60:99:52:d8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 02:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9486f9dc698d1b73af6121a3704a861115c0cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:40:9c:2e:55:55:b7:e0:0a:1c:fc:bb:3d:
4b:45:c0:7e:45:05:be:12:99:4f:e9:bc:dd:cd:85:
53:50:8b:75:65:d9:3c:fa:91:1a:c0:d2:95:2b:6e:
de:02:23:ea:7b:34:1c:90:6d:4e:d0:b4:ed:2e:7a:
35:af:2e:f5:39:07:17:9f:d8:ab:2a:78:ab:73:61:
f3:71:b6:a2:77:a1:92:0c:fc:9a:bb:8f:7d:74:28:
cc:cb:95:c6:01:4b:b9:69:35:86:da:49:4d:8f:2b:
c2:51:57:f0:6d:03:fa:bb:0b:5a:ff:cd:0d:d7:a0:
56:0c:fd:30:25:63:61:d7:02:af:c0:f3:51:b6:39:
a6:29:fa:db:8d:e3:c3:e8:9b:16:fc:6a:e6:0a:ba:
40:c1:11:0d:1a:28:b1:3d:51:7c:fc:b4:5e:97:85:
6b:2b:d1:08:2f:56:39:7f:0c:eb:79:1f:d6:8b:a5:
d5:3a:a4:a7:11:99:dd:9a:1b:ce:85:af:68:62:24:
d1:d7:f0:b4:43:c3:09:bd:17:71:d0:ff:8d:d2:04:
7a:fe:d9:b4:85:5b:a1:7f:ed:ac:b2:d6:f4:21:ed:
7f:29:82:48:39:a2:a1:15:ac:d6:4b:9d:78:3b:07:
c2:15:01:66:5d:f1:28:f8:11:4c:99:5c:4e:04:98:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:6F:9D:C6:98:D1:B7:3A:F6:12:1A:37:04:A8:61:11:5C:0C:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2UhvncaY0bc69hIaNwSoYRFcDLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:4d:86:0f:2e:d7:3b:04:50:e9:42:25:a8:b0:c8:14:da:db:
77:32:e6:12:28:14:ce:d2:4b:e9:33:7a:f1:89:33:9f:59:a1:
b4:6b:3d:3b:fe:e1:4e:16:7b:a1:2b:80:07:59:5b:9a:41:3c:
b2:30:ed:30:5d:2a:d0:96:2f:d6:22:cc:e9:d2:60:03:65:86:
41:1a:63:ad:a7:46:fe:97:08:a4:b1:ab:48:26:2f:c6:e8:3e:
f8:0c:74:7d:a2:59:8b:fa:c5:6e:1b:11:75:1f:f9:72:86:4e:
bc:de:e2:a6:19:dd:00:c4:c4:4c:55:a5:fb:f7:5f:19:e8:b3:
52:4e:1b:c0:f2:13:bf:f5:6d:18:ec:7c:30:a1:d5:9e:e3:c3:
b1:30:fb:2b:30:28:2f:e3:38:50:19:bc:b1:11:08:f7:cf:1d:
b7:04:b0:af:7e:7d:be:5f:6c:84:0c:a4:8a:3d:c0:3f:84:cb:
2f:1d:5c:ef:63:23:d3:c6:f9:3d:14:07:77:7f:56:9c:93:6d:
65:02:96:90:97:de:1c:45:c0:b4:a0:99:19:d8:a5:05:a4:83:
7e:70:5a:1b:22:c3:aa:b7:16:a2:26:35:ab:07:84:43:a2:bb:
76:ae:9c:e2:40:fc:94:d2:bf:c3:40:04:f6:96:fb:c8:fc:98:
bd:28:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:20 2025 by rpki-client