Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULeQh3QfK1fGLoAfrreuHdhDxtc.roa
File: ULeQh3QfK1fGLoAfrreuHdhDxtc.roa (raw, json)
Hash identifier: FctPHaTJZVb0c8gMZpba6fEAS98v5uhawFub7sBPuLM=
Subject key identifier: 50:B7:90:87:74:1F:2B:57:C6:2E:80:1F:AE:B7:AE:1D:D8:43:C6:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859FA9BC76EAA835892E242FAB2100DD5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULeQh3QfK1fGLoAfrreuHdhDxtc.roa
Signing time: Wed 11 Jan 2023 07:09:39 +0000
ROA not before: Wed 11 Jan 2023 07:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:a9:bc:76:ea:a8:35:89:2e:24:2f:ab:21:00:dd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 11 07:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50b79087741f2b57c62e801faeb7ae1dd843c6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:fb:33:0d:41:d7:4a:cb:5c:9a:7f:1f:26:
bc:69:48:e1:94:77:c3:d3:b4:b0:63:b1:f8:fc:55:
8b:45:ba:10:b6:14:77:bd:94:a1:ee:6f:21:43:c3:
72:d4:1e:b7:0d:cf:67:f1:89:05:fd:6c:01:70:e5:
4d:aa:06:cb:be:e1:44:8b:51:da:6e:4c:3e:bf:73:
25:70:f0:0f:1b:1a:cb:e8:db:37:1f:3f:14:77:16:
a9:a4:c8:4b:ee:ba:78:45:a3:0d:82:bc:7a:ff:31:
3c:fd:2f:b1:14:70:f9:84:b4:63:11:de:14:bc:a8:
ac:ac:5d:09:07:ee:82:ab:2b:12:e9:04:f4:4b:c9:
3a:c5:74:73:10:31:57:08:5d:0f:7a:a8:be:15:a1:
4c:42:7b:0b:80:02:c7:24:50:94:5f:18:4f:74:01:
50:b8:c1:fc:32:8e:ae:67:f2:29:4e:ef:2a:78:f2:
b2:12:2e:d6:cf:31:c9:9d:c5:b2:00:3a:1f:46:4e:
b2:95:3c:00:2b:dd:8c:b4:dc:24:fd:29:5d:69:97:
8e:c4:f3:93:d0:b0:eb:cd:c7:d7:9e:71:67:f4:5a:
9a:be:ec:2d:a4:10:d8:20:07:6d:0f:38:fb:49:64:
01:3d:85:d9:da:35:64:8e:09:4a:8a:50:e3:ec:a6:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B7:90:87:74:1F:2B:57:C6:2E:80:1F:AE:B7:AE:1D:D8:43:C6:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ULeQh3QfK1fGLoAfrreuHdhDxtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ea:75:a6:10:57:f6:0c:a4:76:86:fb:83:e4:b7:e2:32:0f:
db:67:84:a3:88:a4:e6:c8:d6:b1:ff:a4:18:46:4b:14:16:0b:
ba:9b:ec:37:da:64:12:65:8a:59:60:e0:6a:97:0b:60:09:c6:
db:1f:3c:8a:1f:89:66:30:0f:45:7a:4e:ac:7c:11:fd:ad:82:
0d:6d:12:1b:e9:b5:e0:54:c4:f6:c1:a1:a6:f0:96:c4:69:3b:
62:13:77:98:49:6e:64:42:fa:25:85:f2:ad:ae:76:08:a3:6a:
21:6a:a9:c1:7b:18:a0:a6:67:61:b2:a0:f9:e5:8a:9c:17:87:
19:d2:7c:4b:87:71:09:a5:84:16:43:1c:2a:af:9e:c7:29:e4:
d6:cc:4b:01:f1:db:d6:11:f2:48:ed:c6:cb:88:b2:7f:2b:75:
5f:f8:b5:2f:d4:d5:3f:4a:34:c7:95:97:59:9c:fd:cd:43:c6:
c5:ad:57:9b:66:48:e5:88:f9:f7:21:b4:60:bc:a2:ac:26:1b:
f6:d8:99:26:00:66:8f:98:d4:59:61:85:0d:11:b2:f4:06:c0:
9c:47:32:72:39:b1:67:1e:cc:07:86:3f:00:e3:5a:82:73:d8:
94:c8:8c:25:6a:a7:b9:a0:28:b8:e7:2b:da:d7:4a:19:85:70:
25:34:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:36:21 2025 by rpki-client