Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UY6yGCX2hgncozJ52J-qPEXIh08.roa
File: UY6yGCX2hgncozJ52J-qPEXIh08.roa (raw, json)
Hash identifier: +q15DaRu+/bz2bKMznsTEMj4dh/DJOUhaUq9aFRkuDI=
Subject key identifier: 51:8E:B2:18:25:F6:86:09:DC:A3:32:79:D8:9F:AA:3C:45:C8:87:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C71EBC9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UY6yGCX2hgncozJ52J-qPEXIh08.roa
Signing time: Mon 21 Feb 2022 05:04:25 +0000
ROA not before: Mon 21 Feb 2022 05:04:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1aaa:a591/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819405257 (0x6c71ebc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 05:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=518eb21825f68609dca33279d89faa3c45c8874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:76:83:ac:47:da:f6:0b:08:be:12:9a:85:31:
fb:91:95:4e:6d:e2:c2:36:10:d9:3b:7b:35:77:6b:
56:82:ab:b1:51:3b:66:f9:ab:fd:bf:da:88:34:52:
b7:b9:28:fa:b5:e9:90:f1:40:a1:37:aa:ca:f9:6e:
f5:1b:f5:45:3c:17:7f:b6:d9:38:79:95:34:9f:35:
22:01:95:c8:da:64:1d:36:27:8e:5e:3a:e2:14:eb:
b5:08:8a:8f:37:69:ea:c0:4d:32:9d:90:cd:d4:19:
56:ba:44:8c:82:e5:d8:e5:c8:0b:a7:01:e8:1f:81:
d5:40:10:8e:41:83:b2:ff:f0:c4:bd:fb:39:81:80:
52:e0:e0:73:60:89:55:96:6f:7d:01:72:a8:d1:32:
d3:49:bb:45:04:cc:d9:12:e1:b4:69:f5:24:a0:41:
3e:d6:ea:69:94:cd:a5:00:a5:7f:b9:ea:7b:43:66:
7c:54:15:d6:54:4e:10:62:94:96:e8:6f:8d:ab:f7:
39:fd:d9:83:a1:6b:4b:70:b3:38:23:5b:90:a2:41:
09:0d:fc:f7:a7:e9:b7:93:fe:76:18:1f:c9:32:78:
8b:1b:bb:59:99:ed:74:d5:3d:aa:58:f4:79:c7:64:
ec:49:ae:4f:17:01:23:3e:3d:5f:d6:01:98:d2:1f:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:B2:18:25:F6:86:09:DC:A3:32:79:D8:9F:AA:3C:45:C8:87:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UY6yGCX2hgncozJ52J-qPEXIh08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:a6:a7:b7:bf:e3:d2:b9:6d:ce:02:cd:35:9b:2a:99:ab:3b:
07:6f:40:70:84:84:7d:4a:66:3f:4a:3a:f8:02:65:1d:4a:7b:
4c:b0:96:4f:09:0c:56:39:cd:87:a6:1f:a2:11:a8:4f:9e:3b:
d3:7a:31:3f:13:96:58:c0:82:56:19:32:17:0c:71:4e:6d:11:
c9:01:5a:13:2b:62:52:83:52:20:eb:29:59:e0:6a:9c:58:86:
e3:3d:f5:2c:6d:aa:ef:83:ec:08:3c:62:20:2e:3b:ee:95:37:
6d:3c:3c:ff:c5:64:db:43:8e:c2:cd:0c:4f:d0:a5:7b:9c:ff:
ca:9b:b4:e7:e4:ce:2d:f3:52:96:45:93:a1:d3:f8:b0:67:fd:
f6:8f:95:15:cf:32:9d:85:6b:a6:f5:c3:98:6c:67:26:47:83:
0b:05:a5:34:b7:1f:67:a8:f2:41:0d:8c:29:17:f3:30:33:a2:
4b:bb:c5:fa:db:6d:35:3d:89:d9:3e:fb:25:7d:d3:67:03:d2:
dd:b7:18:94:e8:69:9a:0d:ae:24:b8:61:be:e3:2b:c8:95:32:
b6:74:e4:d4:44:61:43:f4:43:23:a5:9c:42:c5:4d:b4:01:d3:
b3:ec:bf:e5:97:c7:fc:aa:a7:52:49:25:30:c1:7a:3c:c6:97:
7d:23:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:10 2025 by rpki-client