Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UbX70mlQSR8nNFIA9Cq1NVwbFxg.roa
File: UbX70mlQSR8nNFIA9Cq1NVwbFxg.roa (raw, json)
Hash identifier: K9cJy9capdX5w1a5G4Z3YCnDXfqwGyo116dZ+AgUT+w=
Subject key identifier: 51:B5:FB:D2:69:50:49:1F:27:34:52:00:F4:2A:B5:35:5C:1B:17:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71CB920A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UbX70mlQSR8nNFIA9Cq1NVwbFxg.roa
Signing time: Sat 12 Mar 2022 02:09:29 +0000
ROA not before: Sat 12 Mar 2022 02:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909166602 (0x71cb920a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 02:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51b5fbd26950491f27345200f42ab5355c1b1718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:f7:6b:5f:11:6d:44:d6:b6:11:3e:f0:0a:
1e:e7:8d:d1:b6:77:39:ac:16:44:c2:28:1d:fb:bf:
e2:11:bb:5f:8d:63:fb:6d:90:76:7f:6f:49:95:1c:
2c:06:f2:f0:1e:95:20:52:64:a2:b0:35:ad:5e:fb:
e0:5c:97:72:80:15:35:dd:66:95:12:48:f1:ad:ba:
06:1a:79:92:5c:a3:af:47:cc:37:f4:59:5b:a1:4a:
b1:61:34:b8:80:b6:54:1b:ce:82:58:8c:e4:f8:85:
8d:b0:50:d2:db:87:dc:19:71:6d:bd:d9:1d:bf:d0:
83:85:70:38:3e:52:54:4e:a3:2a:00:4c:5f:e8:77:
9a:43:c9:85:dd:43:a7:46:ea:87:69:3a:c8:59:80:
54:85:f0:77:76:6d:a2:24:6d:88:52:a8:3c:d1:87:
12:f7:11:32:a0:a3:1b:37:a2:25:a2:37:1c:9f:a5:
70:2a:85:cc:a3:b1:cb:6f:d1:4c:a0:9c:02:95:37:
4a:bb:27:51:04:bc:fa:d2:66:50:3d:87:e6:2e:00:
46:23:51:57:26:9f:27:fb:a0:fe:c2:d4:6d:98:bf:
bb:07:47:40:a8:8a:eb:c5:6a:8a:52:91:dd:a0:72:
cc:30:3d:7d:4b:56:a8:97:bc:95:85:9f:70:1f:23:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:FB:D2:69:50:49:1F:27:34:52:00:F4:2A:B5:35:5C:1B:17:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UbX70mlQSR8nNFIA9Cq1NVwbFxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:58:ef:af:76:77:16:67:65:20:47:dd:4f:49:65:07:ec:43:
f9:d7:a0:9f:58:7c:ae:dc:29:35:84:c1:15:d7:c7:8a:c5:7d:
c9:3d:ae:93:8e:23:bb:a9:6d:81:09:8a:a3:5c:7d:94:80:42:
d7:b3:b3:8d:a4:f2:0a:ef:bf:56:7e:7f:02:18:99:2f:ff:d6:
3d:ac:33:67:ab:40:ce:81:5d:c7:e5:a6:3c:3e:1d:8d:3e:3b:
60:06:bb:ae:fe:96:35:60:ae:21:68:f2:53:b1:11:3f:83:39:
d8:63:78:a6:e0:30:1f:66:2b:c9:c7:bc:3b:e5:ab:9c:7d:05:
b0:aa:84:36:e3:fc:ae:ca:ad:1c:55:20:2e:d0:07:06:85:ed:
87:1d:0c:9a:3d:34:c8:27:48:b8:6f:d2:4f:9d:c5:b5:3e:8f:
45:4c:a5:a9:8e:5f:22:44:47:15:4d:a1:50:fa:b6:e7:87:b3:
b8:2a:d7:1e:7d:4b:fd:39:60:d5:2f:3c:24:e0:31:6f:53:c0:
29:31:41:ec:1d:36:8a:54:74:5d:96:5e:c3:a1:27:30:1e:69:
fa:7e:12:6e:21:9b:f1:31:87:20:21:3f:8e:be:d4:39:ac:53:
a2:31:d6:f8:4f:b9:24:5d:1b:b5:0a:39:2e:2f:e6:77:04:24:
58:92:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:37:58 2025 by rpki-client