Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uyo5AHciqp_BtLanMDzxHbhh0TA.roa
File: Uyo5AHciqp_BtLanMDzxHbhh0TA.roa (raw, json)
Hash identifier: g+jySryUS6DXd2/zKcwk5t+U0DQWkoHlzX2WQ59piGE=
Subject key identifier: 53:2A:39:00:77:22:AA:9F:C1:B4:B6:A7:30:3C:F1:1D:B8:61:D1:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845507B24D50456AE859A9260DE7B5848F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uyo5AHciqp_BtLanMDzxHbhh0TA.roa
Signing time: Tue 08 Nov 2022 02:17:58 +0000
ROA not before: Tue 08 Nov 2022 02:17:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:55:07:b2:4d:50:45:6a:e8:59:a9:26:0d:e7:b5:84:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 8 02:17:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=532a39007722aa9fc1b4b6a7303cf11db861d130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:89:91:79:a8:39:80:c5:b7:b2:c0:20:0b:63:
11:d5:ae:42:88:a3:4f:df:bc:82:54:c2:6b:3d:14:
b5:81:2d:ef:65:ed:9d:7e:ee:3a:50:4f:9a:b4:ce:
e3:14:cb:89:e7:cb:af:b4:23:c9:74:9a:84:a2:16:
c6:3a:06:cf:71:9d:f0:f8:09:26:74:b1:7d:be:6b:
e9:b6:0a:00:c3:6c:c2:d9:7f:b2:cb:ce:09:ab:c3:
b3:4a:80:c1:b7:46:58:59:57:69:87:fa:76:d1:0c:
d8:28:8b:e5:4f:04:d8:26:01:ae:97:70:05:a7:a2:
a6:19:a9:57:d0:df:da:f9:4f:8d:83:8b:74:f9:19:
77:49:e4:c2:b7:8e:7b:6c:19:fb:ef:fa:e8:d0:27:
46:5c:74:8b:d3:87:ad:82:da:08:07:e3:d4:cb:7f:
56:d0:e4:06:9a:6f:81:87:85:87:4b:48:94:f6:6a:
b9:58:44:47:d2:7d:c8:92:4a:da:f6:11:78:ca:c0:
ca:ee:91:a9:6f:76:95:9f:6f:d0:45:72:f3:7c:b2:
5a:b5:9e:17:6b:0b:82:8d:57:ae:01:e8:93:56:d9:
16:41:f8:b9:bd:6e:d0:b5:27:5f:a3:57:cf:b6:44:
e2:30:32:0f:e4:cf:c2:f6:18:73:f6:44:d2:45:b1:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:39:00:77:22:AA:9F:C1:B4:B6:A7:30:3C:F1:1D:B8:61:D1:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uyo5AHciqp_BtLanMDzxHbhh0TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:92:a3:de:fc:1b:6a:61:54:ea:2c:79:a8:72:62:15:12:04:
74:39:59:e5:4b:11:37:98:38:cd:81:fa:89:cd:15:66:29:27:
88:22:d1:e6:78:6d:d5:1b:8a:0f:f0:ad:1b:62:c7:40:a4:bf:
7b:f8:62:9f:94:26:73:06:20:b4:c2:e2:a7:23:cd:80:b4:cd:
9f:8a:c3:55:65:38:7e:99:23:10:a2:af:a7:2b:98:ec:8c:11:
f8:ee:14:2a:9e:ac:e6:56:74:bf:fd:c0:45:8f:f0:8b:44:6f:
ef:85:53:49:f4:e9:c4:43:eb:83:7d:86:58:00:05:72:46:fe:
4c:14:b3:89:99:ba:6d:01:8a:e7:eb:cc:eb:ce:6b:c7:91:cc:
7b:ca:03:8f:21:4c:7c:5d:3d:e4:b5:15:6e:0f:00:d5:c7:dd:
42:e4:68:cb:78:80:da:e0:80:34:39:ad:b4:1a:e5:4f:7f:21:
41:c9:4c:fe:75:7d:90:60:4c:d2:12:ba:c9:8c:5a:61:9e:89:
b6:ce:98:f2:aa:6e:61:29:0f:4d:f2:4c:68:96:13:ee:c6:35:
4e:8b:7f:5f:a3:b6:c1:8d:74:8c:ba:b8:6f:03:59:f8:8f:a2:
84:85:62:be:df:bd:0d:93:3f:40:d9:f6:ae:f1:e8:03:e8:f9:
b6:ab:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:57:03 2025 by rpki-client