Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uzem70szGKc15yNCPfU3QcvJ3PY.roa
File: Uzem70szGKc15yNCPfU3QcvJ3PY.roa (raw, json)
Hash identifier: YkPQnyi1Rkaa1Zf1MkqExGdzu1Wjy4h64c1DFePz8xE=
Subject key identifier: 53:37:A6:EF:4B:33:18:A7:35:E7:23:42:3D:F5:37:41:CB:C9:DC:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864709C7FA20A8224120EC8C08B67AF330
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uzem70szGKc15yNCPfU3QcvJ3PY.roa
Signing time: Sun 12 Feb 2023 19:11:08 +0000
ROA not before: Sun 12 Feb 2023 19:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:47:09:c7:fa:20:a8:22:41:20:ec:8c:08:b6:7a:f3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 19:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5337a6ef4b3318a735e723423df53741cbc9dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7e:cf:2f:0d:00:73:8e:0b:53:50:42:ff:14:
00:a2:71:0c:9d:33:05:b1:bb:3a:1c:dc:3b:a0:55:
26:48:a0:39:8d:eb:80:7f:18:2a:3e:68:d5:44:19:
39:91:30:95:e1:4a:cf:ad:62:2c:53:87:dc:53:15:
8d:b0:07:e1:5d:6d:de:28:d4:11:0e:4b:8d:4b:f6:
9d:4f:89:93:80:da:39:31:f2:2d:bb:c8:54:ae:12:
37:09:91:0d:b3:8a:8a:4b:41:c4:1d:ba:bb:1f:49:
4f:0f:19:b3:e0:44:a0:6e:aa:3f:f0:20:3a:04:c5:
8f:aa:9d:0a:3a:98:ba:15:fd:e2:e4:fa:cf:94:26:
7d:0d:3b:10:53:4f:e9:34:db:7b:e1:ce:0f:ae:e3:
0b:6d:bf:69:1e:c5:8b:c4:94:7d:4c:fb:0b:af:23:
1d:80:bf:6e:6c:ba:c6:00:37:8b:59:a1:7b:18:7e:
8e:fc:57:ff:b4:22:21:78:6c:ae:f0:cf:68:2d:db:
31:a5:10:c3:49:1d:c6:40:13:67:67:07:ef:d3:60:
7a:41:e2:a5:c6:57:1d:05:cc:4c:f9:30:9a:f0:1b:
0e:b8:74:63:30:89:17:61:e6:ff:66:a4:bf:50:3a:
2d:a9:34:af:e7:8b:61:9e:80:f7:78:64:d9:5f:1d:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:37:A6:EF:4B:33:18:A7:35:E7:23:42:3D:F5:37:41:CB:C9:DC:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uzem70szGKc15yNCPfU3QcvJ3PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:28:6e:64:75:5c:13:1a:61:0a:f2:5c:f7:dc:ee:ae:f5:60:
03:31:bb:02:5d:74:d3:16:2d:59:4d:17:03:bd:b4:6c:8a:10:
b6:4f:62:d1:cb:34:4c:2d:dc:b0:71:7e:aa:b8:ca:fb:48:51:
76:d6:99:0b:ad:34:69:dc:7a:19:7e:41:1c:cd:83:12:51:16:
05:e0:8f:b2:c9:3e:e5:8a:a2:01:52:9f:ed:59:3c:89:34:63:
80:12:87:c3:c8:54:0b:d0:fe:cb:f8:15:da:f5:5a:36:f0:64:
58:15:76:16:e2:80:3b:4a:98:a9:a2:04:2a:d8:ad:04:d8:b8:
f5:6b:04:49:17:70:1e:8d:83:c4:82:aa:1d:41:9f:cc:45:d1:
34:3c:e9:8b:d8:39:27:da:8f:e0:e6:80:0a:58:f0:f8:d7:f6:
91:a9:7c:14:11:97:44:6e:a4:7f:fc:e6:4c:f0:fc:3e:08:22:
fc:a7:13:97:20:a2:19:da:29:d3:66:6a:83:e9:15:48:44:5a:
96:80:33:a9:60:8b:9f:60:9b:08:0a:06:e0:41:11:29:6f:e9:
35:49:b5:9f:17:47:34:29:57:23:10:29:93:71:a6:5b:51:32:
f9:7e:6b:bc:d0:db:b9:78:71:6e:bc:be:f7:3c:cc:ff:a7:fb:
bc:10:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:31 2025 by rpki-client