Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_UagNGbke96H0OzjZSdx20mhiGc.roa
File: _UagNGbke96H0OzjZSdx20mhiGc.roa (raw, json)
Hash identifier: lr0VjGz1JodDX7NiGKJh5BFu4lPE7aj5KqQUQkPXZSg=
Subject key identifier: FD:46:A0:34:66:E4:7B:DE:87:D0:EC:E3:65:27:71:DB:49:A1:88:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C7D1C2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_UagNGbke96H0OzjZSdx20mhiGc.roa
Signing time: Mon 21 Feb 2022 09:11:04 +0000
ROA not before: Mon 21 Feb 2022 09:11:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820138543 (0x6c7d1c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 09:11:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd46a03466e47bde87d0ece3652771db49a18867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:fb:47:fb:e6:9a:b4:5b:ab:84:68:b7:0b:
10:2f:9d:47:cf:16:02:6c:bc:a1:35:fc:ff:5d:65:
74:db:8b:f3:af:37:0d:a3:15:29:33:04:cb:89:7b:
85:3f:97:04:83:22:38:c6:97:20:db:b8:ba:10:53:
01:ff:41:74:5d:a5:e0:9d:6b:98:ae:3c:3b:56:a9:
2e:f4:69:16:af:f1:07:d4:92:76:fc:b8:7d:10:8a:
d1:92:53:94:61:9a:da:a0:b5:90:77:81:9a:d4:6a:
85:30:f5:c7:28:86:16:81:f3:ee:3b:d8:8b:81:90:
dc:24:28:cc:72:ef:6d:70:40:71:ef:6f:20:f7:a7:
1e:69:e4:bd:49:05:05:6b:0c:86:d9:be:ca:8f:a1:
20:df:88:77:bc:74:42:34:9f:b7:ea:00:9a:30:30:
0d:a1:67:0c:5a:50:8d:af:a8:b5:84:77:bf:38:e1:
84:2c:49:c6:4e:f4:2b:de:cb:61:f2:7f:4a:5a:89:
7c:e0:5e:a0:23:19:49:5f:23:3f:ee:6a:f6:9c:7d:
63:10:b3:ee:ef:0c:93:f9:28:d5:88:80:d7:e2:3b:
7c:ce:0b:e2:ea:b4:aa:83:2e:1b:8b:23:31:d2:44:
e9:3f:7d:bf:64:43:cc:c3:72:28:06:3b:0d:7c:44:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:A0:34:66:E4:7B:DE:87:D0:EC:E3:65:27:71:DB:49:A1:88:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_UagNGbke96H0OzjZSdx20mhiGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:e8:ff:f5:e1:a0:e3:53:90:5c:b1:f7:dc:1d:1a:f8:5f:11:
a1:a1:1c:8f:5e:cd:7b:bd:98:5c:a2:dc:7d:07:c0:c5:9a:df:
2c:b4:08:61:b7:b4:5e:75:3b:fb:cf:6e:64:53:a1:34:3e:70:
25:a7:15:20:37:8d:94:ca:67:8a:24:6c:1d:58:54:c8:50:52:
bf:6f:a6:ba:e1:79:fb:c1:a2:cd:f8:41:c8:5b:8e:ca:7f:ed:
4d:b3:e8:c2:39:77:76:09:78:77:51:1d:45:54:03:0e:89:01:
31:d1:2a:69:45:5f:c4:54:41:2f:3e:2c:cd:73:56:a0:9b:68:
6b:83:97:65:0b:5f:39:be:30:b5:2d:ca:80:06:7a:bf:4e:11:
20:3a:9c:70:60:f7:fc:aa:67:aa:e2:77:f9:1e:9f:4f:14:21:
aa:06:54:f6:ac:1b:f6:6a:1f:95:72:d5:3b:62:45:c9:7f:93:
3b:c8:6e:c6:5e:49:4e:06:a9:ba:4d:6a:aa:6a:98:4c:12:42:
b6:90:9c:38:43:30:6f:59:86:5a:c5:be:5b:1a:ae:c1:09:94:
11:23:1b:e8:47:98:3a:42:64:3b:21:06:98:1b:58:3e:b2:b1:
a6:a5:a2:1a:5c:e6:99:26:a0:43:f6:ab:f1:0f:23:e5:58:ae:
ca:4e:5e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:12:51 2025 by rpki-client