Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uFyj7je0v6fD_IKU8rWBr8hWyh8.roa
File: uFyj7je0v6fD_IKU8rWBr8hWyh8.roa (raw, json)
Hash identifier: Q9YhEsU3NScJOwMlkUZVwpyvDNXmIMjjXDJfpFBko0g=
Subject key identifier: B8:5C:A3:EE:37:B4:BF:A7:C3:FC:82:94:F2:B5:81:AF:C8:56:CA:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184967848312A7D921593B3ED76FD48B44A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uFyj7je0v6fD_IKU8rWBr8hWyh8.roa
Signing time: Sun 20 Nov 2022 19:16:15 +0000
ROA not before: Sun 20 Nov 2022 19:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:96:78:48:31:2a:7d:92:15:93:b3:ed:76:fd:48:b4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 20 19:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b85ca3ee37b4bfa7c3fc8294f2b581afc856ca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:0d:cf:60:a7:bb:7f:37:cd:91:2c:b4:7f:
8e:41:9d:d4:cb:b0:f6:f0:a7:20:00:bb:ea:36:16:
17:49:c3:26:2d:3e:db:7d:33:89:85:8c:34:33:8d:
08:c8:4a:0a:a3:dd:55:ad:10:27:30:17:f4:3f:48:
fa:df:1e:b5:29:5d:82:91:b7:c3:28:30:bd:94:1e:
f2:ee:7c:cd:3e:9f:54:de:b2:a5:7a:8b:a3:ea:d7:
f2:04:65:f2:8e:96:0c:43:b5:61:34:a1:5b:00:14:
82:5a:2c:ba:06:56:7a:77:f6:2b:32:79:01:bf:af:
1b:78:b4:5d:f7:5f:f0:99:83:9b:8a:cc:a8:83:09:
3c:22:ab:7d:6f:66:74:7a:70:55:85:2f:86:68:33:
08:35:05:2a:b1:ec:b4:78:52:48:ed:c4:56:0e:a5:
0a:3d:d9:5d:9e:4f:53:88:e5:66:b6:c7:16:6a:53:
15:97:4b:2c:f8:9f:10:96:c7:dc:16:e5:e1:41:78:
af:f1:56:1a:e7:15:30:4f:af:0d:23:f6:22:a3:d2:
a2:a8:52:b6:eb:63:e0:2e:7e:0f:65:85:b9:08:89:
a8:2e:4e:29:d8:76:58:e6:b3:a1:89:51:f1:94:a1:
a2:79:75:98:71:d8:78:62:a4:62:76:c3:0d:28:f2:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5C:A3:EE:37:B4:BF:A7:C3:FC:82:94:F2:B5:81:AF:C8:56:CA:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uFyj7je0v6fD_IKU8rWBr8hWyh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:ba:f5:03:a9:e8:34:01:1a:a2:10:a9:46:12:85:c8:06:48:
fb:4d:86:5d:de:aa:54:92:88:a2:77:38:4d:cd:ba:98:34:c0:
8f:f5:d0:c7:ae:7a:85:45:91:3f:2d:cd:5c:8c:9f:e9:ac:93:
d1:f7:ba:2b:ee:f9:58:ac:27:08:55:aa:df:8c:85:0d:87:95:
8b:b3:62:93:51:ed:dd:c4:32:1e:93:de:b8:62:fd:fe:f3:b8:
fc:09:f3:33:ba:ec:75:0d:76:33:20:85:eb:24:60:7a:6d:7f:
49:68:10:7d:d2:2d:6d:17:6d:30:b7:11:ee:d8:ee:a9:62:84:
8c:d8:c6:88:d8:e8:9a:3a:46:6e:94:09:9f:0e:ed:ac:e4:98:
1e:11:f0:e7:f8:50:a3:87:56:02:30:da:9f:0c:09:0c:2a:30:
b8:aa:1c:09:ce:68:57:e9:cc:77:b0:c6:7c:08:66:87:bb:b7:
e1:6b:68:ac:25:4c:a5:7a:29:35:e2:62:a8:47:fd:ae:0a:3c:
0b:fb:1b:be:71:f2:16:a8:75:d8:7a:69:6a:93:56:75:c9:d5:
9d:64:c5:32:62:56:21:5a:70:70:b6:bc:ff:21:66:56:3b:68:
a8:0a:8d:9c:7d:45:a3:98:bc:5a:07:57:1a:3f:15:a8:2b:df:
4a:56:9b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:58:28 2025 by rpki-client