Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uW-5VIovNvthdNlSwZrRSUJOJQE.roa
File: uW-5VIovNvthdNlSwZrRSUJOJQE.roa (raw, json)
Hash identifier: Qagof7sd8PYc8LQN1NpbGrnHXjHoZG3BOps8fPIEncY=
Subject key identifier: B9:6F:B9:54:8A:2F:36:FB:61:74:D9:52:C1:9A:D1:49:42:4E:25:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865757FFA24FEF1FF62452BA91C6E76254
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uW-5VIovNvthdNlSwZrRSUJOJQE.roa
Signing time: Wed 15 Feb 2023 23:10:30 +0000
ROA not before: Wed 15 Feb 2023 23:10:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:57:ff:a2:4f:ef:1f:f6:24:52:ba:91:c6:e7:62:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 23:10:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b96fb9548a2f36fb6174d952c19ad149424e2501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:11:4e:79:99:7b:3a:36:a8:60:65:0b:53:
6a:e8:56:ed:cc:d6:13:f2:91:15:9c:ff:5b:a4:8e:
a9:00:ac:1b:ab:fb:5c:b3:6d:b9:d8:08:0d:58:30:
e1:b1:d1:b0:50:28:3c:be:46:59:1e:3a:c8:e3:d0:
b8:92:fd:98:fd:21:9c:bc:ee:8b:f6:e7:25:9b:d3:
ee:8c:03:08:d3:49:5f:8d:02:ba:c9:e2:aa:9e:07:
20:7f:25:ee:8d:a7:85:3b:40:51:16:ac:a8:fa:4d:
41:ce:72:05:57:3b:2d:20:51:2c:5d:1c:8e:cb:4e:
e1:4d:2c:34:b5:c4:63:da:a2:0a:b5:b3:84:b1:a4:
5d:6b:b9:eb:91:b4:61:17:d3:2f:d3:f2:58:7d:48:
4d:31:1b:22:e8:12:f0:8f:c5:3b:c9:ed:33:79:68:
6c:4a:95:26:04:17:f6:8e:11:6b:f8:95:8a:3c:cb:
cd:99:88:12:aa:b3:e6:7f:05:22:a1:1f:e6:21:0f:
00:e4:dc:25:17:51:f0:4d:18:40:80:44:51:a7:4f:
74:8d:62:8f:be:b5:42:bb:70:31:43:34:74:06:bb:
23:45:18:9d:21:f9:e2:c0:fa:c2:45:03:31:cd:c7:
78:0f:5b:2e:af:43:2c:a3:91:69:e2:50:2a:26:64:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:B9:54:8A:2F:36:FB:61:74:D9:52:C1:9A:D1:49:42:4E:25:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uW-5VIovNvthdNlSwZrRSUJOJQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:d8:00:e9:b1:ce:6e:bf:60:11:5b:71:f5:c0:3a:fb:a9:86:
d8:25:b9:9b:af:c5:09:7a:44:e8:05:d6:17:71:ae:24:16:50:
52:07:98:aa:9d:65:cd:ba:bb:aa:17:ee:a9:b3:97:8f:24:f8:
ad:83:fc:c3:73:e2:c2:09:5d:a2:d1:c2:9a:8d:f8:c4:c9:69:
e4:7b:ed:73:9c:fe:a0:46:85:8d:e1:8a:71:e7:24:c2:28:a2:
b6:e5:21:d4:44:e5:8f:c2:08:47:6d:86:5e:dc:c0:2d:6d:f0:
18:7b:95:c5:2c:32:83:be:73:17:f7:4d:50:20:a5:d5:84:e0:
6e:fe:28:ce:4d:ad:bd:bd:0d:f9:37:b3:ad:bf:ca:90:2e:34:
91:c3:d8:03:70:d2:c5:65:7d:5a:20:4d:74:7f:0c:a2:73:c1:
e4:90:c3:92:c4:ae:93:b2:53:92:c7:4b:c2:c6:a6:42:e1:fd:
81:f8:f1:b1:23:65:4b:39:14:d1:1e:24:4d:42:e4:70:28:54:
c8:2f:86:09:63:26:ab:0b:9b:38:a0:a5:cb:a2:d4:1b:3b:18:
92:01:31:80:7f:8d:aa:b8:84:7f:c9:d0:c9:91:cf:9c:1d:90:
96:90:b0:bc:ac:9f:55:6f:ef:96:bd:7f:c8:83:38:dd:f7:16:
3e:a2:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:38:37 2025 by rpki-client