Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/upAlIUHNVFsE8_jFNZz59DMlvYM.roa
File: upAlIUHNVFsE8_jFNZz59DMlvYM.roa (raw, json)
Hash identifier: F138FgKSoUuJpyXaooBpixcoyIKd0I2DLGCt6jBYRfE=
Subject key identifier: BA:90:25:21:41:CD:54:5B:04:F3:F8:C5:35:9C:F9:F4:33:25:BD:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C0BB727C718AA813C243F9E5CFFACF43
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/upAlIUHNVFsE8_jFNZz59DMlvYM.roa
Signing time: Tue 29 Nov 2022 00:13:40 +0000
ROA not before: Tue 29 Nov 2022 00:13:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c0:bb:72:7c:71:8a:a8:13:c2:43:f9:e5:cf:fa:cf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 29 00:13:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba90252141cd545b04f3f8c5359cf9f43325bd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:7a:1e:66:a4:f3:f7:88:9e:5f:ab:5a:03:
eb:cf:7f:b2:38:72:b8:01:1b:c3:60:be:e7:89:a8:
bd:48:aa:e4:10:1c:52:b6:52:53:b4:a3:f4:f0:1f:
fb:81:7d:04:9c:fc:76:47:8e:5c:52:31:95:99:08:
9f:03:fa:02:87:21:c8:25:3f:d7:52:64:f0:ca:89:
8b:5a:35:ab:37:03:40:3b:9d:ae:06:e9:34:4d:81:
0c:ae:ed:5d:35:be:8b:56:0e:ea:f2:ea:64:31:98:
1f:eb:d7:53:74:89:a6:f6:a8:54:ac:dd:cd:03:e8:
15:4b:0f:ad:c0:f2:62:f4:19:59:9b:50:7a:22:50:
5c:5a:6d:59:4a:11:a8:ae:76:fc:95:db:89:43:5e:
70:02:14:ff:a1:41:4c:e1:78:53:64:eb:e4:12:3a:
00:a5:ad:04:9c:1c:b1:f5:5e:70:d7:c2:38:a2:46:
8d:a1:30:71:6e:af:83:d9:b6:22:4d:11:6c:37:8f:
8e:b6:b2:c6:c2:9e:6d:37:ce:df:66:7f:11:b0:ef:
16:24:af:66:ae:7a:c1:2d:c1:78:5f:d6:58:9e:eb:
50:95:c6:7c:2e:56:95:3b:0e:27:1b:c3:86:1c:2e:
7f:34:d8:66:f7:ca:7d:94:63:b9:14:44:c9:df:db:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:25:21:41:CD:54:5B:04:F3:F8:C5:35:9C:F9:F4:33:25:BD:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/upAlIUHNVFsE8_jFNZz59DMlvYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:fc:76:ac:19:39:1c:af:0a:11:6d:e2:52:b6:f8:15:26:0e:
59:e0:a2:37:69:68:49:f7:42:b7:97:74:2d:e9:db:e8:24:ff:
e3:2b:f3:6d:fa:02:e0:4f:fd:c6:58:f0:a0:8f:2c:f2:cd:16:
f0:8f:90:a1:9a:a2:3f:19:1c:07:e3:79:fb:e7:f5:c4:9a:c7:
d9:4b:f3:a8:5f:2f:9f:3e:1b:78:ff:d8:f7:40:5e:55:5f:3b:
8a:2b:1c:94:12:ab:17:62:22:50:6d:06:a5:ee:04:ab:71:7b:
f6:f4:1c:00:b6:91:d7:cb:e4:c9:0f:76:0e:2f:0e:be:0b:7a:
a7:35:14:16:2e:82:6c:c5:82:92:c1:b2:30:08:3a:a4:c8:13:
ed:9c:f9:65:43:32:a5:4f:09:7f:3e:c5:12:b3:f2:33:d7:6b:
da:b8:c0:02:82:ab:1d:a8:42:58:72:dc:87:67:2c:aa:e2:da:
35:55:ca:57:1b:82:9c:02:a7:b5:04:61:a1:bc:83:3a:27:ab:
91:77:1f:1a:dd:2f:f2:d7:c3:92:ba:a3:f4:a1:9d:f7:49:5a:
d6:31:61:8e:24:93:51:9d:11:c0:a7:ac:bd:34:21:9f:1d:e8:
1e:66:c2:37:6a:d0:e7:3a:9f:62:c4:e9:fc:bc:38:93:06:62:
0f:b8:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:42 2025 by rpki-client