Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/15YZN_NdhsNICPR3bHCXXJhIxEU.roa
File: 15YZN_NdhsNICPR3bHCXXJhIxEU.roa (raw, json)
Hash identifier: EQunFEql3Yul8R0NJo+JTIGqbYC/Zb6xAxylwlSL6is=
Subject key identifier: D7:96:19:37:F3:5D:86:C3:48:08:F4:77:6C:70:97:5C:98:48:C4:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C1D61625EF386F305B1C12506464015A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/15YZN_NdhsNICPR3bHCXXJhIxEU.roa
Signing time: Mon 10 Oct 2022 12:19:36 +0000
ROA not before: Mon 10 Oct 2022 12:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:d6:16:25:ef:38:6f:30:5b:1c:12:50:64:64:01:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 10 12:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7961937f35d86c34808f4776c70975c9848c445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:78:d8:92:6b:a3:a2:0a:59:8d:bb:c1:6a:ae:
9e:bb:75:8c:ed:0f:fb:09:f9:b0:eb:11:98:e9:e4:
35:e8:b2:7a:3e:4d:4d:ce:e5:44:cb:72:ae:6f:86:
03:ec:da:f3:17:32:61:c3:6f:fa:3c:48:ed:e4:e2:
06:96:6f:69:49:f7:4b:02:d9:a0:64:d2:03:d6:90:
0f:29:bb:38:a2:f5:9c:eb:03:95:45:b0:c3:fa:78:
73:40:e6:49:92:6e:a6:00:5a:bb:b8:85:0b:eb:4b:
d6:58:7e:70:12:45:de:17:94:68:3c:95:38:02:07:
12:c0:d7:9f:75:94:14:f1:f1:7b:c3:2f:78:3e:a9:
0c:8b:ff:cf:8d:2f:31:62:a0:e9:ba:e4:45:3d:c3:
3c:5b:40:60:5a:f6:07:bd:0f:d0:76:62:5c:df:8f:
54:ad:e7:f5:2a:60:02:7e:a7:f8:ce:49:07:02:f7:
22:61:bb:71:ae:2b:ec:08:09:6b:3c:12:c0:02:9c:
b7:b0:16:db:e5:03:b5:18:45:ae:cb:b3:78:62:2b:
bc:23:d8:09:29:de:cb:10:fb:6a:b2:a0:e7:25:b2:
a6:e6:cb:58:4e:e1:39:f8:cd:bd:d1:b5:5a:b6:85:
68:11:d6:3f:5b:22:6f:9a:f1:8b:2d:3b:67:a1:57:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:19:37:F3:5D:86:C3:48:08:F4:77:6C:70:97:5C:98:48:C4:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/15YZN_NdhsNICPR3bHCXXJhIxEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:f3:cd:f3:71:79:a0:8a:fc:6b:16:e3:f2:0b:40:11:be:4d:
fa:c7:20:71:5d:24:51:1b:e9:8d:1d:3d:0d:01:9a:ea:67:20:
bd:ce:f2:2f:27:15:1d:ca:10:2f:46:5d:20:4c:3f:94:32:16:
d2:83:7a:52:fa:27:e0:17:12:47:30:43:9a:f7:73:95:fc:d8:
9d:d6:7c:b5:c5:d3:1d:23:2e:26:3a:bb:1b:6c:82:66:5f:cd:
4b:84:b2:04:a3:30:bf:80:37:76:85:d2:c3:a2:72:83:cf:8f:
45:b5:c6:4a:e3:94:b6:17:69:f5:02:44:94:22:f5:05:47:17:
36:da:cb:74:b2:94:94:19:cc:bf:06:c6:87:a1:2e:12:95:29:
5c:89:4f:65:06:1e:3b:17:29:80:82:1f:c1:74:14:32:ea:4a:
ca:17:46:d8:ce:a8:02:3a:42:c0:b3:56:5e:e9:0d:3e:77:bb:
53:f1:79:34:4e:8c:ad:46:af:93:84:75:15:de:81:00:7d:41:
90:24:00:e9:4d:9f:7f:cb:99:6f:18:b1:55:d8:d2:9e:71:bf:
12:44:38:11:9d:87:e6:50:3e:af:f5:68:82:1d:4f:b3:74:76:
09:da:20:b5:ee:0d:17:94:3b:de:f9:64:28:8d:a3:f9:60:f8:
4a:3c:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:45:46 2025 by rpki-client