Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RYGqr6kQwwSNFEfhZ-zPDeRiEdQ.roa
File: RYGqr6kQwwSNFEfhZ-zPDeRiEdQ.roa (raw, json)
Hash identifier: eb7jdRLtt5lddgiV5J9LXCjTHosUbOpVgyW3egT6Ib8=
Subject key identifier: 45:81:AA:AF:A9:10:C3:04:8D:14:47:E1:67:EC:CF:0D:E4:62:11:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869ABB3665EA638DED810E2AA9DA90051E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RYGqr6kQwwSNFEfhZ-zPDeRiEdQ.roa
Signing time: Wed 01 Mar 2023 01:13:25 +0000
ROA not before: Wed 01 Mar 2023 01:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:bb:36:65:ea:63:8d:ed:81:0e:2a:a9:da:90:05:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 01:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4581aaafa910c3048d1447e167eccf0de46211d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:7b:d5:60:c0:c6:89:31:05:a7:38:a3:b8:
fc:56:94:cc:e7:d6:0e:08:21:e9:cc:1f:17:fc:78:
76:b3:ed:af:f1:8c:55:0d:50:67:7e:81:41:bf:73:
4c:ac:b4:e8:b7:55:17:74:60:c8:c6:88:f8:d3:1e:
26:dc:10:b8:e2:0a:e1:76:9f:bd:70:80:07:b4:03:
05:50:88:ec:bf:f9:65:2e:b9:bb:a4:41:1d:4c:98:
87:8b:35:7b:0a:90:b5:2b:a2:21:1e:11:7e:e2:ae:
62:4b:c5:38:e1:0a:c7:54:c8:53:34:84:07:64:94:
72:56:0e:0c:d4:a4:6f:3f:89:e9:48:10:ef:7a:2e:
fb:91:bd:eb:96:d5:20:93:a8:cc:f0:71:f2:dd:51:
54:39:3f:89:b3:3a:1b:f5:e6:f8:5b:d6:e5:f5:04:
9f:46:6b:a1:c7:c4:fd:b2:d3:8f:9b:06:b4:d1:0c:
51:fe:d6:23:2b:38:9d:4b:8b:2f:2a:39:1e:93:71:
67:22:9b:4c:8b:ef:20:15:be:4f:3c:1c:69:59:ef:
f2:d1:9e:41:3d:4e:1d:fe:db:86:2d:ea:d0:a2:f8:
61:a6:7d:85:90:c3:65:50:14:9d:27:a5:d8:83:bf:
f2:41:f1:67:ab:f8:a1:3e:49:47:2c:d1:f5:e8:07:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:81:AA:AF:A9:10:C3:04:8D:14:47:E1:67:EC:CF:0D:E4:62:11:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RYGqr6kQwwSNFEfhZ-zPDeRiEdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:e2:d9:90:76:54:68:32:6e:a0:d8:7f:ea:16:82:e0:09:e5:
0f:7d:68:14:ab:e6:af:37:b7:3a:6f:c4:09:c9:e5:66:c3:d7:
b4:27:3a:15:3c:3e:99:fb:22:0b:44:dd:5a:4f:f8:4f:33:49:
6f:c4:26:10:89:4b:03:c1:53:03:32:76:61:65:5d:c4:85:4b:
86:6b:44:01:ea:c0:f3:9f:c9:8d:e5:65:80:17:56:8e:44:fc:
c9:72:d9:de:f2:5a:2a:79:cc:79:aa:c5:2c:a3:b5:51:75:6d:
91:29:8a:f2:b1:54:08:91:c4:cd:48:9e:f8:57:e0:d5:44:1b:
38:8a:71:00:14:e2:ed:f7:26:af:57:d0:a5:c5:b6:a7:73:43:
cb:ab:24:cd:30:63:15:0e:18:76:72:b2:fc:69:49:94:a7:7f:
81:b3:4c:63:35:13:71:46:6d:33:0a:4a:fa:83:b0:5a:b0:0a:
07:57:bd:f4:73:9e:32:bd:87:07:1e:91:37:ad:f4:21:40:25:
97:8c:66:35:b1:0a:4a:70:ae:a9:e3:ed:ac:0b:ae:ef:9b:77:
62:b3:51:75:25:3d:75:43:6f:b2:e2:b5:03:13:48:b6:19:68:
62:50:bc:6b:59:fa:0c:9e:46:cd:a2:ca:f6:d1:34:70:6d:1e:
65:a9:94:cd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaauzZl6mON7YEOKqnakAUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAxMDExMzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTgxYWFhZmE5MTBjMzA0OGQxNDQ3ZTE2N2VjY2YwZGU0NjIxMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GF71WDAxokxBac4o7j8VpTM59YO
CCHpzB8X/Hh2s+2v8YxVDVBnfoFBv3NMrLTot1UXdGDIxoj40x4m3BC44grhdp+9
cIAHtAMFUIjsv/llLrm7pEEdTJiHizV7CpC1K6IhHhF+4q5iS8U44QrHVMhTNIQH
ZJRyVg4M1KRvP4npSBDvei77kb3rltUgk6jM8HHy3VFUOT+Jszob9eb4W9bl9QSf
Rmuhx8T9stOPmwa00QxR/tYjKzidS4svKjkek3FnIptMi+8gFb5PPBxpWe/y0Z5B
PU4d/tuGLerQovhhpn2FkMNlUBSdJ6XYg7/yQfFnq/ihPklHLNH16AfhBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEWBqq+pEMMEjRRH4Wfszw3kYhHUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUllHcXI2a1F3d1NORkVmaFotelBEZVJpRWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHTi2ZB2VGgybqDYf+oW
guAJ5Q99aBSr5q83tzpvxAnJ5WbD17QnOhU8Ppn7IgtE3VpP+E8zSW/EJhCJSwPB
UwMydmFlXcSFS4ZrRAHqwPOfyY3lZYAXVo5E/Mly2d7yWip5zHmqxSyjtVF1bZEp
ivKxVAiRxM1InvhX4NVEGziKcQAU4u33Jq9X0KXFtqdzQ8urJM0wYxUOGHZysvxp
SZSnf4GzTGM1E3FGbTMKSvqDsFqwCgdXvfRznjK9hwcekTet9CFAJZeMZjWxCkpw
rqnj7awLru+bd2KzUXUlPXVDb7LitQMTSLYZaGJQvGtZ+gyeRs2iyvbRNHBtHmWp
lM0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:43 2025 by rpki-client