Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RuSYyi7iLyXPKcE8SaeGvFJgorg.roa
File: RuSYyi7iLyXPKcE8SaeGvFJgorg.roa (raw, json)
Hash identifier: sRLdohmbkFuaHzHDtl3JSLrHTb5NVCcoNZ4sHAkVTN4=
Subject key identifier: 46:E4:98:CA:2E:E2:2F:25:CF:29:C1:3C:49:A7:86:BC:52:60:A2:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B5BCE56FA3572E8DBD66EF9190E30252
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RuSYyi7iLyXPKcE8SaeGvFJgorg.roa
Signing time: Mon 06 Mar 2023 07:05:00 +0000
ROA not before: Mon 06 Mar 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:b5bc:4b3d/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b5:bc:e5:6f:a3:57:2e:8d:bd:66:ef:91:90:e3:02:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46e498ca2ee22f25cf29c13c49a786bc5260a2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:5a:44:af:0f:44:5e:58:52:96:fe:bc:bf:
bc:e9:34:56:eb:f8:12:eb:fe:65:c3:5a:ac:35:36:
c1:c8:7d:fb:ce:76:51:66:ed:c9:cc:e1:ce:d4:24:
27:64:66:69:e1:ca:b0:76:7e:9d:36:80:55:3d:05:
1a:55:77:cf:7d:e7:23:56:7a:8a:1c:6f:b9:18:bf:
89:f2:bb:f7:5d:c7:9a:d8:fd:86:ef:00:c1:44:54:
9c:4c:17:9b:f5:c7:49:85:ff:d1:2c:4f:b5:86:88:
39:ca:71:de:67:6b:95:89:0d:88:d1:c3:26:9d:42:
9b:e1:28:5f:2c:df:95:8f:59:ef:01:ea:eb:b8:3c:
46:78:6a:98:85:af:8a:aa:16:7f:95:5d:c2:00:ff:
5a:27:f4:b3:29:a3:71:56:24:2f:8f:ac:de:d6:27:
7f:ad:fb:e9:93:51:c1:de:8b:33:95:f5:4c:1a:b0:
e9:75:54:23:78:46:e9:e1:87:68:55:dd:75:47:12:
fb:19:75:dc:c4:7e:b1:52:55:25:4e:62:f9:ec:c0:
0e:f3:da:9b:a3:b7:13:61:3e:d0:a6:0a:ff:a1:9f:
01:d3:fb:ec:29:a2:1f:22:3c:dd:15:96:a9:d8:28:
84:25:1f:a9:29:00:30:a0:27:4b:7c:a3:98:ad:3e:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E4:98:CA:2E:E2:2F:25:CF:29:C1:3C:49:A7:86:BC:52:60:A2:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RuSYyi7iLyXPKcE8SaeGvFJgorg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:41:cb:23:06:c3:0f:fa:95:9e:e6:1d:82:fd:2e:99:c7:3a:
7c:8c:60:db:2d:97:61:b0:20:ec:81:29:e0:db:67:c6:9b:64:
86:17:10:13:45:47:31:9b:8a:be:be:10:ce:fd:39:15:b0:88:
12:0d:76:aa:32:5f:11:f2:ca:c0:94:72:22:a5:d3:1f:5f:09:
9a:b9:30:9e:36:03:c0:55:e0:55:2a:02:a9:07:76:ec:e7:eb:
62:39:2a:fe:33:a0:aa:c3:ad:e6:d8:98:f2:ab:a7:9e:fe:b4:
e6:05:84:cb:d9:2b:73:c7:10:25:8f:50:6a:e1:cf:72:92:9a:
bd:ad:76:31:a5:30:6a:16:96:dc:7f:e2:dc:88:00:aa:24:97:
2f:21:e6:c9:66:a2:2d:97:1c:15:01:26:68:a8:4a:3e:23:23:
a0:9e:bd:fe:fa:85:0a:86:30:53:2e:ce:27:38:1b:68:62:a0:
9f:09:ba:a4:7a:f5:83:45:0c:c6:d0:e5:96:41:ae:3b:dd:e2:
51:bf:56:65:74:5f:7c:f7:a5:30:e2:22:98:96:0d:fa:89:a8:
ef:fa:6d:eb:9e:70:48:e2:30:87:0e:d8:17:95:03:61:e8:37:
e5:f2:9b:09:5d:2e:ec:0a:99:36:00:74:91:24:94:22:65:26:
31:0a:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:43:26 2025 by rpki-client