Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SYyDsKvcsR7qyLpTJJ9HLpj50Gw.roa
File: SYyDsKvcsR7qyLpTJJ9HLpj50Gw.roa (raw, json)
Hash identifier: 5ANaqiyZSgfZFf6JdvbCJzTv1nGxs1woGIfr7rBw90g=
Subject key identifier: 49:8C:83:B0:AB:DC:B1:1E:EA:C8:BA:53:24:9F:47:2E:98:F9:D0:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A7544CB53BC75D029D46720C763A6682
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SYyDsKvcsR7qyLpTJJ9HLpj50Gw.roa
Signing time: Sun 30 Jul 2023 15:04:27 +0000
ROA not before: Sun 30 Jul 2023 15:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a754:20e2/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a7:54:4c:b5:3b:c7:5d:02:9d:46:72:0c:76:3a:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 15:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=498c83b0abdcb11eeac8ba53249f472e98f9d06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:d2:69:f7:2c:0d:0c:f5:2a:43:80:6a:d6:
44:39:8c:ec:2c:55:da:94:ca:24:8e:50:37:13:01:
72:15:57:b5:15:68:c3:19:fb:79:60:e6:c5:96:16:
82:f0:9b:74:f4:43:0b:ad:99:69:55:cb:a5:76:a2:
79:bb:a3:e5:46:f1:e8:f7:b4:71:5f:9c:0a:4b:ae:
09:b1:1f:9d:87:7e:a7:3c:88:c0:79:b2:39:19:a4:
09:d8:02:23:c0:91:67:27:01:59:07:45:76:66:09:
7d:f6:14:04:93:a7:4c:02:b4:2a:45:e1:13:ff:2f:
56:20:a6:90:78:3f:9b:f9:fe:53:3d:5f:e6:02:75:
5e:02:30:7e:cd:b0:da:22:3c:fb:aa:cd:08:59:90:
67:1a:8b:c5:6a:c2:4c:52:58:30:16:6b:65:cc:cd:
5c:51:a0:df:3d:b0:1d:ba:4b:cb:36:e7:61:c3:5a:
f8:76:9e:fb:bb:24:ac:39:c7:98:83:b1:e0:fc:cb:
e7:63:91:9a:a1:82:83:ac:bc:98:88:48:fd:a7:9b:
63:fd:12:b6:72:8b:96:30:ec:db:eb:4d:85:1d:e3:
9e:2a:e4:98:50:11:8c:5f:47:06:b3:a1:b3:c3:0b:
b8:8f:3c:b5:d8:d8:05:a3:8e:ef:a5:18:71:9e:3f:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:83:B0:AB:DC:B1:1E:EA:C8:BA:53:24:9F:47:2E:98:F9:D0:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SYyDsKvcsR7qyLpTJJ9HLpj50Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:e5:9a:81:b0:19:9d:13:05:66:d1:6a:75:41:af:41:41:57:
93:91:a0:81:ef:c3:2f:05:b1:85:e2:b9:ac:5a:ca:81:2e:45:
30:89:41:f7:6d:f8:2f:d3:64:ac:de:bc:58:c3:0b:96:ab:df:
31:3b:d8:0f:02:9a:b4:54:17:b5:65:63:9d:9e:a7:be:2e:1f:
34:c4:54:17:86:0b:1f:59:53:1c:ea:c0:e8:46:6b:f7:97:04:
47:80:9c:99:f0:52:0e:d9:a2:16:72:25:1e:ef:32:14:11:a9:
82:e6:63:f8:e6:fa:ce:ce:dd:5e:ed:6c:07:64:ee:ca:b9:b0:
1a:5b:71:a8:ca:94:00:2b:ed:60:d2:d0:d7:7f:f2:b8:13:66:
84:f4:0d:1b:5c:09:b2:48:48:d8:8d:3f:9b:c5:e0:a5:92:89:
42:b6:ce:6d:65:c7:4f:ae:d9:50:1f:6e:d3:5c:1b:eb:7f:67:
b6:5e:85:b1:af:f9:9a:cd:80:17:17:06:a6:2b:91:3f:48:38:
e4:04:64:27:7c:76:4d:0d:59:0c:93:76:98:30:c6:02:6c:61:
d4:aa:64:88:73:b7:51:1d:98:5a:d7:9f:24:fa:ee:70:3e:b9:
02:db:6f:4e:c6:3c:e6:01:f1:11:8b:8e:e8:72:11:9d:31:14:
c8:73:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:42 2025 by rpki-client