Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SyOhekfMPvUg1Ylyx-H5-iNf8V8.roa
File: SyOhekfMPvUg1Ylyx-H5-iNf8V8.roa (raw, json)
Hash identifier: GTHdodLsukSoZ6WuFTwhBOIkPc/eCAow8qy+W3hIEVc=
Subject key identifier: 4B:23:A1:7A:47:CC:3E:F5:20:D5:89:72:C7:E1:F9:FA:23:5F:F1:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A4397023B519A0B3833343E3B4E5318C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SyOhekfMPvUg1Ylyx-H5-iNf8V8.roa
Signing time: Tue 29 Aug 2023 23:18:04 +0000
ROA not before: Tue 29 Aug 2023 23:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:97:02:3b:51:9a:0b:38:33:34:3e:3b:4e:53:18:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 23:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b23a17a47cc3ef520d58972c7e1f9fa235ff15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:c5:c2:8c:5a:c7:8c:aa:3f:dd:28:90:0b:
3e:1e:ba:bf:7f:f1:37:ae:4a:a7:4d:de:ca:4a:df:
d9:b0:a6:11:c9:98:2c:c1:7d:22:f6:e9:cd:35:7d:
68:6e:15:a3:aa:c0:6f:00:ff:02:c5:18:70:5d:49:
ad:ae:2d:4d:59:18:21:79:97:88:45:e3:89:cb:74:
d7:8a:51:22:ad:74:ee:7b:a1:ed:ef:4f:5e:6e:9f:
7b:b0:e9:82:64:4f:67:27:07:04:25:04:e0:f5:ed:
7d:c8:a3:fb:02:61:32:1a:7a:1f:6b:6b:6b:aa:22:
84:06:61:0f:d6:99:61:94:6d:5c:16:6d:98:73:f3:
2f:63:85:3a:7f:7c:ac:09:cb:22:aa:a7:cd:58:17:
fb:e5:7e:2d:6f:80:50:4a:8e:eb:60:37:84:3a:44:
cd:34:4b:f2:a0:ef:67:d2:77:44:e8:b3:d5:6b:ce:
4e:c7:88:25:ec:2c:f1:63:36:d0:5b:43:fc:18:7a:
3e:d8:8c:95:b2:72:f3:2c:58:ec:b2:bf:c0:99:62:
9b:42:29:e2:82:c7:30:ad:cb:b3:e6:96:23:c7:46:
d7:bf:88:09:9c:24:ac:f6:f3:a8:32:d5:b6:0c:2b:
fe:06:28:0b:9e:b4:3d:22:79:94:5b:4b:55:d7:72:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:23:A1:7A:47:CC:3E:F5:20:D5:89:72:C7:E1:F9:FA:23:5F:F1:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SyOhekfMPvUg1Ylyx-H5-iNf8V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:d1:fd:41:91:35:4b:55:5f:b1:03:18:f5:e3:d7:43:4d:f6:
36:93:fb:26:84:de:9a:14:80:98:33:ac:ae:b0:5a:58:54:30:
6c:a1:ed:3b:59:4b:36:ce:e8:30:75:83:da:32:34:80:87:bb:
de:d6:f6:47:77:81:ee:92:fe:4a:2b:c9:9e:d9:7b:d5:b8:91:
78:e2:f8:2d:0e:51:cc:60:ba:78:e7:72:40:46:14:52:14:b7:
6a:2f:4e:39:21:11:be:32:c2:9c:49:8a:d6:07:d0:ac:d0:7e:
1b:ae:e2:5a:1c:ee:2c:b9:37:78:1b:65:b7:28:25:8b:cd:43:
00:8c:ca:b6:ca:dd:18:39:d5:9c:8f:7b:7a:45:cf:85:83:f3:
27:65:2c:58:47:58:0b:89:1a:c9:14:cc:08:02:d2:6d:b5:c2:
2d:67:2d:1a:4e:ee:c2:3d:17:81:14:c9:dc:78:33:7e:7e:65:
52:03:4b:16:51:0b:b0:be:09:2f:71:fd:c2:72:43:2c:41:f1:
53:10:aa:8d:52:73:7b:ed:a9:a5:94:29:f4:05:d6:d9:fb:d8:
e4:44:82:73:23:f6:1d:55:68:11:aa:6d:bd:87:74:a0:5e:59:
88:71:c2:15:d2:ba:49:f2:13:b5:39:76:81:2e:82:29:c9:6f:
dd:cb:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:47 2025 by rpki-client