Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-8hyXjspA1HgCKCenQuDkRlfKQ.roa
File: Y-8hyXjspA1HgCKCenQuDkRlfKQ.roa (raw, json)
Hash identifier: 6bHlUpKKHxfG4YQHZ/miIx3PF8XcGUCkstTIsLqwPyA=
Subject key identifier: 63:EF:21:C9:78:EC:A4:0D:47:80:22:82:7A:74:2E:0E:44:65:7C:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1C1BE6451C003B1933EAFACEC932952C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-8hyXjspA1HgCKCenQuDkRlfKQ.roa
Signing time: Tue 22 Aug 2023 07:18:24 +0000
ROA not before: Tue 22 Aug 2023 07:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:1b:e6:45:1c:00:3b:19:33:ea:fa:ce:c9:32:95:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 07:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63ef21c978eca40d478022827a742e0e44657ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:4c:a5:79:a9:e7:a2:08:89:e7:31:3e:64:
23:72:41:64:af:a1:b2:46:bc:4c:fe:94:30:cd:11:
f6:b6:9d:8e:2f:3a:d4:8a:1f:c8:85:fd:28:65:e6:
86:e7:13:4b:42:81:8a:6d:5c:8e:18:73:8c:2b:ff:
6c:f4:bb:6b:7a:8b:e0:f6:e3:67:72:52:c6:f4:e3:
df:cb:e6:56:7e:b4:8b:6b:94:7e:12:aa:24:cd:54:
e0:2e:ea:38:a6:72:b3:5d:06:19:68:ad:48:c4:a4:
d4:a6:fa:dc:cc:b8:35:8d:83:c2:de:7c:53:a5:bd:
57:87:ec:8c:38:24:c0:24:9d:88:a4:ce:63:d9:97:
34:bf:51:09:5c:a4:13:4b:c1:17:35:68:af:bf:ee:
ab:da:82:f6:71:97:a1:bd:79:32:92:e5:8c:bb:3a:
cc:85:0e:e3:47:42:2c:da:08:08:9f:4e:f9:47:d1:
79:82:41:3c:7b:83:56:6f:46:40:ee:9f:68:be:33:
12:4d:78:ab:ba:8c:d5:02:bf:df:a5:4a:80:11:2d:
87:da:43:ee:11:8c:85:c4:66:01:56:dc:a0:b6:ed:
c7:b3:16:c2:78:e1:cd:77:24:10:bc:86:3e:85:ca:
04:2a:1e:e6:39:5a:1b:8b:79:fe:d9:76:e8:2a:d7:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:21:C9:78:EC:A4:0D:47:80:22:82:7A:74:2E:0E:44:65:7C:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-8hyXjspA1HgCKCenQuDkRlfKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:73:c9:7e:25:76:c3:ab:a6:a6:1d:6b:1d:ac:16:a2:8b:03:
bd:79:55:53:21:cc:41:21:6f:10:31:13:86:38:95:95:88:53:
e9:6a:e2:91:e3:2b:a2:32:65:1a:80:c8:b4:08:72:25:37:31:
c7:0e:d8:7f:0d:dc:6b:60:7f:9f:dd:60:bb:94:ec:b2:ad:e4:
d1:d4:5d:82:c3:dd:44:04:7d:a9:cd:42:c6:14:cd:74:1f:6b:
b4:a7:de:84:6d:29:b0:ac:65:ab:97:42:a0:12:18:d3:14:b8:
41:d5:e7:52:e6:8f:09:f4:a3:14:66:bf:e2:34:f5:28:e8:d5:
c8:71:05:6d:84:1f:04:63:36:5e:ef:ad:9d:fc:13:fa:4e:4f:
d7:32:0c:f8:6e:52:2f:72:05:5c:ec:be:5f:44:ad:1c:c1:0b:
e1:13:7d:31:1d:8a:20:25:42:c0:c8:8e:df:89:09:f5:1e:e2:
52:6d:bc:b9:a6:5e:f4:d5:44:ab:91:d9:48:6e:f3:e2:21:c0:
c9:7c:e8:84:f2:39:41:10:36:ef:0a:57:b7:f4:0f:a8:a9:8b:
ee:0b:88:5f:03:cb:79:0d:a3:45:6f:72:47:06:53:c0:b3:71:
13:9e:05:76:e7:fe:79:e2:e8:6c:cb:5e:2f:f3:c6:4b:ae:fe:
97:6f:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:58:11 2025 by rpki-client