Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-G-mvxHMBNARGra5UrcHJSA_ic.roa
File: Y-G-mvxHMBNARGra5UrcHJSA_ic.roa (raw, json)
Hash identifier: gMzhGp+GOqIxPEhh0108qQ2PEngug9GRZjOo9JQA6h8=
Subject key identifier: 63:E1:BE:9A:FC:47:30:13:40:44:6A:DA:E5:4A:DC:1C:94:80:FE:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F360390
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-G-mvxHMBNARGra5UrcHJSA_ic.roa
Signing time: Thu 23 Jun 2022 12:21:56 +0000
ROA not before: Thu 23 Jun 2022 12:21:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2402681744 (0x8f360390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 23 12:21:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e1be9afc47301340446adae54adc1c9480fe27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:3d:7d:6e:84:01:00:61:2a:1e:db:44:cc:
59:2e:58:62:5f:a6:d3:d4:75:20:00:63:44:81:32:
4b:24:98:79:1b:f8:4e:b6:05:ac:ea:07:59:e5:d6:
6e:44:d8:ba:1e:db:a6:e3:ae:c2:f8:3f:f7:f2:ff:
02:a4:3c:26:45:a4:0f:17:4a:13:61:a0:fb:3d:db:
b3:54:ac:84:e7:ac:6e:33:da:8c:4e:da:2b:3d:a2:
c5:72:b6:7c:8a:c0:0c:30:20:39:b4:36:42:64:fe:
f3:dc:b9:70:72:52:67:97:97:0c:af:5d:fe:10:1c:
64:88:67:d2:55:c7:c3:bf:79:c7:c2:95:f3:db:90:
d2:b5:48:14:92:63:4e:c7:a1:a9:56:e1:89:e7:3e:
53:f1:ab:d1:e3:2a:dd:96:b5:55:54:0c:06:e7:99:
da:6e:7d:99:32:5d:8a:03:7c:3d:8c:e8:3e:ed:be:
6e:7a:8e:fb:14:3b:a8:06:9b:3b:77:3b:6f:a6:78:
25:ef:d2:63:8d:24:52:1a:c5:11:5d:77:5a:3b:9a:
9e:7e:07:ca:59:eb:33:43:6b:a6:e5:f7:63:a3:db:
dd:c1:32:49:92:bc:44:be:60:80:06:a8:ec:d8:36:
0c:c6:1e:b6:ab:f9:66:a2:a7:a7:b8:31:81:5c:72:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:BE:9A:FC:47:30:13:40:44:6A:DA:E5:4A:DC:1C:94:80:FE:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-G-mvxHMBNARGra5UrcHJSA_ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:98:63:9a:d7:f5:e5:f5:fd:2e:98:62:21:c8:7d:07:4d:c2:
2b:6f:85:02:06:25:87:49:8b:26:39:0b:5b:7c:12:18:0a:8b:
80:81:42:b1:c2:91:ef:dc:56:6e:7b:4f:29:3d:8d:b5:fe:9e:
d9:bf:be:b1:c6:a5:7a:63:ce:fc:96:ed:c3:4c:8c:7c:ea:33:
0a:0b:6e:d0:ed:2b:c3:28:1a:03:24:8f:bc:0e:5b:ea:92:30:
3b:c3:0e:bb:12:46:0a:d9:2b:dd:3d:2e:45:cd:48:ee:e3:03:
d9:3c:e6:5f:67:26:e9:00:7c:3b:e1:97:8d:60:41:2c:b2:1f:
07:a9:e4:88:2b:64:86:45:96:a0:c3:1d:51:b1:a6:a1:56:2c:
39:29:49:71:8a:81:4c:38:0c:60:98:78:11:4b:f6:41:de:e4:
7f:ba:b4:7b:f4:09:1f:9e:1f:43:42:70:61:c4:2d:12:93:22:
a1:7c:c3:34:72:b2:59:87:96:3b:d4:ee:25:3f:48:cf:d9:e9:
a9:30:5b:30:e5:3d:74:48:3c:ff:c6:dc:08:25:a8:19:d9:04:
bb:34:b1:80:f9:79:20:55:c2:e7:4a:86:13:12:b2:40:09:9d:
e9:08:cc:f7:1c:3e:d4:ea:98:bc:20:ce:db:4f:a0:2f:b7:64:
b3:07:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:31 2025 by rpki-client