Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-Y2O4k24URTYlg32eEVpvFiulk.roa
File: Y-Y2O4k24URTYlg32eEVpvFiulk.roa (raw, json)
Hash identifier: MRtmskwDuYmS1IVYwQ+jBE68kGYYg6nl5PtkrFWwAwI=
Subject key identifier: 63:E6:36:3B:89:36:E1:44:53:62:58:37:D9:E1:15:A6:F1:62:BA:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FBE5CABC0D9EBBD83776AD2219F6A16A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-Y2O4k24URTYlg32eEVpvFiulk.roa
Signing time: Wed 16 Aug 2023 01:11:28 +0000
ROA not before: Wed 16 Aug 2023 01:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:e5:ca:bc:0d:9e:bb:d8:37:76:ad:22:19:f6:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 01:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63e6363b8936e14453625837d9e115a6f162ba59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:2e:32:41:ef:18:74:b9:3f:e1:b2:b2:6e:
55:d7:4b:15:4a:c1:98:6e:d3:23:47:6d:6e:a3:5b:
69:5f:99:4e:6f:3b:7f:91:ef:17:a8:9d:bb:97:97:
4d:78:23:c6:f5:eb:71:79:4b:df:62:73:1e:79:a9:
a4:11:43:4f:20:79:b1:17:6a:15:4e:4d:ae:80:41:
02:8b:10:23:23:a1:3c:77:e6:b0:1e:25:e2:26:df:
e1:92:5a:f2:30:79:f5:38:05:8b:e3:80:cc:ae:4f:
2f:ce:29:e1:23:82:1d:3a:1d:30:5d:5d:54:f9:d1:
24:93:37:b7:6d:cd:1e:04:eb:70:9b:63:a9:df:53:
0f:da:e7:dc:fc:3c:3a:94:9b:1c:21:e8:d6:96:4d:
87:ba:a3:d0:ec:e3:80:3d:33:ef:6c:cf:2c:bb:35:
cf:d1:a8:1c:d7:cf:dc:bb:f8:e4:64:f7:61:c5:8e:
d5:06:a9:4a:39:e2:30:cb:ec:8c:24:d8:48:48:8a:
1e:66:8f:14:6c:5c:d7:a7:5f:26:d2:1f:31:c8:27:
ce:be:6d:89:9b:02:9c:8a:09:8c:c2:65:c7:21:fd:
60:c7:fc:e4:97:c4:11:bc:b4:7c:9d:36:b3:59:4b:
57:b6:fe:e9:d1:5f:01:86:aa:a9:54:02:fd:80:c5:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E6:36:3B:89:36:E1:44:53:62:58:37:D9:E1:15:A6:F1:62:BA:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-Y2O4k24URTYlg32eEVpvFiulk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:5e:d1:8b:0f:a9:b2:33:a6:7e:0c:23:7f:4b:65:ea:99:ba:
8b:88:2f:80:c0:a4:ac:38:a8:88:78:d9:28:28:5b:30:8e:80:
4f:2a:11:4b:8d:b7:2b:ff:be:b9:52:ba:d4:21:28:33:34:e9:
31:d3:43:e1:46:4c:3c:9d:92:16:1d:da:e4:2b:53:72:94:6b:
78:db:52:b1:c4:2c:66:3c:92:33:8c:e3:2e:1d:9e:44:7b:a6:
06:03:7f:63:d2:c8:a4:87:c3:0b:2e:dc:64:d0:86:85:a9:55:
9a:51:14:a3:ec:a5:12:e1:b1:44:65:11:98:77:9c:32:12:dd:
19:7c:7c:fc:56:1a:c3:5e:9c:2b:86:0c:2c:07:b5:94:3c:ea:
6d:b0:12:0c:ed:ec:af:b6:3b:88:a2:c2:11:0f:40:41:0f:67:
c5:18:a7:84:3a:a2:5b:60:57:77:77:36:f7:2a:54:31:c4:2f:
94:17:55:7d:a8:5d:9f:4c:ee:8d:45:df:6c:89:27:ea:a3:35:
ac:cb:26:36:07:55:e6:a0:aa:b5:6b:ee:67:ea:6c:5f:e6:24:
16:c6:ad:ed:a6:7c:cb:ce:70:9f:5c:6e:90:7b:c4:8a:93:ec:
40:c2:ee:24:e4:74:51:42:4b:8f:b5:6b:94:2e:27:20:b4:d9:
eb:52:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:33:23 2025 by rpki-client