Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-rsg9bJp6cAvSMyZHUIBHvsJIY.roa
File: Y-rsg9bJp6cAvSMyZHUIBHvsJIY.roa (raw, json)
Hash identifier: GcPxT/sknM9Ma55EJ/lEAogBh0ucHHu+Q/9kXh5eKEE=
Subject key identifier: 63:EA:EC:83:D6:C9:A7:A7:00:BD:23:32:64:75:08:04:7B:EC:24:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B14CF1E5028664C9CE3F0E8D3D823544
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-rsg9bJp6cAvSMyZHUIBHvsJIY.roa
Signing time: Fri 07 Oct 2022 07:15:53 +0000
ROA not before: Fri 07 Oct 2022 07:15:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:4c:f1:e5:02:86:64:c9:ce:3f:0e:8d:3d:82:35:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 7 07:15:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63eaec83d6c9a7a700bd2332647508047bec2486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:07:e2:b3:f3:74:00:6b:22:45:c7:f2:7d:
4f:c9:45:e2:21:88:be:c4:a0:22:3b:bd:09:4a:ca:
a8:f7:1c:a7:b1:7a:57:89:a9:ff:da:39:05:84:ac:
7d:e8:e7:f5:dc:be:68:c4:23:41:26:80:87:c3:c2:
a4:ed:bb:e3:80:ef:2f:b9:0f:8b:27:db:9c:24:7a:
54:6c:3d:7a:4a:a9:8d:51:f1:1a:51:0a:21:81:76:
a9:90:cf:50:73:89:80:be:de:c3:9c:67:a6:5f:d6:
26:a4:18:db:5d:6f:7d:c0:23:84:8d:ab:5b:f9:7e:
ad:43:de:38:8a:c5:85:a2:b6:cb:37:6d:1d:4c:1b:
13:84:34:f8:0f:26:53:76:c8:ee:83:31:69:0e:8a:
f0:49:f3:aa:92:1e:df:24:19:e0:9a:dc:7a:02:03:
97:5a:df:ab:86:4f:09:5f:05:f9:22:ca:09:01:69:
37:c7:12:9a:c2:84:be:c7:62:00:09:4e:dc:cb:57:
bc:cf:0e:f2:d6:74:7d:d8:4f:c0:e4:41:0c:d1:33:
4c:ff:74:e8:50:fe:3f:78:6e:da:e1:11:d3:ae:d2:
29:63:ab:ce:4d:63:08:a0:e4:f4:f6:c0:97:4a:ec:
32:dd:de:09:a4:4d:3f:ba:4c:20:04:41:75:46:c2:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EA:EC:83:D6:C9:A7:A7:00:BD:23:32:64:75:08:04:7B:EC:24:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y-rsg9bJp6cAvSMyZHUIBHvsJIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:d8:18:14:14:85:7d:a4:f1:e1:d3:90:17:8a:ff:d4:9f:4a:
0a:1d:ae:4c:53:4f:51:ad:bb:84:be:d6:0a:6f:4e:fb:7f:8c:
0c:3f:e5:12:c1:48:f9:4c:90:bc:6a:ff:9b:a9:5a:f1:c8:99:
14:11:20:07:c0:00:a7:5b:bd:8f:70:11:97:1a:c9:3f:5b:02:
02:cf:90:2e:07:52:4b:db:75:0a:1f:69:fa:5d:2b:9f:d3:f3:
12:15:40:21:ad:be:51:3b:aa:13:fe:40:3e:6f:9a:8f:0d:e8:
15:b1:5d:18:fd:d7:d2:43:26:f2:ab:77:bc:16:72:d6:1e:81:
76:45:df:1a:5f:72:d6:52:ee:99:f9:c3:3a:58:16:31:ed:47:
5f:37:06:36:ea:eb:9e:9f:32:43:50:62:14:0d:38:97:4e:eb:
9c:67:e0:80:b0:0f:91:90:e6:c3:4c:1c:82:d6:07:a8:42:78:
d4:b8:3c:2c:16:2e:7b:8c:9f:58:56:9d:09:5b:65:0f:49:34:
47:3c:a6:8b:6b:d1:a5:bc:ec:67:5e:52:59:c1:b3:7e:5f:b6:
de:ff:53:d9:55:c8:64:58:ac:1b:60:13:a6:a2:2b:98:98:59:
2d:78:df:82:fa:c3:95:7f:11:86:78:66:38:c7:ba:e8:ca:e4:
8c:ed:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:12:39 2025 by rpki-client