Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y04LjF5PDVEbL3n8ziU5NDpFvSA.roa
File: Y04LjF5PDVEbL3n8ziU5NDpFvSA.roa (raw, json)
Hash identifier: WLLVs2+ltEC79Lwv80vs9vJceWgn0y9uFho+f53zlmo=
Subject key identifier: 63:4E:0B:8C:5E:4F:0D:51:1B:2F:79:FC:CE:25:39:34:3A:45:BD:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185277C49F264EFBF3B68DEACD18069918F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y04LjF5PDVEbL3n8ziU5NDpFvSA.roa
Signing time: Sun 18 Dec 2022 23:05:34 +0000
ROA not before: Sun 18 Dec 2022 23:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:277b:6d7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:27:7c:49:f2:64:ef:bf:3b:68:de:ac:d1:80:69:91:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 23:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=634e0b8c5e4f0d511b2f79fcce2539343a45bd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:ac:8e:f6:68:67:ac:7e:e6:fa:ff:6a:94:
40:26:f2:32:23:6b:a4:c0:ed:87:fd:56:f1:dc:bf:
05:da:28:cb:c3:34:71:1d:4d:23:95:8b:6d:91:1c:
d3:56:75:d9:ed:b2:b9:ab:8b:34:66:3a:6a:3d:2f:
c2:24:74:78:b9:8c:d3:4c:a3:85:df:6c:9a:f8:1d:
e9:38:5f:4d:ae:f2:3b:22:b7:b1:42:02:f6:d8:39:
d9:5b:91:41:2e:8f:b8:45:5d:9f:95:7c:64:12:5f:
86:9b:69:aa:46:c0:66:af:f7:64:3f:b4:5d:1b:b4:
2e:1f:31:d4:9b:bb:7d:e6:97:35:57:96:9c:4f:c3:
93:66:b8:07:95:e7:89:b0:a7:32:2f:94:89:33:13:
7e:15:d8:b8:cd:dd:c2:73:f4:fb:a2:8d:6d:30:d5:
5b:30:53:1c:dc:fd:67:45:5b:0f:e0:80:dc:87:08:
5a:27:b1:53:6f:9e:53:e2:d6:d9:05:c5:8c:9e:df:
4d:55:85:b1:a1:cc:81:3b:84:e7:c2:cc:5a:a9:3a:
08:ab:36:2f:5c:23:de:04:f5:b4:ce:68:70:b3:f4:
37:0d:f1:96:5d:68:fc:19:cd:b2:0d:0b:36:e3:59:
c4:5f:ff:57:60:1f:fc:5a:94:13:c3:7b:6a:92:e5:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:0B:8C:5E:4F:0D:51:1B:2F:79:FC:CE:25:39:34:3A:45:BD:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y04LjF5PDVEbL3n8ziU5NDpFvSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:d6:33:b4:61:78:0e:0d:a7:1a:71:41:49:84:ea:03:58:99:
97:fd:10:ad:6e:a8:e1:8e:b6:31:95:04:c3:56:ac:16:91:d1:
7e:9b:09:5e:bd:92:d3:af:b4:91:1c:03:d6:e1:42:30:d4:64:
ae:e4:90:9e:b9:d7:28:08:48:29:e7:ce:b4:39:c2:2f:1b:23:
8c:2b:c2:74:25:93:40:cf:d0:10:d0:33:ef:6d:94:a5:f2:fe:
00:d3:2d:9b:12:e7:6c:01:53:3f:32:ab:8d:f4:49:f2:6f:b2:
e3:92:3c:74:6d:75:ec:94:06:8a:93:20:21:a1:45:8a:02:7f:
b4:4b:c9:2c:45:34:27:c7:87:bc:60:5f:b9:c4:c2:39:80:a8:
8e:f7:d3:fc:9e:79:1a:e2:a2:5a:c4:b4:b3:ad:22:a6:a3:32:
38:e7:97:6b:a3:aa:0d:94:0d:5d:b9:cd:d6:f3:ef:af:1b:55:
24:61:8d:20:d9:9b:f5:28:05:e7:fc:ed:df:33:a5:bf:bc:20:
88:10:0b:5b:60:dd:c5:a3:f9:fb:6e:c7:47:d4:7f:55:fb:90:
b7:73:2a:36:13:16:c8:ce:a6:43:99:30:0d:40:df:31:81:60:
3c:cb:a2:f1:5b:36:09:32:bc:23:d0:8a:07:5e:7e:72:21:94:
2b:3e:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:06 2025 by rpki-client