Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y11FTUSZUqwuEriHXim8weuqqbM.roa
File: Y11FTUSZUqwuEriHXim8weuqqbM.roa (raw, json)
Hash identifier: 3f++VOTxFujSVsMOZxYWJNj2PFuvUcjLsPCvDT3fxmk=
Subject key identifier: 63:5D:45:4D:44:99:52:AC:2E:12:B8:87:5E:29:BC:C1:EB:AA:A9:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863B001C624A00BAF95ED42AF900D70FB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y11FTUSZUqwuEriHXim8weuqqbM.roa
Signing time: Fri 10 Feb 2023 11:05:08 +0000
ROA not before: Fri 10 Feb 2023 11:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:3aff:a7ad/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:00:1c:62:4a:00:ba:f9:5e:d4:2a:f9:00:d7:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 11:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=635d454d449952ac2e12b8875e29bcc1ebaaa9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:55:03:e7:2e:44:d7:68:85:52:8e:7e:25:
15:b9:b8:4e:bb:36:a6:3c:30:4b:29:f3:26:95:97:
0c:43:84:81:64:ec:29:c3:36:a1:c5:0c:3f:d9:0c:
ee:5f:58:1b:6f:32:4e:52:5f:08:a0:fa:e3:36:f5:
fb:20:a1:c2:41:e9:da:28:25:31:7d:77:b3:37:3f:
38:1e:ca:d0:36:a6:62:e9:1b:93:78:10:62:e5:6b:
b9:68:09:0e:dc:ff:9d:a8:78:35:73:0e:d7:90:72:
4f:e3:59:c9:90:5e:5d:7c:84:86:48:e5:d4:a6:a5:
d1:2d:74:19:9a:f5:08:c2:a2:98:6e:d3:6d:71:7c:
c9:05:33:ce:b7:02:1c:e7:9a:59:1f:6a:6e:73:c8:
2d:9d:b3:b4:00:e6:1f:75:b9:e3:6e:b4:b4:a2:bd:
2f:07:c0:bd:88:aa:86:ac:3d:89:de:b2:48:06:fe:
11:66:bb:3b:c4:d8:7a:77:5b:32:b6:d1:b2:ef:84:
ad:09:d4:09:bd:4f:6e:98:a0:76:33:e2:86:86:02:
fc:19:f2:8d:fa:7a:ed:3b:7f:4d:11:1a:a7:5e:bc:
f6:8e:70:ba:5f:1f:18:1a:49:6f:a4:26:2c:20:51:
3e:17:72:4b:a5:f7:5a:66:f1:2b:bb:96:de:b2:21:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5D:45:4D:44:99:52:AC:2E:12:B8:87:5E:29:BC:C1:EB:AA:A9:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y11FTUSZUqwuEriHXim8weuqqbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:3e:2d:06:da:2d:f4:12:e5:f5:7c:49:41:aa:08:e5:c6:a4:
d2:dc:3a:b0:ad:56:cf:f2:07:5d:ab:6f:5d:ca:10:9f:36:b9:
55:60:41:1b:b4:f8:39:7f:b9:93:2e:8e:f4:1d:e6:25:3a:db:
e5:e3:34:59:cf:ca:62:eb:e9:cd:0f:1f:42:00:16:9b:79:ae:
b5:24:c5:9d:3e:92:7f:a2:13:3e:38:83:c8:25:3c:f6:6f:4c:
c3:7b:9d:44:f8:ab:e3:66:f2:d9:ec:96:67:0d:f0:97:a7:32:
2e:b7:72:9a:d0:de:35:58:0d:55:15:c2:28:c1:75:7d:7b:03:
9c:da:35:ef:4d:7a:9a:16:5a:16:8a:f8:f2:36:79:11:bd:a9:
09:ee:e6:2f:bd:a1:a3:c3:e9:19:2a:20:18:af:45:7d:3c:b8:
4c:30:1b:2f:f5:0e:53:5d:a6:29:dc:b8:f6:b6:90:7c:a4:fb:
60:da:42:88:ba:33:ac:3c:a3:dc:5b:c6:1b:3d:33:d9:18:90:
12:76:ef:2b:22:e4:3b:d2:bd:c6:c6:1e:a5:bb:52:4e:03:2c:
2f:70:62:8d:12:5f:24:dc:fe:c6:74:40:81:e2:1b:8d:4e:c3:
33:20:7b:22:f9:c9:dc:c9:6e:2f:b2:02:5f:a8:cf:e1:89:e7:
f6:ac:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:38:48 2025 by rpki-client