Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y1XXWFq1PfsXi-rdKIRC04lqBdA.roa
File: Y1XXWFq1PfsXi-rdKIRC04lqBdA.roa (raw, json)
Hash identifier: RADgWOrLT4t9R0bMsw8jUIf49NCzC4NMEO3AO2f8gpU=
Subject key identifier: 63:55:D7:58:5A:B5:3D:FB:17:8B:EA:DD:28:84:42:D3:89:6A:05:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B93132688B4A178737269A4A3C9986D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y1XXWFq1PfsXi-rdKIRC04lqBdA.roa
Signing time: Tue 25 Apr 2023 16:13:41 +0000
ROA not before: Tue 25 Apr 2023 16:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:31:32:68:8b:4a:17:87:37:26:9a:4a:3c:99:86:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 16:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6355d7585ab53dfb178beadd288442d3896a05d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:6b:32:9b:13:04:c3:80:97:c5:a6:f9:91:
b3:99:93:5d:3f:4a:d7:c8:15:e6:a1:c8:b1:06:17:
3a:e4:dc:70:6d:e5:4d:ce:ee:13:37:1d:37:33:17:
30:58:29:fa:66:53:9a:18:18:15:fb:df:39:ed:47:
ea:ce:0d:83:2a:9a:9c:af:17:3c:d7:e2:85:6e:52:
c2:ca:43:53:7d:43:ae:51:54:f3:3f:dd:71:da:70:
13:c9:55:e7:dd:30:f4:2c:fb:4d:82:46:c5:2c:ef:
1e:a6:92:83:d2:fd:8d:75:de:c7:6a:fa:95:a6:8b:
57:0d:db:b8:8e:99:f0:e6:30:79:35:ff:5e:60:67:
b6:1c:e5:6c:53:96:e3:8b:76:6c:a3:98:05:8d:af:
3d:88:a8:53:85:50:8c:0f:49:17:4e:00:58:d6:8e:
ae:bd:77:fd:af:c2:c2:d9:cc:23:ab:2b:dd:57:f8:
8c:25:67:ce:40:a4:4d:80:73:d3:06:c3:21:2f:ba:
c0:bd:e0:48:37:6c:39:44:4b:eb:42:86:2f:5c:76:
04:cb:a4:54:26:2f:c4:35:2e:52:02:8b:31:36:08:
9d:ea:21:73:10:aa:bb:ec:ad:84:40:9e:2d:bd:3a:
99:74:81:04:fe:5e:7a:00:58:d9:bb:94:7c:4a:5a:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:55:D7:58:5A:B5:3D:FB:17:8B:EA:DD:28:84:42:D3:89:6A:05:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y1XXWFq1PfsXi-rdKIRC04lqBdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:91:11:75:27:c4:34:9e:ea:c4:da:2f:3f:f0:b3:cc:58:0c:
07:e6:40:cf:6b:27:7d:2d:70:b9:29:6c:b2:b7:55:d3:7e:4f:
00:74:4f:d1:a5:d9:4d:4c:b3:05:c6:9f:f7:dc:24:58:cc:51:
d4:1f:ef:bc:38:09:e8:9c:ad:d5:4f:b4:25:4d:b6:de:76:8f:
de:aa:7a:7e:b1:82:b7:d7:47:ee:b6:e7:56:c9:19:32:11:79:
82:78:a3:4f:16:32:84:2b:4b:37:34:9c:1e:a0:86:bb:d0:aa:
35:98:6b:ff:d6:59:b6:b9:a6:5f:8e:c1:3e:9b:2c:69:46:11:
c8:55:c8:4c:4e:8d:33:6e:88:11:5e:32:f5:47:9a:fa:04:78:
d7:3f:db:51:28:d3:a8:54:30:5a:9a:9f:8f:4e:a1:a3:4b:9d:
f1:45:89:12:8f:85:08:60:88:59:c4:bf:64:0a:c3:ed:b2:05:
9a:39:e9:00:a5:13:19:02:05:67:31:ca:3c:19:23:b6:df:6a:
37:3f:d5:88:ee:66:c4:0a:c9:1c:d9:fc:73:a5:b3:7e:f3:13:
f4:37:35:5c:4d:39:7d:7b:ee:13:21:b7:95:6c:13:f7:a2:06:
ae:18:11:ac:3b:0b:1b:19:e8:a8:e5:ce:5a:3d:1e:a3:9d:cf:
72:e6:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:12:18 2025 by rpki-client