Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2A9RTj3L8GW72jP5Joas-bWsIM.roa
File: Y2A9RTj3L8GW72jP5Joas-bWsIM.roa (raw, json)
Hash identifier: fg/PHJnEiD1uaeQEGKKVUslJboiDQ/SZyLLRcNGePPQ=
Subject key identifier: 63:60:3D:45:38:F7:2F:C1:96:EF:68:CF:E4:9A:1A:B3:E6:D6:B0:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883EDBAFA7130D5B79E50592772EB84CD2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2A9RTj3L8GW72jP5Joas-bWsIM.roa
Signing time: Sun 21 May 2023 15:09:24 +0000
ROA not before: Sun 21 May 2023 15:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3e:db:af:a7:13:0d:5b:79:e5:05:92:77:2e:b8:4c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 15:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63603d4538f72fc196ef68cfe49a1ab3e6d6b083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:45:ef:d7:f9:08:65:e6:b0:cf:a8:15:bd:
c7:69:21:1b:6a:8c:3b:44:19:e8:65:27:18:04:eb:
dc:8c:72:c5:8b:7e:dc:dc:b3:e0:d2:4a:4c:f0:6d:
c5:6d:47:1e:62:2c:5f:57:fc:f9:18:e4:d3:ea:86:
7d:ee:da:15:1c:b7:2c:fe:dc:58:a7:db:ac:58:9e:
f6:cb:c7:02:b7:19:86:76:d1:6d:98:2c:03:a3:af:
30:4d:3e:90:1d:df:eb:82:87:5a:58:4a:d0:fa:76:
b1:ab:f0:85:04:6c:89:07:c3:1f:c5:22:ae:91:dd:
f7:8f:ea:ea:de:45:0a:57:ab:33:1f:c2:9c:ad:1d:
b3:63:88:54:ee:ad:5c:27:26:cc:85:0f:6d:3a:81:
ff:51:f7:c9:b3:f7:c0:77:ba:b5:64:56:df:e8:9c:
1f:fb:c9:7a:ac:ce:69:50:dc:ca:82:97:28:90:4e:
2c:87:d4:8e:23:5f:f3:69:3c:dd:82:1b:7d:4c:9a:
44:8e:4b:bb:6f:35:f5:a5:73:74:dd:c1:59:9a:2c:
f4:7f:15:c3:fd:35:62:a2:52:19:99:fb:da:fd:15:
9c:87:a2:09:c5:df:c8:ef:f7:f9:db:c4:87:2f:ea:
b8:97:64:42:65:17:ac:5c:f6:77:2a:83:ae:ef:ae:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:3D:45:38:F7:2F:C1:96:EF:68:CF:E4:9A:1A:B3:E6:D6:B0:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2A9RTj3L8GW72jP5Joas-bWsIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:49:c8:f3:d3:ca:15:98:08:bf:fe:25:8e:07:d8:fe:24:15:
22:fb:a4:18:2a:70:e5:aa:d8:53:86:f6:a7:49:fa:56:3c:89:
92:cf:c2:d0:3d:72:45:d3:45:3c:fe:98:4f:bc:a9:81:cf:50:
1a:1f:e3:f6:24:ac:6d:c3:f4:82:0c:db:38:22:03:cd:d6:3c:
29:26:7c:07:69:f4:41:4c:e8:a1:71:d3:7f:52:30:07:ce:aa:
7f:e5:7b:7e:b5:6b:9a:2c:3a:ac:cc:bb:38:f4:ca:a8:27:8b:
fa:c2:b8:4c:f9:18:55:e3:b6:2a:a7:31:41:bc:c4:28:5a:aa:
e8:d1:39:cc:95:c4:6c:8d:a6:b6:eb:57:d2:7e:5e:87:40:dd:
3c:55:9b:21:fd:4e:1e:47:5e:0d:2e:31:76:37:07:18:be:49:
13:80:01:04:44:f2:0b:bf:dd:37:22:11:e9:0f:f0:35:43:be:
0e:74:e2:93:4e:c3:e2:24:9d:86:fc:b2:5a:31:0b:20:d2:d7:
52:f5:ef:ef:9a:6b:c0:5c:6a:f7:bf:32:a8:85:e1:d8:f1:31:
34:22:2f:a9:74:b6:12:2a:78:0b:01:75:91:16:5a:0c:2e:9d:
5b:df:2c:2a:be:9f:3b:8c:58:fb:ee:ff:4b:45:05:6f:24:e4:
d9:b9:24:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:38 2025 by rpki-client