Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4RSv-CKxgrtZxztYW7xx7MVOjU.roa
File: Y4RSv-CKxgrtZxztYW7xx7MVOjU.roa (raw, json)
Hash identifier: k6R9Tv+i+ZSKEnX+EdKFlxYyaVTApjE3s2KmFMpPdL4=
Subject key identifier: 63:84:52:BF:E0:8A:C6:0A:ED:67:1C:ED:61:6E:F1:C7:B3:15:3A:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D75F88F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4RSv-CKxgrtZxztYW7xx7MVOjU.roa
Signing time: Fri 25 Feb 2022 01:12:24 +0000
ROA not before: Fri 25 Feb 2022 01:12:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836447887 (0x6d75f88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 01:12:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=638452bfe08ac60aed671ced616ef1c7b3153a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:ad:c1:a1:58:34:5c:63:a7:38:7c:bb:e4:
5c:ab:b0:e5:c5:dd:7b:b1:b6:66:71:de:ad:7a:97:
a3:4c:97:c2:d7:ea:01:e0:e6:5f:e0:ac:d0:64:29:
61:83:1f:85:7b:cb:62:56:36:ea:8b:3d:4d:88:c5:
06:6e:2c:9b:4a:cf:36:f9:d3:64:6e:f7:20:c1:1f:
8c:31:e7:e7:9a:61:91:0c:54:27:76:14:b9:13:4e:
e1:7d:32:b5:d0:7c:15:ea:ba:7e:f7:2a:bc:74:a0:
07:bd:2b:9f:da:c7:f3:1c:d1:db:6a:d4:53:b1:a5:
c4:f6:e0:57:3a:da:8e:10:4c:42:1a:59:ac:37:9b:
a7:0e:e0:28:c2:73:9d:0a:1a:d7:2a:8c:10:f8:5c:
04:11:e6:21:9b:33:ba:b3:a2:7c:1b:ab:06:fe:1f:
20:c2:01:c8:af:89:b6:49:41:e4:19:25:94:8c:df:
b4:0e:73:93:11:68:76:ee:bd:89:90:78:81:57:7b:
6e:15:6b:5a:ca:9c:4d:4b:82:5f:36:68:51:8d:d8:
5f:14:a9:3d:07:ea:ad:6d:4e:3a:33:d8:6d:96:74:
a8:d3:47:8c:89:b5:24:cb:c9:ba:d9:82:8a:04:8d:
58:ed:af:66:7c:a9:60:b9:5e:85:55:8f:9d:f6:b8:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:52:BF:E0:8A:C6:0A:ED:67:1C:ED:61:6E:F1:C7:B3:15:3A:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4RSv-CKxgrtZxztYW7xx7MVOjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:84:f3:72:e3:e5:24:c3:b1:87:c2:32:5a:b5:e0:c4:71:99:
ba:5c:86:70:45:76:b7:12:bd:08:46:3a:1a:88:61:4c:97:15:
eb:37:05:03:07:1c:f7:6d:84:6a:97:76:6b:2e:4d:d7:c2:cd:
06:09:62:d5:10:23:08:c3:4f:6c:2c:0e:9c:9b:73:a9:05:0c:
e2:e7:2c:b4:1a:80:bd:51:d0:b9:01:46:f0:b3:5a:ee:db:4c:
58:e9:a2:f8:2c:14:3e:b4:ef:8e:ed:4e:ca:c8:40:69:3a:0c:
69:ba:cd:36:9d:23:9b:dc:c6:cb:5b:f2:89:91:6f:e3:1b:2c:
7b:1a:c9:21:73:0a:4e:f7:1b:d5:b6:f3:9b:ba:f3:43:76:e0:
d0:4e:d7:16:56:8b:0a:25:b9:8a:67:0d:07:55:90:54:f5:d3:
6b:d6:fa:c3:2f:9d:a7:bc:ea:37:8d:fa:54:0f:bf:62:b8:a9:
0f:8b:60:86:5b:09:22:c9:03:6a:8a:f9:d6:f7:fe:6e:30:e2:
30:72:4f:a8:b0:52:44:b7:81:b3:c7:c8:cc:a9:28:65:a9:c9:
f7:50:50:46:99:04:5a:43:7d:7e:45:4b:1a:37:7b:08:dd:2a:
92:4a:00:53:2e:c7:d9:5f:b7:fd:6b:32:66:6a:8b:26:1b:fe:
07:32:07:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:42:46 2025 by rpki-client