Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y5Hp4dkkVmwj5fEdsL3608rgITk.roa
File: Y5Hp4dkkVmwj5fEdsL3608rgITk.roa (raw, json)
Hash identifier: zOw346WggWQTgKF9msY9kb3bZzp4Nog/liWa0jxT7cg=
Subject key identifier: 63:91:E9:E1:D9:24:56:6C:23:E5:F1:1D:B0:BD:FA:D3:CA:E0:21:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018600A7E32FD125642196E82CD4B02CDF7B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y5Hp4dkkVmwj5fEdsL3608rgITk.roa
Signing time: Mon 30 Jan 2023 03:10:48 +0000
ROA not before: Mon 30 Jan 2023 03:10:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:00:a7:e3:2f:d1:25:64:21:96:e8:2c:d4:b0:2c:df:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 03:10:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6391e9e1d924566c23e5f11db0bdfad3cae02139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:f1:28:2f:75:91:65:5d:d6:66:53:ea:5a:
28:5a:2e:bd:f6:00:13:a3:32:56:7e:26:9e:e1:b3:
51:2f:03:2f:27:50:11:4c:95:ee:77:4e:81:fd:f8:
d6:44:d8:49:54:2b:d5:20:1c:2e:34:eb:9f:25:71:
01:0d:48:4f:4e:94:83:e9:b1:10:f5:94:fb:64:e2:
88:f3:f8:09:13:3b:e2:56:79:cd:8d:b6:c6:fe:4a:
19:6d:f5:1b:79:36:c5:af:24:a1:02:08:2d:84:2f:
f9:77:29:6f:76:4d:cd:e0:9a:f3:cd:87:92:1a:7e:
db:6e:35:c6:2c:ea:e6:ee:74:63:73:fc:86:96:aa:
5c:e1:ea:da:69:7c:f4:c0:7b:b1:27:f1:fc:9e:de:
29:fc:1b:a2:b4:00:15:ff:a7:53:25:5c:1c:0a:f4:
cf:48:49:f6:a6:ea:38:8b:18:d9:09:26:fa:50:7e:
83:2b:10:b1:0f:5f:e1:40:96:e0:e4:7e:b6:07:fb:
9d:87:8a:4b:a4:57:cb:a5:c3:9e:36:36:9b:c3:d4:
9b:74:44:c4:b4:9a:05:0c:a5:00:8f:fb:53:e4:b1:
cb:bb:81:72:cc:11:18:d8:91:b7:c1:ca:eb:95:9c:
a3:19:05:0a:4e:64:20:a6:d4:f1:fd:13:d5:e3:33:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:91:E9:E1:D9:24:56:6C:23:E5:F1:1D:B0:BD:FA:D3:CA:E0:21:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y5Hp4dkkVmwj5fEdsL3608rgITk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:64:9c:2d:35:21:2c:68:00:fd:09:c4:20:85:f8:46:fa:5b:
ec:b8:29:34:68:68:7d:45:57:af:54:e1:ba:30:a3:52:80:b3:
ab:12:28:33:73:20:45:c0:3a:db:e8:fc:25:98:57:8a:f9:87:
5b:ad:12:76:b6:6b:ff:3a:39:30:80:58:da:34:cb:1c:65:c4:
f6:4d:a3:df:ae:f8:06:d2:52:cd:64:09:fd:a8:e8:f2:5c:d0:
30:81:f5:29:90:c7:59:6b:c2:0a:a1:98:47:7a:6f:bb:a9:01:
63:d2:49:58:22:fc:ee:ef:72:54:82:e0:9b:a7:3c:2b:bc:02:
98:3b:be:54:9a:42:4d:be:4b:f6:d4:ca:ff:4e:d7:d6:6c:6c:
16:d3:17:23:fa:9f:c6:08:65:56:5c:1e:e7:63:b3:29:8f:81:
88:8b:94:3a:6b:bf:f2:c1:b5:2f:fc:b5:c2:f6:53:83:95:e8:
42:c8:74:9b:69:2d:0f:12:77:1e:0d:b4:c4:65:97:b7:64:c1:
f8:1a:f7:93:b7:8e:25:32:81:c8:ad:bc:0e:79:ad:27:b9:cf:
29:17:ac:4b:b9:f1:a3:3b:1d:60:20:55:56:38:ba:b2:e1:73:
09:5a:dd:4e:30:df:21:32:0d:2c:9c:30:19:26:b3:d7:1f:8b:
02:81:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:07 2025 by rpki-client