Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y5Ugn4LTww07DF4913IQ7nFjRSM.roa
File: Y5Ugn4LTww07DF4913IQ7nFjRSM.roa (raw, json)
Hash identifier: I7vpy/5JmPYs1+rM4AEW1C26vp9QbUlRyB/ItOXzt6k=
Subject key identifier: 63:95:20:9F:82:D3:C3:0D:3B:0C:5E:3D:D7:72:10:EE:71:63:45:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863D99B464A26E4E55C82EAAA026E14B82
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y5Ugn4LTww07DF4913IQ7nFjRSM.roa
Signing time: Fri 10 Feb 2023 23:12:08 +0000
ROA not before: Fri 10 Feb 2023 23:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3d:99:b4:64:a2:6e:4e:55:c8:2e:aa:a0:26:e1:4b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 23:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6395209f82d3c30d3b0c5e3dd77210ee71634523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:46:89:a7:37:29:fd:20:96:2b:f5:81:39:
10:64:0b:cc:0b:7c:c7:59:c0:dc:29:7b:b6:fb:2b:
a3:d4:58:a1:a6:e2:43:ec:05:24:26:5a:98:3d:56:
fe:52:3c:3a:4c:28:9e:8f:17:1f:46:42:a8:2b:8d:
be:81:8f:63:d2:8b:28:db:a4:95:31:52:be:b4:56:
3c:fa:1d:d1:8a:b7:e6:f8:a4:b9:5e:12:6b:7d:79:
e7:bd:47:89:94:56:49:de:40:cd:2a:7d:b3:c5:b6:
4c:da:28:32:48:40:94:82:12:86:10:c3:ad:7c:ac:
56:4a:7d:39:52:0d:da:3b:03:be:50:2c:83:0d:b3:
9c:a0:4b:95:f3:67:4a:cb:a8:c1:30:d5:20:ca:92:
01:83:01:02:db:87:c0:33:96:e8:03:4f:18:83:50:
9a:30:fd:ef:ba:95:f1:12:f2:f7:77:7d:b0:f4:ad:
1f:12:c3:c7:ec:e3:d4:30:08:76:d5:ac:e5:cc:54:
3f:16:eb:ba:c8:4a:c9:0e:44:ee:9b:41:62:96:9d:
f7:d8:cf:ac:be:3b:47:78:e2:52:09:33:20:46:5f:
a7:24:ba:e5:fa:ca:11:48:81:d4:88:bf:6a:e0:01:
c9:41:6f:40:f9:4e:a6:40:dc:0f:13:86:64:af:4f:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:20:9F:82:D3:C3:0D:3B:0C:5E:3D:D7:72:10:EE:71:63:45:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y5Ugn4LTww07DF4913IQ7nFjRSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:cd:9e:06:7c:05:b1:34:8f:db:e9:e6:45:a7:e4:78:69:be:
5a:7e:cc:99:4a:99:11:3c:75:41:90:0f:74:9d:0d:2e:4e:77:
14:ce:d1:37:d5:c6:b1:8e:0f:6b:3e:e0:a5:b1:0d:5c:3b:1f:
95:21:d3:60:8a:e0:bc:78:7c:70:46:1e:50:40:40:1c:d5:b6:
c9:93:f0:73:f0:7b:93:0e:29:55:6b:38:8a:90:7e:2b:76:02:
d0:11:38:86:f9:f1:23:90:34:ba:57:29:a6:77:f5:dc:c7:5a:
d9:fb:47:ee:31:cd:a9:18:1b:5f:22:d5:a3:f1:fb:e4:c6:b6:
90:9b:48:15:c8:a3:4a:36:4e:9b:e5:f6:10:5b:c1:31:e3:77:
c1:98:85:70:4b:c5:3c:da:6e:c8:14:88:a7:75:46:31:5f:01:
75:65:97:aa:db:d7:72:18:b1:f6:61:99:14:76:18:af:2c:9c:
28:75:7c:81:2d:3b:ad:7d:87:05:64:1b:f3:36:69:9a:cf:7b:
49:17:c9:92:e3:cd:b6:4a:42:21:7d:e1:01:e6:23:5a:6d:82:
5f:a2:62:27:5c:2c:8b:7d:c8:cf:e7:48:99:0c:e4:26:44:d1:
e3:05:e8:36:2b:5c:da:99:b3:6a:e1:de:a4:3e:32:84:ec:76:
15:f8:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:49:58 2025 by rpki-client