Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y6V1ypubNQ69a3NgcEZgtK0phKY.roa
File: Y6V1ypubNQ69a3NgcEZgtK0phKY.roa (raw, json)
Hash identifier: KT/MRQx3wwZCYEtpqgzpUrkDorjttDgBqeMNRdAl80U=
Subject key identifier: 63:A5:75:CA:9B:9B:35:0E:BD:6B:73:60:70:46:60:B4:AD:29:84:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894CCFC3D8025731643873641233BC3ACD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y6V1ypubNQ69a3NgcEZgtK0phKY.roa
Signing time: Thu 13 Jul 2023 01:13:51 +0000
ROA not before: Thu 13 Jul 2023 01:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4c:cf:c3:d8:02:57:31:64:38:73:64:12:33:bc:3a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 01:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63a575ca9b9b350ebd6b7360704660b4ad2984a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:79:39:0d:8f:8b:9c:8f:3a:1a:a3:d8:44:
c1:d4:05:e1:90:11:fb:fc:fb:3e:e8:75:65:7d:07:
7d:c7:a6:ff:10:0e:b2:60:be:1b:bc:95:cc:6d:16:
84:f8:9d:55:a0:3e:27:a4:75:7c:e3:4c:6c:5f:8f:
ec:81:15:fd:a1:2f:7d:99:de:98:03:90:99:d2:f5:
f7:14:81:ae:57:bb:00:71:23:51:a6:c9:f6:af:4e:
3c:45:68:34:99:e7:ec:d0:61:10:3e:41:e1:f8:d5:
80:c5:1e:fc:5b:a2:dc:14:b6:9e:a0:22:c5:4a:c0:
a1:6d:93:19:25:68:ce:d7:df:46:28:a6:b2:e8:3d:
e2:38:87:ed:3d:8d:75:ff:06:63:bf:af:88:7b:dd:
78:2b:f5:aa:26:6e:cc:27:94:3a:3b:7c:6c:2b:de:
82:df:1e:81:74:59:34:05:4c:02:36:c9:82:a4:36:
04:db:d8:42:37:48:0b:0a:bf:ad:aa:65:a6:e9:dd:
7f:23:de:f3:f6:dc:2f:01:99:12:c5:63:fc:0b:2b:
ae:60:7c:3a:b8:62:2b:97:34:54:42:7c:af:4f:0e:
e1:89:b5:7f:26:53:c3:d8:15:a1:cb:77:8b:88:e8:
fc:a4:b3:9b:bb:36:e9:9d:d5:e6:87:98:66:ac:03:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:75:CA:9B:9B:35:0E:BD:6B:73:60:70:46:60:B4:AD:29:84:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y6V1ypubNQ69a3NgcEZgtK0phKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:f6:a7:61:a1:1a:cb:1e:56:f5:a7:e7:c0:67:b4:c0:76:6f:
9b:1e:43:1f:da:c1:c5:31:77:6a:3f:c9:cb:24:ac:22:5e:3e:
32:69:ca:c2:00:13:79:11:c7:77:95:80:b6:48:da:b9:c6:fd:
73:59:b3:e3:36:4c:82:e4:4a:e9:fa:f7:d4:cb:bb:f7:2b:97:
e9:e6:4e:86:73:f3:9d:37:11:34:06:6f:2e:da:90:b9:07:d3:
a2:ec:8c:db:02:30:39:35:14:fe:dd:53:fb:a7:f7:ed:1a:55:
04:f2:65:20:91:ad:da:f3:bc:3a:be:83:80:10:e4:2f:77:6b:
9b:24:25:17:cb:56:5c:2c:99:50:35:eb:2d:b1:e7:05:4a:c8:
b4:ea:18:12:0a:6f:d1:0a:b0:c9:5e:fb:df:59:e7:2a:8a:c5:
38:59:b4:45:81:ec:7e:d4:40:df:e2:d0:34:42:6e:db:5c:34:
81:df:f3:ea:72:86:30:8b:97:27:8e:b6:27:bc:f0:a3:e8:92:
55:9e:fc:59:7b:15:43:99:6d:08:0e:34:dd:3a:eb:31:f6:9d:
2d:38:29:d8:02:af:e3:7b:74:24:79:49:8e:1c:c7:b9:23:ef:
a3:7d:ed:e6:33:72:75:25:71:5c:c6:dc:b8:d4:d8:43:bc:06:
29:a2:35:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlMz8PYAlcxZDhzZBIzvDrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzEzMDExMzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2E1NzVjYTliOWIzNTBlYmQ2YjczNjA3MDQ2NjBiNGFkMjk4NGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2R5OQ2Pi5yPOhqj2ETB1AXhkBH7
/Ps+6HVlfQd9x6b/EA6yYL4bvJXMbRaE+J1VoD4npHV840xsX4/sgRX9oS99md6Y
A5CZ0vX3FIGuV7sAcSNRpsn2r048RWg0mefs0GEQPkHh+NWAxR78W6LcFLaeoCLF
SsChbZMZJWjO199GKKay6D3iOIftPY11/wZjv6+Ie914K/WqJm7MJ5Q6O3xsK96C
3x6BdFk0BUwCNsmCpDYE29hCN0gLCr+tqmWm6d1/I97z9twvAZkSxWP8CyuuYHw6
uGIrlzRUQnyvTw7hibV/JlPD2BWhy3eLiOj8pLObuzbpndXmh5hmrAPL6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGOldcqbmzUOvWtzYHBGYLStKYSmMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWTZWMXlwdWJOUTY5YTNOZ2NFWmd0SzBwaEtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEL2p2GhGsseVvWn58Bn
tMB2b5seQx/awcUxd2o/ycskrCJePjJpysIAE3kRx3eVgLZI2rnG/XNZs+M2TILk
Sun699TLu/crl+nmToZz8503ETQGby7akLkH06LsjNsCMDk1FP7dU/un9+0aVQTy
ZSCRrdrzvDq+g4AQ5C93a5skJRfLVlwsmVA16y2x5wVKyLTqGBIKb9EKsMle+99Z
5yqKxThZtEWB7H7UQN/i0DRCbttcNIHf8+pyhjCLlyeOtie88KPoklWe/Fl7FUOZ
bQgONN066zH2nS04KdgCr+N7dCR5SY4cx7kj76N97eYzcnUlcVzG3LjU2EO8Bimi
NU4=
-----END CERTIFICATE-----
Generated at Thu May 1 21:07:10 2025 by rpki-client