Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y6VyyHurWAbGe9Mv2CgiPsOCPDY.roa
File: Y6VyyHurWAbGe9Mv2CgiPsOCPDY.roa (raw, json)
Hash identifier: RBNKNrotN2sN/Y7pv6TFsnYIAfJujX0rYjFF4EIWx8Y=
Subject key identifier: 63:A5:72:C8:7B:AB:58:06:C6:7B:D3:2F:D8:28:22:3E:C3:82:3C:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186620DD015709922A5E0C0987306C46AD6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y6VyyHurWAbGe9Mv2CgiPsOCPDY.roa
Signing time: Sat 18 Feb 2023 01:05:17 +0000
ROA not before: Sat 18 Feb 2023 01:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:62:0d:d0:15:70:99:22:a5:e0:c0:98:73:06:c4:6a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 01:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63a572c87bab5806c67bd32fd828223ec3823c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:12:fc:bf:76:2b:db:b6:88:13:9f:57:fd:44:
9b:3d:d2:9f:c1:45:b9:b3:37:0e:69:76:fc:d8:54:
c9:7b:4d:5c:af:91:01:d5:0b:dc:3a:1b:2a:dd:3e:
60:28:1d:58:b3:3d:8e:d3:c2:1d:17:a1:23:80:35:
c2:94:39:97:33:df:d2:a6:25:b5:99:90:65:3b:ba:
a2:26:6e:99:93:9b:97:f6:ee:4b:e7:ec:f6:c7:9b:
01:11:1b:3c:33:5e:e1:b7:cf:c2:62:59:03:c7:e6:
49:b4:57:02:be:16:29:e4:61:87:17:31:95:30:cd:
cb:5b:0c:a9:c9:26:cb:80:aa:a9:1f:e1:38:8d:8e:
e4:24:43:03:99:51:91:0a:8e:e9:5b:2d:4f:a5:13:
ba:16:82:04:8c:21:63:14:18:61:85:21:73:74:c2:
c2:f1:fc:88:e5:ad:a9:ad:d3:69:1e:90:45:be:af:
8f:c3:79:a6:d2:c5:14:a0:d4:a3:e3:70:34:53:fb:
1f:c0:24:dc:77:e8:03:b8:e6:bd:d4:89:0e:c6:5a:
ce:8d:d4:3c:0c:48:8f:3d:fb:89:04:9f:84:d2:2f:
23:4e:74:d3:f7:87:0b:23:cb:f8:19:71:f5:7b:03:
30:87:5a:1a:67:ec:61:1a:1a:f5:b2:88:1c:87:e2:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:72:C8:7B:AB:58:06:C6:7B:D3:2F:D8:28:22:3E:C3:82:3C:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y6VyyHurWAbGe9Mv2CgiPsOCPDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:65:79:2c:20:14:fb:09:d7:10:ed:fe:bc:5b:86:da:c2:ff:
90:c2:83:5b:b8:6f:16:d3:75:e2:e8:73:34:57:5d:76:62:cf:
43:c6:6b:55:81:18:f9:06:6d:aa:ff:2b:01:e8:4e:75:e4:9b:
7d:f6:eb:c3:d9:4d:59:34:7f:09:eb:54:c2:e9:b8:78:7e:a6:
89:9c:11:d9:f6:7c:21:e2:50:31:11:dd:ee:35:98:f2:1b:29:
6d:46:9b:de:3c:1a:69:b3:09:ce:e6:7e:dd:ec:c9:93:63:16:
45:55:5b:0e:3d:73:bf:5e:33:bf:6b:aa:29:c6:e0:3a:23:1b:
b5:02:0a:bb:03:82:21:b0:7c:f7:e0:bf:9e:d2:f7:7b:d6:95:
c2:d4:03:2b:4f:17:7c:a4:f9:b0:b9:d1:46:91:cb:64:5b:cf:
e0:1a:0e:4d:f3:83:14:cf:1c:43:77:55:ff:45:cc:2c:12:ff:
35:3a:9d:90:4c:18:d1:1b:6f:c4:9d:34:31:8a:bf:b5:bd:e2:
b7:6e:c4:f1:91:39:71:61:6f:79:be:b3:3f:8d:64:ee:2b:64:
73:0d:01:b0:52:c0:a6:b0:a1:e3:20:ca:54:64:7a:45:11:bd:
b0:ba:37:6e:14:68:0a:1b:be:76:b5:5d:57:db:56:a4:d3:db:
bd:56:1a:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZiDdAVcJkipeDAmHMGxGrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE4MDEwNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2E1NzJjODdiYWI1ODA2YzY3YmQzMmZkODI4MjIzZWMzODIzYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBL8v3Yr27aIE59X/USbPdKfwUW5
szcOaXb82FTJe01cr5EB1QvcOhsq3T5gKB1Ysz2O08IdF6EjgDXClDmXM9/SpiW1
mZBlO7qiJm6Zk5uX9u5L5+z2x5sBERs8M17ht8/CYlkDx+ZJtFcCvhYp5GGHFzGV
MM3LWwypySbLgKqpH+E4jY7kJEMDmVGRCo7pWy1PpRO6FoIEjCFjFBhhhSFzdMLC
8fyI5a2prdNpHpBFvq+Pw3mm0sUUoNSj43A0U/sfwCTcd+gDuOa91IkOxlrOjdQ8
DEiPPfuJBJ+E0i8jTnTT94cLI8v4GXH1ewMwh1oaZ+xhGhr1sogch+I/yQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGOlcsh7q1gGxnvTL9goIj7Dgjw2MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWTZWeXlIdXJXQWJHZTlNdjJDZ2lQc09DUERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKtleSwgFPsJ1xDt/rxb
htrC/5DCg1u4bxbTdeLoczRXXXZiz0PGa1WBGPkGbar/KwHoTnXkm33268PZTVk0
fwnrVMLpuHh+pomcEdn2fCHiUDER3e41mPIbKW1Gm948GmmzCc7mft3syZNjFkVV
Ww49c79eM79rqinG4DojG7UCCrsDgiGwfPfgv57S93vWlcLUAytPF3yk+bC50UaR
y2Rbz+AaDk3zgxTPHEN3Vf9FzCwS/zU6nZBMGNEbb8SdNDGKv7W94rduxPGROXFh
b3m+sz+NZO4rZHMNAbBSwKawoeMgylRkekURvbC6N24UaAobvna1XVfbVqTT271W
GlA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:51:01 2025 by rpki-client