Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y6XK5qa3XfX2O4cgqUeSr6WHg0w.roa
File: Y6XK5qa3XfX2O4cgqUeSr6WHg0w.roa (raw, json)
Hash identifier: 7/aF3ubVa9dFcBk/6AvaEAwn/Tv/42FA2GcBzDb23Bs=
Subject key identifier: 63:A5:CA:E6:A6:B7:5D:F5:F6:3B:87:20:A9:47:92:AF:A5:87:83:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182CC5A24876DBEEB12F4D1043C71483C49
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y6XK5qa3XfX2O4cgqUeSr6WHg0w.roa
Signing time: Tue 23 Aug 2022 20:17:15 +0000
ROA not before: Tue 23 Aug 2022 20:17:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cc:5a:24:87:6d:be:eb:12:f4:d1:04:3c:71:48:3c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 20:17:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63a5cae6a6b75df5f63b8720a94792afa587834c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:26:3e:11:c3:83:50:c8:a9:3b:ad:38:bc:
65:a1:0c:19:1a:fb:87:39:7f:4b:20:22:92:3b:fe:
58:c4:a0:98:35:8e:85:0e:90:43:c4:1e:14:96:04:
dd:db:ee:81:32:39:f0:17:38:05:92:62:2e:c8:49:
6e:0a:f7:69:67:10:6b:82:f7:41:1a:9e:73:3b:97:
10:ae:f5:ad:fd:70:e5:7b:b6:91:75:cb:45:9b:0d:
29:4c:5a:20:20:16:ba:fe:d0:0c:16:0e:ca:94:06:
7a:a5:07:21:b1:b1:69:8a:a2:6f:08:ec:eb:87:db:
70:9b:2f:75:c0:8e:2a:24:e6:f9:dc:73:22:b0:8a:
10:ba:bb:f2:ae:bd:76:1b:5b:32:e2:c4:20:4f:0d:
39:b4:88:2e:97:3c:7f:d9:ff:ff:10:f9:87:f3:2c:
47:a5:14:eb:fe:33:43:1a:77:98:70:be:7f:44:2c:
a4:d0:a1:b5:98:36:97:bc:1d:0c:26:1b:2a:ed:b2:
d2:76:9c:b4:83:b6:98:50:a6:90:49:ba:21:5b:37:
5f:17:14:35:ef:da:8f:cc:4e:c2:c6:1d:60:97:2a:
03:48:0f:9e:ab:7c:4a:5a:3d:c9:b0:53:99:2d:8b:
08:3e:26:75:6d:d4:01:cb:cc:ab:05:07:06:33:6a:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:CA:E6:A6:B7:5D:F5:F6:3B:87:20:A9:47:92:AF:A5:87:83:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y6XK5qa3XfX2O4cgqUeSr6WHg0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:05:2d:e6:f7:1c:d1:39:be:e6:c5:4b:d4:e9:2c:c2:08:89:
61:b7:d6:74:9a:78:73:6d:49:16:00:d9:07:ce:5f:5e:39:8b:
79:ca:39:e6:89:3a:7a:cb:90:fe:e3:77:c0:b8:6e:a8:e3:e6:
78:fd:7f:43:1e:fd:21:cb:14:c2:e5:02:b6:af:bc:01:9a:4d:
ed:e6:bb:97:06:48:a1:63:83:5d:52:e9:97:8e:f7:32:14:24:
38:4b:4c:3e:8e:a1:40:3f:b5:be:a5:e2:bd:81:2f:9d:64:09:
be:5a:31:66:cb:1b:11:19:e1:f4:ff:18:25:fb:a8:cc:16:35:
1e:15:7f:e2:9b:33:0b:4e:e4:26:33:3c:16:1f:43:ec:17:18:
5f:8e:0e:dd:33:c9:61:e2:01:d9:63:7b:cf:e6:db:3a:06:4b:
5a:bb:5d:b5:66:e7:d2:41:75:66:55:41:6a:3b:08:e4:e6:52:
45:bb:9b:ee:d2:69:fb:ce:bf:9c:d8:4b:d7:10:bc:6e:d2:d3:
52:b6:51:24:3d:3b:a9:16:03:99:a8:84:3c:05:25:9d:ee:e4:
08:2c:97:6a:06:2e:4e:b3:e3:ab:21:2c:b6:ee:f7:b5:8f:fd:
50:30:61:be:35:e4:83:8b:9c:69:62:5c:90:d0:44:d1:74:cd:
de:0c:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:38 2025 by rpki-client