Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y8JpBRgQd0C0t5sSHR-ZlbHq5sA.roa
File: Y8JpBRgQd0C0t5sSHR-ZlbHq5sA.roa (raw, json)
Hash identifier: GHn8ltghK/tIZNluQS0BOY7E2nd8fkcavZ1XpvluA1E=
Subject key identifier: 63:C2:69:05:18:10:77:40:B4:B7:9B:12:1D:1F:99:95:B1:EA:E6:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7279A4D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y8JpBRgQd0C0t5sSHR-ZlbHq5sA.roa
Signing time: Mon 14 Mar 2022 16:10:37 +0000
ROA not before: Mon 14 Mar 2022 16:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920574676 (0x7279a4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 16:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63c2690518107740b4b79b121d1f9995b1eae6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:64:e8:6d:e9:f9:73:0b:a2:a5:df:09:e5:
bc:f7:e7:f5:77:64:d6:aa:06:b9:5e:f6:65:6a:cc:
42:fe:d3:cf:fa:0c:52:70:8b:dc:de:cd:2f:d2:0b:
98:12:13:78:e2:c9:ab:ec:49:4c:03:96:83:23:a7:
d5:ec:41:03:12:53:8d:e5:22:fb:40:ab:b3:64:59:
d5:b1:c3:60:f7:6f:24:9b:1d:ad:8b:63:74:1e:b7:
0c:c7:6f:ab:5e:35:8b:67:06:19:94:57:17:24:ff:
ea:ab:75:fa:90:48:96:7b:3f:6e:7e:28:f0:14:4d:
ae:12:c4:29:03:c2:e5:92:49:26:95:4d:b1:aa:eb:
d8:ea:fa:64:90:dd:80:f2:fc:4d:b4:6e:66:6e:7b:
8c:38:44:45:89:49:64:9b:e8:08:5c:f6:18:c1:49:
ab:4f:72:7c:e0:44:8f:6f:0e:13:9b:38:e5:45:1d:
45:b4:1a:be:35:e3:6e:ae:9c:8a:85:c2:1e:84:f2:
22:da:94:43:cd:09:a6:f5:cf:bd:6c:75:82:84:a6:
4e:44:5f:92:2b:40:09:91:b5:d3:83:79:54:8d:38:
a8:1f:74:7f:1e:90:aa:be:61:2a:fb:c2:ab:aa:30:
7c:86:c5:d9:32:51:ae:e4:60:cb:a8:1f:c2:d8:9e:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C2:69:05:18:10:77:40:B4:B7:9B:12:1D:1F:99:95:B1:EA:E6:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y8JpBRgQd0C0t5sSHR-ZlbHq5sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:7f:94:5c:12:4f:0f:80:66:1c:f7:18:f6:4b:6a:c1:16:3f:
c6:ff:f0:c4:15:40:7e:24:70:21:18:b3:af:06:ee:7d:0f:5c:
01:37:0c:9c:58:be:d3:a7:de:0a:6f:70:cc:82:bd:48:c2:a0:
45:fd:c7:17:6d:81:21:cd:68:5a:76:a5:33:a8:73:b0:89:3f:
42:8d:53:a5:93:1f:56:ce:73:c2:04:1e:16:68:25:07:4e:5e:
fa:c0:71:30:1c:e6:3d:9e:1a:a8:a6:ab:bf:db:35:68:37:c1:
1b:fa:1b:9b:8c:77:7b:a0:be:ac:6f:b7:13:6b:51:ef:11:f2:
55:5b:9d:b1:69:a6:c2:4e:56:f3:16:6b:24:b6:63:48:bd:94:
82:aa:66:54:55:56:b8:de:9d:67:46:a8:e4:03:78:93:66:78:
1b:49:c8:be:a5:c0:e5:fb:bc:ac:df:a6:6e:27:7a:92:6e:bc:
93:fc:20:7a:63:27:c0:a8:19:87:98:93:83:72:28:ed:fc:70:
b1:91:49:7f:8c:f8:fa:3c:c3:aa:b2:ab:77:e4:21:96:6e:cf:
f2:2b:c5:ae:91:ad:54:ce:68:70:28:8e:e9:cc:5b:f3:e3:62:
d4:0a:53:2c:97:98:7a:a2:ab:46:ff:ea:40:cb:b5:13:d6:a7:
ed:4b:42:6e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcnmk1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
NDE2MTAzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjNjMjY5MDUxODEw
Nzc0MGI0Yjc5YjEyMWQxZjk5OTViMWVhZTZjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANeQZOht6flzC6Kl3wnlvPfn9Xdk1qoGuV72ZWrMQv7Tz/oM
UnCL3N7NL9ILmBITeOLJq+xJTAOWgyOn1exBAxJTjeUi+0Crs2RZ1bHDYPdvJJsd
rYtjdB63DMdvq141i2cGGZRXFyT/6qt1+pBIlns/bn4o8BRNrhLEKQPC5ZJJJpVN
sarr2Or6ZJDdgPL8TbRuZm57jDhERYlJZJvoCFz2GMFJq09yfOBEj28OE5s45UUd
RbQavjXjbq6cioXCHoTyItqUQ80JpvXPvWx1goSmTkRfkitACZG104N5VI04qB90
fx6Qqr5hKvvCq6owfIbF2TJRruRgy6gfwtieKPcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRjwmkFGBB3QLS3mxIdH5mVsermwDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1k4SnBCUmdRZDBDMHQ1c1NIUi1abGJIcTVzQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQB/f5RcEk8PgGYc9xj2S2rBFj/G//DEFUB+JHAh
GLOvBu59D1wBNwycWL7Tp94Kb3DMgr1IwqBF/ccXbYEhzWhadqUzqHOwiT9CjVOl
kx9WznPCBB4WaCUHTl76wHEwHOY9nhqopqu/2zVoN8Eb+hubjHd7oL6sb7cTa1Hv
EfJVW52xaabCTlbzFmsktmNIvZSCqmZUVVa43p1nRqjkA3iTZngbSci+pcDl+7ys
36ZuJ3qSbryT/CB6YyfAqBmHmJODcijt/HCxkUl/jPj6PMOqsqt35CGWbs/yK8Wu
ka1UzmhwKI7pzFvz42LUClMsl5h6oqtG/+pAy7UT1qftS0Ju
-----END CERTIFICATE-----
Generated at Sat May 3 12:59:09 2025 by rpki-client