Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y8otV73QhNDtxVD40jgzq9UmSa0.roa
File: Y8otV73QhNDtxVD40jgzq9UmSa0.roa (raw, json)
Hash identifier: +jhGVSO9gqutzdgzD2M3tCAUmmSEmNQ1H/56RGauF4Y=
Subject key identifier: 63:CA:2D:57:BD:D0:84:D0:ED:C5:50:F8:D2:38:33:AB:D5:26:49:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018995FCECEDC5EBBD9213A8D02E4FCBFF91
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y8otV73QhNDtxVD40jgzq9UmSa0.roa
Signing time: Thu 27 Jul 2023 06:15:28 +0000
ROA not before: Thu 27 Jul 2023 06:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:fc:ec:ed:c5:eb:bd:92:13:a8:d0:2e:4f:cb:ff:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 06:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63ca2d57bdd084d0edc550f8d23833abd52649ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:6a:e0:d6:52:e0:d4:67:16:7d:b2:7f:bc:
de:87:c6:24:a1:30:91:ef:ec:44:87:f2:86:79:d8:
4a:c2:b1:9b:f5:87:f7:3f:f7:80:ce:54:18:b4:41:
7d:53:01:34:5d:13:3c:18:ae:bc:73:03:33:6e:0f:
5b:71:c4:d5:94:1c:52:6e:0d:74:95:bc:b6:20:43:
ca:5d:f2:04:fc:92:66:c6:97:64:4f:50:ff:b5:b5:
c3:f6:d9:86:06:00:3e:f3:92:d2:09:2e:51:fe:e5:
6e:21:e6:39:7d:e6:4f:64:86:10:ed:a7:68:49:9b:
ae:11:da:eb:98:2e:ed:a4:bf:79:1f:34:6c:99:87:
af:36:85:a0:1f:b9:af:36:16:03:5b:be:66:96:56:
36:65:8c:5d:69:43:bf:4f:9b:ca:92:60:b0:05:23:
93:7a:45:89:f3:b0:10:69:3d:78:25:49:95:bb:8c:
5b:30:96:21:ed:a9:01:25:5c:dd:17:12:38:99:0c:
68:2e:60:15:07:78:88:aa:d5:3a:a9:0b:c9:51:83:
88:f4:13:69:19:34:3e:1d:c5:42:3e:27:1a:f0:d5:
a1:52:b4:d8:ec:7c:c1:46:b8:3b:61:4d:e5:22:d4:
2e:61:e8:6b:9e:4a:2d:c6:2d:c4:8e:df:dd:5d:c3:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CA:2D:57:BD:D0:84:D0:ED:C5:50:F8:D2:38:33:AB:D5:26:49:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y8otV73QhNDtxVD40jgzq9UmSa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:d5:66:f9:6a:2f:04:d2:fc:1f:8c:3e:f3:e1:4b:5c:a9:25:
7f:21:30:44:80:3b:fe:b8:00:d4:e2:cb:50:05:68:30:8e:d4:
f0:4c:7a:be:8b:23:10:40:be:72:4c:32:32:78:47:9d:ce:48:
fd:e8:bd:b2:d1:05:7c:68:d7:85:f7:bf:89:2e:e7:c1:75:0b:
2d:08:70:2d:e8:fc:72:9a:f0:b1:ab:68:1f:c2:9c:be:d4:7b:
e2:6b:5d:73:29:b8:7b:7e:6e:fa:1f:5d:0b:9b:4e:cf:05:92:
85:2e:da:ec:d1:2e:26:2e:ad:b1:f1:1e:9e:46:a8:1c:e4:ae:
04:1d:6c:ad:a6:40:08:eb:82:f5:f9:4b:c5:98:05:6c:53:7c:
bf:b0:de:ad:3a:39:ec:0a:64:e1:7f:8c:75:bb:54:59:99:ea:
65:af:71:4b:80:25:9d:89:8e:2a:07:01:34:34:f9:5f:f2:e6:
bc:3d:fb:5c:5d:b8:15:23:22:cc:ae:02:4d:25:f9:d0:48:d7:
69:7f:59:5c:da:c4:f9:b9:e2:2b:f4:de:a5:bf:71:4d:41:c2:
5b:7c:16:37:a2:72:e3:ef:93:cd:48:b5:0b:c1:62:56:3d:d4:
3f:87:e6:2d:a4:53:8d:90:45:47:78:00:fc:8c:e0:30:5c:5a:
c7:d2:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:57:09 2025 by rpki-client