Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YA3Brd0cF5-tmyaj8CgJDEJFliw.roa
File: YA3Brd0cF5-tmyaj8CgJDEJFliw.roa (raw, json)
Hash identifier: FNMt3iUmsUZ+627oCotR90DmU5BV4M27rewZjUEwsLU=
Subject key identifier: 60:0D:C1:AD:DD:1C:17:9F:AD:9B:26:A3:F0:28:09:0C:42:45:96:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866394230D0689B0BEF7D2FCC2E2BBD6A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YA3Brd0cF5-tmyaj8CgJDEJFliw.roa
Signing time: Sat 18 Feb 2023 08:11:38 +0000
ROA not before: Sat 18 Feb 2023 08:11:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:94:23:0d:06:89:b0:be:f7:d2:fc:c2:e2:bb:d6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 08:11:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=600dc1addd1c179fad9b26a3f028090c4245962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:0a:53:a6:50:80:fc:7b:a7:5c:e3:e2:a5:
bc:bd:46:16:8b:03:d1:96:21:61:2a:a0:6e:be:5b:
5e:99:e0:1f:2b:54:9b:4d:4a:f3:17:9f:d1:07:b8:
fd:d2:f6:e8:08:cd:b7:6b:0e:18:0e:3a:45:76:ee:
f3:80:11:cf:7f:64:f9:17:94:9c:66:9a:bc:84:18:
17:82:74:a7:65:e5:14:d5:f9:7b:37:34:7f:06:0e:
62:d6:f1:3e:f1:84:97:98:af:76:8c:d3:5a:b4:83:
77:2c:1c:52:7e:57:aa:6c:0b:f2:17:4e:4f:18:5b:
55:6d:1e:07:6c:25:11:fc:1a:e8:79:74:47:42:de:
b9:65:f7:f6:c9:0d:4a:c2:7a:7b:70:6b:c9:8d:1c:
7d:21:cb:a4:8f:8d:77:89:7b:8b:7f:96:9c:1e:87:
0d:9b:34:4c:64:1f:dd:36:0e:8b:cb:80:51:c7:39:
ac:f0:9d:26:74:2f:07:e9:fa:6f:79:39:be:99:a0:
e9:7c:80:fe:a5:3f:aa:e4:b7:1f:4b:80:f5:b2:ef:
2d:3b:2a:3d:6d:60:9f:ab:8e:f7:29:28:18:99:5c:
77:cd:cb:3a:ac:d0:60:c4:7c:9c:fb:5b:e9:27:08:
71:ce:00:ea:eb:17:da:7d:95:90:a1:a0:c8:78:b5:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0D:C1:AD:DD:1C:17:9F:AD:9B:26:A3:F0:28:09:0C:42:45:96:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YA3Brd0cF5-tmyaj8CgJDEJFliw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:0c:d9:34:b4:64:62:4d:d4:d3:7d:c4:10:9f:6f:5e:b6:72:
f7:e5:1e:4e:85:2c:24:0b:98:60:3e:4d:d0:c9:61:45:14:bf:
4a:c1:29:09:bb:19:2e:06:8f:04:e2:6a:6e:cf:02:47:6a:1d:
89:91:ca:ce:b7:49:40:59:d2:8c:98:49:bd:f6:50:9d:55:02:
5e:c6:1a:2c:6b:48:6a:d0:92:4c:8a:77:54:1e:a9:d4:0a:54:
3f:d9:81:e0:e3:9c:12:03:22:f7:9d:9d:16:dc:9b:9f:14:e9:
6b:b4:fa:a2:b8:93:08:c3:92:57:d1:1c:43:b1:66:be:e5:47:
6f:ec:43:80:3b:34:02:22:91:4a:f5:d4:72:9a:33:b1:3b:73:
e5:bd:c9:05:01:51:62:53:74:59:40:26:6a:6b:ea:ea:49:ee:
bb:f0:46:68:32:1d:fc:18:76:94:ef:dc:1d:22:53:70:bf:8a:
14:64:0e:df:8a:a0:a5:e7:62:52:58:56:49:35:ed:cc:4d:df:
22:e7:75:c0:01:6c:90:66:dd:bc:5b:89:a8:21:a1:da:ae:bd:
23:4b:77:a7:64:6e:4d:63:25:f5:55:00:b8:3d:53:7e:e9:18:
5d:e4:2f:22:da:8b:64:96:99:4f:64:05:d4:c1:b8:85:2e:b2:
84:41:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:00:22 2025 by rpki-client