Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YEX0skMJuycomXzzlxkKsT1q9RA.roa
File: YEX0skMJuycomXzzlxkKsT1q9RA.roa (raw, json)
Hash identifier: Edl5V8H2nLDWpl4JXaKxW7L6Ra+8JFPzv3cQmuFjZIQ=
Subject key identifier: 60:45:F4:B2:43:09:BB:27:28:99:7C:F3:97:19:0A:B1:3D:6A:F5:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E3D5B93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YEX0skMJuycomXzzlxkKsT1q9RA.roa
Signing time: Mon 20 Jun 2022 00:08:44 +0000
ROA not before: Mon 20 Jun 2022 00:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386385811 (0x8e3d5b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 00:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6045f4b24309bb2728997cf397190ab13d6af510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:45:c8:8e:2e:98:a1:7f:f8:d1:9e:ca:06:
cb:d5:63:bd:b7:07:aa:d2:76:91:19:17:49:18:76:
3c:83:1a:da:04:3a:c4:6a:17:d7:d6:73:d6:90:e3:
8c:05:13:5c:10:7b:48:44:0d:a5:c8:83:98:82:62:
17:ba:9b:2f:d0:ab:0e:6e:f7:e4:9b:ba:96:eb:00:
25:88:fb:f6:68:18:ee:41:7f:fe:d5:e8:42:60:14:
a4:fb:02:fc:f6:82:b8:b5:b8:1a:04:59:19:4e:8b:
6f:16:88:52:92:ab:9e:8b:10:73:7c:ea:90:fa:29:
54:e8:b4:86:58:bb:4a:65:88:c9:e5:fc:50:15:3e:
83:24:6e:72:8b:54:06:22:75:0c:18:02:2d:d3:8f:
b9:ae:3a:3e:5b:7a:59:4b:e9:84:91:67:af:ec:a5:
f4:54:ec:64:1d:ac:b9:14:03:62:ac:a4:ed:d9:5f:
64:5f:0c:ec:9f:70:d6:36:b2:b6:91:9f:dc:1e:4f:
64:43:1d:83:e0:e1:8e:6a:cc:13:fa:09:6e:e5:2a:
29:bd:95:ad:7d:b7:94:ec:cb:ee:bb:f2:b2:82:d3:
a8:bc:9f:f4:d0:ce:c0:8f:91:43:ef:c7:2e:12:d2:
04:89:10:d4:0e:ef:ff:9a:b9:75:de:16:df:5f:79:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:45:F4:B2:43:09:BB:27:28:99:7C:F3:97:19:0A:B1:3D:6A:F5:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YEX0skMJuycomXzzlxkKsT1q9RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:bb:15:93:3c:22:35:18:5d:f1:1d:1e:40:65:99:9b:61:a6:
07:7c:77:f0:23:91:51:55:20:ed:fb:30:77:71:e2:7b:0f:4a:
67:72:21:ee:83:86:f5:90:cc:21:10:e1:73:81:be:48:e9:1f:
ce:44:a0:c0:56:2a:b8:54:5f:a7:e2:fc:85:d3:3c:1e:a0:a3:
da:83:1e:d1:46:25:dc:5e:34:59:3c:0c:99:46:a4:6f:2e:e7:
37:e4:9d:28:ce:15:8b:bf:2e:99:d5:dc:f0:e1:ef:48:e3:5e:
13:f7:67:da:1f:1d:44:7a:76:45:42:8c:09:1a:4b:3e:21:28:
c7:c7:96:9e:49:40:8d:3c:97:e2:91:ef:7d:51:92:b9:85:2c:
52:0d:1f:f1:d5:c5:cc:c7:fe:3c:07:06:06:c7:56:d2:64:8c:
b9:6e:61:5e:4e:eb:77:b0:22:5b:21:f8:a4:fe:3c:e0:37:8c:
9f:a5:af:cd:69:bb:c1:02:56:a8:14:ee:12:51:9d:1b:d6:be:
d5:7a:c1:f4:2a:a9:34:97:f6:c6:ac:2f:bf:b0:2f:37:97:03:
08:c3:c6:c1:31:b6:27:86:29:c4:64:9b:de:81:85:6e:bd:0c:
69:dc:7d:3a:8e:54:0d:f0:c2:53:48:99:c2:eb:fa:6b:b1:bd:
a9:9c:ac:10
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI49W5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjAwMDA4NDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDYwNDVmNGIyNDMw
OWJiMjcyODk5N2NmMzk3MTkwYWIxM2Q2YWY1MTAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQfUXIji6YoX/40Z7KBsvVY723B6rSdpEZF0kYdjyDGtoE
OsRqF9fWc9aQ44wFE1wQe0hEDaXIg5iCYhe6my/Qqw5u9+SbupbrACWI+/ZoGO5B
f/7V6EJgFKT7Avz2gri1uBoEWRlOi28WiFKSq56LEHN86pD6KVTotIZYu0pliMnl
/FAVPoMkbnKLVAYidQwYAi3Tj7muOj5bellL6YSRZ6/spfRU7GQdrLkUA2KspO3Z
X2RfDOyfcNY2sraRn9weT2RDHYPg4Y5qzBP6CW7lKim9la19t5Tsy+678rKC06i8
n/TQzsCPkUPvxy4S0gSJENQO7/+auXXeFt9feRXFAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUYEX0skMJuycomXzzlxkKsT1q9RAwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9ZRVgwc2tNSnV5Y29tWHp6bHhrS3NUMXE5UkEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAmLsVkzwiNRhd8R0eQGWZm2GmB3x38CORUVUg
7fswd3Hiew9KZ3Ih7oOG9ZDMIRDhc4G+SOkfzkSgwFYquFRfp+L8hdM8HqCj2oMe
0UYl3F40WTwMmUakby7nN+SdKM4Vi78umdXc8OHvSONeE/dn2h8dRHp2RUKMCRpL
PiEox8eWnklAjTyX4pHvfVGSuYUsUg0f8dXFzMf+PAcGBsdW0mSMuW5hXk7rd7Ai
WyH4pP484DeMn6WvzWm7wQJWqBTuElGdG9a+1XrB9CqpNJf2xqwvv7AvN5cDCMPG
wTG2J4YpxGSb3oGFbr0Madx9Oo5UDfDCU0iZwuv6a7G9qZysEA==
-----END CERTIFICATE-----
Generated at Fri May 2 05:01:31 2025 by rpki-client