Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YElIqurINkdBYD15R7h_mW_ivA4.roa
File: YElIqurINkdBYD15R7h_mW_ivA4.roa (raw, json)
Hash identifier: ntL84c+QgOwEPOKuipRIrmgOSKzlbGM2ki5K1ZEUCLM=
Subject key identifier: 60:49:48:AA:EA:C8:36:47:41:60:3D:79:47:B8:7F:99:6F:E2:BC:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BA061FC7EDE69AE25FBE9BB00A3258BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YElIqurINkdBYD15R7h_mW_ivA4.roa
Signing time: Wed 14 Jun 2023 13:09:03 +0000
ROA not before: Wed 14 Jun 2023 13:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:06:1f:c7:ed:e6:9a:e2:5f:be:9b:b0:0a:32:58:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 13:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=604948aaeac8364741603d7947b87f996fe2bc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:f5:a2:35:ba:48:e3:05:99:48:c8:28:27:
59:8b:12:55:97:ef:e9:8d:2d:5c:94:3a:67:bf:ab:
fd:cf:13:be:68:ec:45:e4:85:24:ae:50:60:77:88:
98:01:b2:a6:f6:de:56:6a:01:93:51:fb:23:9f:bd:
8c:3a:7f:b4:1b:31:8b:df:0f:a4:ea:e9:88:58:0a:
9a:28:63:b6:57:f9:2b:ae:07:6c:fc:f8:37:48:9b:
40:9f:5f:52:7b:57:4a:a3:d1:fc:3a:c4:3c:02:14:
68:93:ac:36:08:d3:b1:be:4a:26:27:ee:6c:53:58:
9c:7b:08:f1:ee:df:ba:47:ac:df:07:63:89:58:3f:
a3:73:51:72:cc:f2:85:26:d2:75:e5:3d:66:6c:52:
d6:d1:3d:19:f7:dc:bd:07:cf:ff:79:7f:df:08:64:
97:0b:c6:a6:38:df:eb:8b:83:8a:08:a3:07:9c:f5:
6f:3b:b7:d3:a1:54:59:80:41:52:74:c1:a0:a4:f6:
34:41:70:d8:8a:61:9b:2c:ad:0e:72:5a:f1:5f:58:
95:5c:76:e1:27:f1:73:20:10:da:a4:b1:96:b6:21:
5b:18:f9:8a:6b:04:d9:be:59:9e:e9:16:ee:cb:72:
dd:19:7e:f2:bc:ee:36:f7:3b:9b:4a:b7:4d:86:58:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:49:48:AA:EA:C8:36:47:41:60:3D:79:47:B8:7F:99:6F:E2:BC:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YElIqurINkdBYD15R7h_mW_ivA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:10:34:59:4c:59:bf:9b:2c:f7:5c:c2:ae:9f:a4:4b:b1:a9:
72:1b:ca:e9:33:90:99:d9:2d:59:f8:a0:3e:2f:bf:f8:71:e0:
ba:a1:9f:ac:dc:25:36:b5:30:1b:ff:77:2b:cc:7d:ed:79:81:
f9:f2:07:11:c1:12:16:c3:17:b0:3b:e9:0e:7e:8a:00:0f:03:
19:5e:cb:5d:f9:b0:ab:bb:37:93:6f:db:9a:9b:2f:2f:39:e9:
b0:06:54:60:ae:47:cc:ed:ce:62:04:2a:e2:89:b5:4f:81:21:
0d:5d:f0:b9:0c:2b:1b:2e:f0:56:4d:04:48:15:52:be:35:b4:
cb:7a:33:22:37:24:82:15:94:65:23:9d:f3:99:d8:1e:0b:d1:
f2:01:94:b4:cf:85:0b:17:be:a6:3b:56:e8:3f:30:d4:c6:ce:
80:ef:5c:bd:68:2d:3b:6e:79:0e:f0:ac:f8:a3:03:35:c0:2f:
56:a0:78:1f:ac:90:17:dd:4b:35:7c:60:65:7e:d1:68:80:eb:
10:e0:b5:39:66:7c:b4:fe:b1:2c:18:3e:e7:e6:0e:2a:02:85:
3e:26:2c:cd:7a:54:2e:5e:e7:8c:17:7f:d2:8e:25:64:f1:fa:
f2:d7:4a:d7:d2:73:75:51:b6:ff:21:1c:5f:0b:03:e0:86:23:
10:0b:bb:39
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYi6Bh/H7eaa4l++m7AKMli6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE0MTMwOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDQ5NDhhYWVhYzgzNjQ3NDE2MDNkNzk0N2I4N2Y5OTZmZTJiYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMf1ojW6SOMFmUjIKCdZixJVl+/p
jS1clDpnv6v9zxO+aOxF5IUkrlBgd4iYAbKm9t5WagGTUfsjn72MOn+0GzGL3w+k
6umIWAqaKGO2V/krrgds/Pg3SJtAn19Se1dKo9H8OsQ8AhRok6w2CNOxvkomJ+5s
U1icewjx7t+6R6zfB2OJWD+jc1FyzPKFJtJ15T1mbFLW0T0Z99y9B8//eX/fCGSX
C8amON/ri4OKCKMHnPVvO7fToVRZgEFSdMGgpPY0QXDYimGbLK0OclrxX1iVXHbh
J/FzIBDapLGWtiFbGPmKawTZvlme6Rbuy3LdGX7yvO429zubSrdNhliBwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGBJSKrqyDZHQWA9eUe4f5lv4rwOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWUVsSXF1cklOa2RCWUQxNVI3aF9tV19pdkE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABsQNFlMWb+bLPdcwq6f
pEuxqXIbyukzkJnZLVn4oD4vv/hx4Lqhn6zcJTa1MBv/dyvMfe15gfnyBxHBEhbD
F7A76Q5+igAPAxley135sKu7N5Nv25qbLy856bAGVGCuR8ztzmIEKuKJtU+BIQ1d
8LkMKxsu8FZNBEgVUr41tMt6MyI3JIIVlGUjnfOZ2B4L0fIBlLTPhQsXvqY7Vug/
MNTGzoDvXL1oLTtueQ7wrPijAzXAL1ageB+skBfdSzV8YGV+0WiA6xDgtTlmfLT+
sSwYPufmDioChT4mLM16VC5e54wXf9KOJWTx+vLXStfSc3VRtv8hHF8LA+CGIxAL
uzk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:50:33 2025 by rpki-client