Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YF5zNx806bqeYfafTwVV4Gd4njw.roa
File: YF5zNx806bqeYfafTwVV4Gd4njw.roa (raw, json)
Hash identifier: DIdS3VlSKDYKHHA9ENgiLEqaT9L0wIip/k1RrJhT7/c=
Subject key identifier: 60:5E:73:37:1F:34:E9:BA:9E:61:F6:9F:4F:05:55:E0:67:78:9E:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E716CE6A2BB51FCAB7F7C1652757B488
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YF5zNx806bqeYfafTwVV4Gd4njw.roa
Signing time: Sat 12 Aug 2023 00:12:58 +0000
ROA not before: Sat 12 Aug 2023 00:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e7:16:ce:6a:2b:b5:1f:ca:b7:f7:c1:65:27:57:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 00:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605e73371f34e9ba9e61f69f4f0555e067789e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:9a:26:9c:2d:2c:39:de:78:54:86:21:ee:
c0:25:cf:e2:df:6c:e7:28:66:11:90:76:b2:e9:f7:
c9:46:53:03:c4:d9:41:38:5c:ae:f5:a2:ad:41:b0:
ea:fc:57:5f:cb:c4:3e:27:b2:24:c5:56:02:e0:0a:
b8:cf:8e:af:76:20:3c:64:59:d5:33:b6:11:38:fd:
a2:42:79:eb:85:2f:77:06:ec:9c:e2:40:06:e3:f2:
dd:50:fa:4d:79:83:1d:21:a9:47:e8:23:78:b9:7d:
58:58:04:da:42:d3:68:89:d5:9b:21:74:3f:d5:0a:
8d:64:5a:75:79:8c:52:5a:cc:83:77:c4:fc:f8:dc:
31:50:2f:56:4b:dd:c7:af:b2:aa:6b:fb:09:b0:42:
c2:71:61:0e:63:52:00:1c:26:6f:f0:b4:ca:38:1e:
d2:2d:c7:c3:39:55:d7:56:bb:9e:94:b1:7a:84:4e:
62:a2:2f:d2:ab:7c:8d:d7:6c:a1:ec:94:e9:8b:a8:
4f:12:b3:57:1d:1f:6e:92:96:94:e6:04:77:8c:ab:
8f:bf:4b:d9:a9:68:6a:86:0e:2f:61:98:41:b6:bd:
4f:6c:2e:3b:69:f4:c0:c4:2c:0b:f5:97:9a:45:ea:
b9:66:91:80:c1:ef:62:68:28:37:de:dc:c0:f8:90:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:73:37:1F:34:E9:BA:9E:61:F6:9F:4F:05:55:E0:67:78:9E:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YF5zNx806bqeYfafTwVV4Gd4njw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:91:aa:b3:44:b5:47:90:b5:ae:68:52:3c:c9:62:f3:0e:d3:
c0:d5:db:86:b3:67:9c:35:27:00:04:c0:25:30:37:e1:8c:11:
45:05:e6:6c:49:bc:80:53:06:5e:07:bd:d2:fd:43:e9:b7:36:
f6:91:fa:a3:6d:f8:e1:ef:0e:70:cc:bb:54:db:59:92:94:96:
33:39:18:6e:47:c5:8b:e6:ad:ac:b1:0a:df:7e:32:82:31:f0:
b2:cc:96:1d:fd:7a:7e:aa:01:9c:4e:51:3e:60:a7:47:c9:4f:
63:63:b5:09:c9:6e:7f:2c:a0:53:a3:80:12:f0:66:26:2c:88:
5e:b8:51:ce:9e:78:77:e6:92:04:83:81:4c:80:a6:c9:58:c3:
9b:88:c9:19:aa:ef:3b:19:ae:01:a7:1f:db:5b:fd:7d:8a:77:
f5:9f:63:29:b7:cb:fe:be:24:56:79:be:ca:6a:e1:aa:99:2d:
6e:ee:3e:7e:98:43:6c:7f:b5:bb:1b:2f:6f:ad:79:ac:34:44:
eb:eb:fc:54:0d:a6:66:0c:e0:5a:4c:d2:fe:5e:3f:94:6a:72:
3a:09:a0:e8:38:8e:7e:3b:4f:08:ca:eb:03:f7:c8:38:1d:1c:
96:ba:27:e3:80:ef:b1:0a:6c:40:fa:f9:71:d9:f4:8b:28:ba:
e5:72:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:31:16 2025 by rpki-client