Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YFALQ2Ui3Ph-GHUxg0fVBq9jI8w.roa
File: YFALQ2Ui3Ph-GHUxg0fVBq9jI8w.roa (raw, json)
Hash identifier: hnVCqeKDQ3ZBTO6ZSFUJVy+zBGuOX2qLahexXCYcr/k=
Subject key identifier: 60:50:0B:43:65:22:DC:F8:7E:18:75:31:83:47:D5:06:AF:63:23:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876B495AE38FE8536E163FD53A09AA3523
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YFALQ2Ui3Ph-GHUxg0fVBq9jI8w.roa
Signing time: Mon 10 Apr 2023 13:09:42 +0000
ROA not before: Mon 10 Apr 2023 13:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:49:5a:e3:8f:e8:53:6e:16:3f:d5:3a:09:aa:35:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 13:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60500b436522dcf87e1875318347d506af6323cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:b7:7e:97:ee:92:b9:fc:fd:b5:d9:ea:ce:
c5:82:9b:b7:8f:ad:21:37:ea:26:fe:1b:22:a8:b3:
f2:46:40:31:e7:d7:19:29:c1:a5:42:df:68:dd:a9:
bc:fe:a5:ab:b5:c0:c6:71:7b:1a:00:be:62:ad:81:
e9:5e:7d:7b:d1:a1:df:e9:3e:f1:17:02:b3:4d:cc:
ce:f0:90:f8:87:a6:1d:fb:40:b2:5f:26:d6:09:c4:
1a:4b:e4:82:43:32:5a:9a:57:d9:18:d6:0e:61:9a:
2a:d2:3f:89:fe:df:b4:de:07:77:60:82:33:11:fe:
e3:1c:0e:2f:17:c4:c9:5e:2b:8f:b6:23:93:d9:57:
d7:51:29:52:f1:b2:b4:c0:d1:c8:cf:cd:f0:38:ce:
ca:9a:c6:d7:1d:ff:9d:a7:f6:70:b3:6d:a1:6f:7c:
34:09:58:66:20:c1:d8:44:80:64:43:b3:44:ab:5a:
b5:55:34:4a:99:f6:84:43:91:fa:95:ed:f5:3a:ad:
db:9a:bf:aa:ac:f7:58:89:75:c8:92:d6:c2:4b:c6:
e9:93:6e:e5:d4:61:20:27:51:65:d5:8b:44:fb:7a:
74:1d:0b:e5:38:a4:a5:2d:19:ed:35:10:86:e8:65:
c0:d1:33:3c:8d:2d:5d:75:07:0f:25:68:a9:9b:20:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:50:0B:43:65:22:DC:F8:7E:18:75:31:83:47:D5:06:AF:63:23:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YFALQ2Ui3Ph-GHUxg0fVBq9jI8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:e6:39:ad:c4:23:36:c7:21:01:b1:68:ba:5d:9f:82:ef:c3:
51:68:7e:77:ca:6d:bd:6a:56:23:89:7a:78:e8:32:3b:14:7b:
99:c1:30:72:e3:b6:57:76:6a:73:40:cc:c8:2b:8e:6f:11:c6:
b4:59:d8:a5:45:8b:49:c0:eb:5f:7b:89:e8:3f:58:16:7d:ce:
93:ed:19:37:7a:1c:23:b1:d5:47:a1:9a:fc:7b:78:58:26:61:
39:0b:ac:d5:9f:99:54:fb:f7:69:39:aa:b5:b8:03:95:76:d5:
8c:5a:64:24:d8:35:9b:04:f5:14:c1:8f:a1:68:2b:ac:67:f6:
21:54:2d:23:60:71:20:f9:0c:40:72:49:50:55:3e:f2:83:10:
b7:15:ef:dd:00:ad:38:68:a0:60:c7:75:61:36:d7:3d:11:28:
db:bc:ed:81:ca:d4:e5:55:d6:5d:61:e8:08:5d:03:d0:e2:95:
fe:6c:a8:d9:bd:a2:2a:35:0a:e9:31:30:e3:18:9b:c2:0c:83:
38:48:25:c3:cf:59:22:e6:2f:29:d3:59:4f:0f:b0:0e:00:8e:
36:61:c1:2f:b1:4d:2e:33:d8:4e:6e:c9:1e:de:04:3a:d4:b5:
7b:ec:89:ce:0a:69:ad:91:51:98:36:53:06:05:2f:87:7b:6c:
d2:20:c4:c2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdrSVrjj+hTbhY/1ToJqjUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEwMTMwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDUwMGI0MzY1MjJkY2Y4N2UxODc1MzE4MzQ3ZDUwNmFmNjMyM2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4223fpfukrn8/bXZ6s7Fgpu3j60h
N+om/hsiqLPyRkAx59cZKcGlQt9o3am8/qWrtcDGcXsaAL5irYHpXn170aHf6T7x
FwKzTczO8JD4h6Yd+0CyXybWCcQaS+SCQzJamlfZGNYOYZoq0j+J/t+03gd3YIIz
Ef7jHA4vF8TJXiuPtiOT2VfXUSlS8bK0wNHIz83wOM7KmsbXHf+dp/Zws22hb3w0
CVhmIMHYRIBkQ7NEq1q1VTRKmfaEQ5H6le31Oq3bmr+qrPdYiXXIktbCS8bpk27l
1GEgJ1Fl1YtE+3p0HQvlOKSlLRntNRCG6GXA0TM8jS1ddQcPJWipmyDKUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGBQC0NlItz4fhh1MYNH1QavYyPMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWUZBTFEyVWkzUGgtR0hVeGcwZlZCcTlqSTh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAATmOa3EIzbHIQGxaLpd
n4Lvw1FofnfKbb1qViOJenjoMjsUe5nBMHLjtld2anNAzMgrjm8RxrRZ2KVFi0nA
6197ieg/WBZ9zpPtGTd6HCOx1Uehmvx7eFgmYTkLrNWfmVT792k5qrW4A5V21Yxa
ZCTYNZsE9RTBj6FoK6xn9iFULSNgcSD5DEBySVBVPvKDELcV790ArThooGDHdWE2
1z0RKNu87YHK1OVV1l1h6AhdA9Dilf5sqNm9oio1CukxMOMYm8IMgzhIJcPPWSLm
LynTWU8PsA4AjjZhwS+xTS4z2E5uyR7eBDrUtXvsic4Kaa2RUZg2UwYFL4d7bNIg
xMI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:09:31 2025 by rpki-client