Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YFFC-tk3MJupPR_TKmmUB5tREtQ.roa
File: YFFC-tk3MJupPR_TKmmUB5tREtQ.roa (raw, json)
Hash identifier: j6eQ8NR9yay4FRiuBK8pNyzLFCCnhi3UQByT6UgvNQM=
Subject key identifier: 60:51:42:FA:D9:37:30:9B:A9:3D:1F:D3:2A:69:94:07:9B:51:12:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871D6712B95D4C0F7310980AEB7487F4FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YFFC-tk3MJupPR_TKmmUB5tREtQ.roa
Signing time: Sun 26 Mar 2023 10:11:46 +0000
ROA not before: Sun 26 Mar 2023 10:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1d:67:12:b9:5d:4c:0f:73:10:98:0a:eb:74:87:f4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 10:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605142fad937309ba93d1fd32a6994079b5112d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b5:00:f9:fb:84:2c:b8:12:5d:6a:34:07:a1:
34:71:bd:60:02:d5:af:9b:7b:fc:f2:b6:ce:4e:96:
ed:7c:d7:13:f9:7d:a2:b0:2f:ae:2d:43:94:19:a8:
69:3c:ed:bb:00:cc:fa:5d:ef:0f:5a:87:23:73:73:
9d:26:0f:9f:b3:f0:ec:63:b6:e2:06:55:27:d9:2b:
a6:1c:d3:0e:ef:e5:29:c5:99:d8:bc:bd:ac:04:ae:
e5:f3:87:ef:9b:97:0f:4e:61:aa:8e:18:c7:82:87:
d0:18:5b:0b:f6:47:d1:45:25:ae:58:e1:20:b8:58:
18:74:3b:7b:aa:69:16:f6:96:31:d6:e7:8c:f5:8c:
52:51:98:dc:61:af:15:da:ae:c8:5d:41:7f:7d:a3:
38:56:c6:8e:a2:ce:fb:d1:5b:5b:3c:07:dc:d1:8f:
48:4c:7f:38:95:62:40:72:df:99:2d:2c:04:8d:8e:
05:9b:85:11:0f:bd:cf:0e:64:ed:92:70:f8:89:2f:
e2:01:25:90:76:1c:9d:be:0e:3c:ff:61:51:33:f1:
5b:84:8f:97:bd:e2:8c:f9:61:38:57:1c:4c:15:b2:
af:47:38:62:54:1f:c1:a2:f5:d5:fc:9b:ae:64:c4:
c4:1f:62:f0:9b:40:50:a7:da:3c:c9:87:e6:cb:67:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:51:42:FA:D9:37:30:9B:A9:3D:1F:D3:2A:69:94:07:9B:51:12:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YFFC-tk3MJupPR_TKmmUB5tREtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:9d:b4:ac:16:ea:ac:b5:44:8b:4c:94:50:03:03:41:45:b1:
5a:f0:81:de:62:28:56:29:c4:87:3a:f7:a3:a0:f3:90:dc:cc:
de:40:ea:fd:d4:20:af:52:ca:69:d7:65:25:8d:c0:73:59:b5:
ac:1b:9f:09:4e:b6:07:f1:dc:44:29:c0:64:d1:34:9f:07:6c:
34:4e:d2:65:9d:61:74:f1:3c:db:ef:c7:5a:ea:24:df:f5:8e:
44:91:e0:d2:a5:96:5e:87:1c:d4:6a:1a:cc:30:37:f1:26:42:
1b:79:54:c9:8b:e1:15:19:b9:a7:02:3f:5c:8e:fb:b1:1e:ec:
97:16:30:d1:d4:a4:44:8f:6c:26:f5:83:29:8a:e5:c6:22:d3:
b8:43:27:03:ee:5b:87:13:2d:af:18:b8:19:ca:05:70:e6:2d:
ed:b9:18:24:62:a1:e2:50:d7:b5:96:60:7d:49:cc:9e:a0:73:
3b:1e:57:b3:6d:1a:d4:e4:16:aa:17:3a:ea:56:de:38:fd:57:
3d:92:58:fb:f0:47:18:46:8b:1f:10:9b:37:ce:93:d8:b8:48:
a2:ec:b0:c4:5c:22:a7:0c:a5:2d:01:21:e1:3a:0c:c5:ff:10:
10:af:d1:91:32:99:93:9c:6e:e9:7b:d3:39:e1:dc:3e:3d:d5:
53:43:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:20 2025 by rpki-client