Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YF_Ng1chmu57_7QvbIkp6LG02mM.roa
File: YF_Ng1chmu57_7QvbIkp6LG02mM.roa (raw, json)
Hash identifier: 9qCc+gz5kahvXFDHAwhDG8VybBEwu0iAS9EhtlxAIr8=
Subject key identifier: 60:5F:CD:83:57:21:9A:EE:7B:FF:B4:2F:6C:89:29:E8:B1:B4:DA:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C3A7C31EC5462998210E47DB305C69A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YF_Ng1chmu57_7QvbIkp6LG02mM.roa
Signing time: Sat 05 Aug 2023 03:04:58 +0000
ROA not before: Sat 05 Aug 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:c3a7:5a78/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c3:a7:c3:1e:c5:46:29:98:21:0e:47:db:30:5c:69:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605fcd8357219aee7bffb42f6c8929e8b1b4da63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:77:56:6c:b2:18:69:be:9f:63:ab:f5:10:
cb:51:e9:d5:cf:fc:26:9b:15:a1:dc:90:2a:6b:79:
50:c7:58:3c:70:aa:9f:f0:93:c2:36:b9:50:89:3f:
80:70:40:9f:d1:74:fe:76:e1:7d:43:50:f2:55:5e:
71:f1:c6:2c:45:1e:47:ad:87:01:3b:93:71:d0:1d:
38:58:54:46:23:ab:12:59:13:c8:3c:4e:d6:49:da:
08:a3:85:9b:d6:07:f6:88:8c:37:d1:3b:77:b7:34:
73:1f:88:6a:17:75:0f:9a:ac:ec:05:95:bc:9d:16:
b7:3a:cb:03:7e:15:dc:6e:89:93:c2:57:70:a8:82:
6f:f0:1c:fe:04:7d:3b:02:39:0e:59:fc:1f:d4:ed:
65:5f:57:31:f4:f1:16:45:19:e4:37:a2:83:6c:9c:
b3:91:22:6a:b9:41:84:92:0c:47:11:ed:b8:39:2b:
9d:65:e0:46:1c:fb:b4:36:63:73:7c:57:bd:42:08:
fd:0b:53:3b:f1:15:86:5e:78:cd:3e:a8:d1:71:91:
c7:e2:3e:8e:18:5d:89:e4:3a:d4:ae:97:f5:ed:67:
5e:0a:3d:61:d3:21:a8:37:6c:66:90:cb:c5:71:c7:
38:73:00:88:b3:0c:4b:c4:9a:31:87:ff:d0:e6:e7:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:CD:83:57:21:9A:EE:7B:FF:B4:2F:6C:89:29:E8:B1:B4:DA:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YF_Ng1chmu57_7QvbIkp6LG02mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:18:0f:6b:33:e7:74:a4:1d:02:23:e9:4e:06:f0:68:21:e0:
fd:52:bd:96:36:dd:c5:2e:07:bb:a0:3d:19:d1:4b:3e:5e:1d:
31:a8:2f:8d:81:f2:1c:2a:4d:09:77:5c:12:5a:90:3b:b8:a4:
ba:3f:35:3d:c5:29:c9:51:7c:f5:a9:43:9f:c5:bc:3f:a9:07:
25:87:b6:05:a5:46:d7:15:52:96:84:90:46:48:52:f0:1d:69:
f9:7e:6a:71:3c:a2:26:1a:ff:83:0c:6d:91:5c:6d:49:53:a6:
76:78:23:65:12:a0:8a:3b:f9:29:3a:17:a3:2f:21:e9:80:e3:
13:ef:03:f6:42:a0:17:ef:0a:6d:66:ab:e6:2f:b0:28:e8:fc:
49:21:5c:ab:0c:dc:04:2b:61:06:99:95:42:c7:29:39:fb:95:
54:40:f9:ac:fe:cd:31:9a:81:78:1e:8a:3a:90:ea:aa:19:1c:
e3:de:6d:df:ee:e2:a5:dc:7f:99:a6:6a:ec:4a:b0:ac:d5:dd:
81:7b:7e:60:77:22:f4:f1:d6:cb:3c:54:d9:b7:e8:93:09:89:
91:9d:08:01:d8:79:4f:d8:2f:a8:3e:82:3d:5d:5a:68:8a:b4:
44:dc:1c:a6:24:58:9b:4c:14:50:fa:80:35:4c:b6:96:07:77:
93:e5:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:57:45 2025 by rpki-client