Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YFqEUb_4h1NeUrJzyM9Rfa1Rb74.roa
File: YFqEUb_4h1NeUrJzyM9Rfa1Rb74.roa (raw, json)
Hash identifier: gyTvqZ2dMDfJ00CAlMnIwTpYIct2ysp4Xm0wlnB0Igc=
Subject key identifier: 60:5A:84:51:BF:F8:87:53:5E:52:B2:73:C8:CF:51:7D:AD:51:6F:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 72FDA238
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YFqEUb_4h1NeUrJzyM9Rfa1Rb74.roa
Signing time: Wed 16 Mar 2022 10:10:33 +0000
ROA not before: Wed 16 Mar 2022 10:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929224760 (0x72fda238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 10:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=605a8451bff887535e52b273c8cf517dad516fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:7a:10:6f:04:e3:fe:2e:6b:ef:39:48:ff:
4e:d3:d2:ee:f3:08:0e:d3:5f:59:99:71:e2:b0:4b:
d8:63:a3:64:40:2c:b7:02:2f:ad:a4:ec:75:0a:87:
4f:0e:20:f5:37:a0:76:cb:25:c1:7f:ad:f8:d3:41:
c0:1c:ca:f9:c4:29:64:90:48:d5:35:9c:09:bd:5e:
4f:64:8b:02:52:57:26:82:ac:db:45:4a:4b:55:e6:
ed:3c:2d:8b:34:1d:fe:6a:c4:95:1c:91:21:52:ab:
b2:46:07:30:94:a9:c2:79:f1:ef:51:64:29:c6:db:
ad:ff:05:fb:03:2c:bf:d4:54:a3:37:c9:f3:3a:09:
5a:91:31:4a:72:e7:a9:21:5f:6a:ef:64:ef:d3:d8:
3a:de:9c:c7:b3:17:50:8b:19:ac:e5:68:f7:b2:d5:
87:f9:94:21:bd:96:38:c2:0f:a5:82:1e:11:d4:4b:
87:7d:11:0b:ff:11:bc:ee:80:f2:36:16:0e:c3:75:
e1:e7:cd:e5:b1:ae:2c:28:db:65:67:23:47:88:3e:
5f:be:16:9e:87:3e:04:83:8e:a8:fc:94:64:06:bc:
1a:3a:f1:19:0e:cc:82:0d:89:bf:5f:6e:9d:a2:3e:
46:77:2a:59:45:e0:4c:18:9e:d0:8c:d0:4f:de:e3:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:84:51:BF:F8:87:53:5E:52:B2:73:C8:CF:51:7D:AD:51:6F:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YFqEUb_4h1NeUrJzyM9Rfa1Rb74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:ef:af:13:80:8c:3d:f4:01:2c:9b:72:80:c5:6e:35:25:37:
39:26:15:dc:06:26:89:9e:6a:e1:f2:3b:f7:17:d7:5b:03:3f:
8a:a0:03:2d:63:53:f6:ad:9c:3f:26:fb:e4:3e:8f:cc:b4:83:
24:92:48:b8:d9:bf:92:10:32:65:da:7d:e6:96:07:eb:4d:62:
c1:44:45:a7:1a:2c:e6:e2:e6:db:e9:40:05:09:be:4e:29:55:
74:83:83:0b:5f:4a:90:81:dd:a5:fa:59:d3:70:99:e3:46:56:
47:8e:d2:fe:39:d2:d8:44:00:a5:75:0a:59:b3:5c:2b:7a:7a:
40:34:84:e4:63:1c:3e:e5:c0:8c:c0:b5:ae:05:9f:41:39:6f:
c6:8e:e5:b5:03:14:7f:a2:b1:9a:75:6c:bb:02:d0:bc:7c:d2:
2d:e3:61:ba:3a:4f:b3:42:7c:3a:cd:43:a2:50:b4:28:33:46:
d5:5b:24:75:93:c1:4f:6f:b0:21:28:4e:5f:3c:20:30:ca:55:
7c:fc:d0:85:63:bb:e3:fe:f6:fe:cf:c2:5d:cd:a6:d2:92:8b:
a4:9e:08:16:db:52:94:4b:d0:ce:f3:10:e4:2a:53:c3:c0:5f:
6f:b6:b3:b5:2e:d6:fd:6b:f9:e5:04:9b:02:16:c7:e0:ea:ed:
95:3c:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:11:45 2025 by rpki-client