Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YGUQZhlzCrcKPYx-KudzBcrAKEI.roa
File: YGUQZhlzCrcKPYx-KudzBcrAKEI.roa (raw, json)
Hash identifier: XqVr8K+p64gqUurtyQFCzDUbgI7H17S4CE9jQW/fr88=
Subject key identifier: 60:65:10:66:19:73:0A:B7:0A:3D:8C:7E:2A:E7:73:05:CA:C0:28:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018801417ED6AF59A5781F2988CA5CCB6C89
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YGUQZhlzCrcKPYx-KudzBcrAKEI.roa
Signing time: Tue 09 May 2023 16:04:09 +0000
ROA not before: Tue 09 May 2023 16:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:141:735c/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:41:7e:d6:af:59:a5:78:1f:29:88:ca:5c:cb:6c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 16:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6065106619730ab70a3d8c7e2ae77305cac02842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:2d:b4:79:b0:cb:c0:9d:a7:b8:59:95:ae:
52:01:f2:83:c9:c5:fd:f4:47:16:96:cb:6f:b6:a6:
b4:a7:9d:fb:2b:35:a6:2c:36:89:b8:3e:32:6a:7c:
7b:ac:a7:a8:64:e3:ce:0f:58:c5:a8:9e:1f:c4:06:
c5:71:a9:35:f3:b8:dc:16:4c:43:a1:e2:1f:af:24:
24:a3:4b:8d:36:89:b3:30:0d:92:0e:3e:69:11:e9:
22:3d:5a:f6:48:25:e9:10:74:34:56:c6:b9:6a:98:
db:40:28:82:e9:6f:f1:e1:aa:1b:42:b0:82:05:66:
f1:e9:c5:d0:3d:85:c7:82:f3:22:f9:51:82:ce:03:
81:ac:fe:97:38:cc:5f:c0:83:cd:e0:89:2b:40:ec:
a8:ae:5c:41:c0:6c:82:ac:10:32:ca:5a:b0:8a:84:
f8:05:6a:7a:a0:58:f2:69:57:26:26:d2:91:92:43:
ce:28:8b:48:4d:fa:44:5d:8a:02:3c:16:c9:71:60:
bc:34:3b:07:dc:64:40:d9:92:ca:96:96:57:e9:e0:
1e:d3:7e:9d:ab:b0:b6:c7:1d:73:02:5c:1a:6d:ec:
71:fe:f5:f5:e0:8e:d2:a8:98:8e:6a:ff:e7:ab:5c:
31:d0:05:ff:70:df:f6:e8:b7:d0:88:18:f3:08:72:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:65:10:66:19:73:0A:B7:0A:3D:8C:7E:2A:E7:73:05:CA:C0:28:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YGUQZhlzCrcKPYx-KudzBcrAKEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:5a:d6:b1:2b:eb:9d:5f:e2:63:ce:14:98:4c:87:24:80:3c:
a6:59:d1:d5:f2:c8:9e:91:21:38:c6:e4:82:9c:ec:a0:59:97:
77:62:29:1d:7d:17:3a:a9:6c:5e:cd:81:d9:ff:68:d2:14:a2:
3e:db:5b:4a:d2:f6:b4:fd:b8:a5:a8:8f:6a:ff:1e:28:d8:0f:
3c:53:80:54:b8:b9:12:3a:9a:73:3c:5e:34:1f:ee:c9:e5:ff:
f1:13:f2:82:2f:da:db:80:c1:7e:40:79:4f:c9:ff:ec:72:58:
84:a1:c1:e5:99:e9:4a:51:3c:b4:0b:92:bd:39:8c:06:c4:ed:
f2:90:e4:3e:a6:43:c7:39:91:a4:2f:21:59:5a:e6:06:08:97:
67:d4:57:66:99:df:f9:bf:9a:16:14:e0:10:41:ed:42:11:e9:
e0:50:9d:37:7c:72:ef:da:dc:b3:95:ca:b8:5d:9a:bb:3b:0a:
1a:23:45:ef:7a:39:38:ff:b2:56:a7:36:41:d7:c2:1d:df:e8:
a5:d7:36:48:8c:e3:11:4a:a2:5d:5a:51:39:41:4c:ec:cb:8a:
57:42:b6:4a:4a:57:48:6f:c8:43:71:36:e9:a8:49:c7:30:45:
1d:99:1c:07:d4:f5:76:22:b8:37:a4:7f:ed:cf:8f:fe:32:b2:
21:16:cd:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgBQX7Wr1mleB8piMpcy2yJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA5MTYwNDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDY1MTA2NjE5NzMwYWI3MGEzZDhjN2UyYWU3NzMwNWNhYzAyODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihAttHmwy8Cdp7hZla5SAfKDycX9
9EcWlstvtqa0p537KzWmLDaJuD4yanx7rKeoZOPOD1jFqJ4fxAbFcak187jcFkxD
oeIfryQko0uNNomzMA2SDj5pEekiPVr2SCXpEHQ0Vsa5apjbQCiC6W/x4aobQrCC
BWbx6cXQPYXHgvMi+VGCzgOBrP6XOMxfwIPN4IkrQOyorlxBwGyCrBAyylqwioT4
BWp6oFjyaVcmJtKRkkPOKItITfpEXYoCPBbJcWC8NDsH3GRA2ZLKlpZX6eAe036d
q7C2xx1zAlwabexx/vX14I7SqJiOav/nq1wx0AX/cN/26LfQiBjzCHKeiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGBlEGYZcwq3Cj2MfirncwXKwChCMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWUdVUVpobHpDcmNLUFl4LUt1ZHpCY3JBS0VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHFa1rEr651f4mPOFJhM
hySAPKZZ0dXyyJ6RITjG5IKc7KBZl3diKR19FzqpbF7Ngdn/aNIUoj7bW0rS9rT9
uKWoj2r/HijYDzxTgFS4uRI6mnM8XjQf7snl//ET8oIv2tuAwX5AeU/J/+xyWISh
weWZ6UpRPLQLkr05jAbE7fKQ5D6mQ8c5kaQvIVla5gYIl2fUV2aZ3/m/mhYU4BBB
7UIR6eBQnTd8cu/a3LOVyrhdmrs7ChojRe96OTj/slanNkHXwh3f6KXXNkiM4xFK
ol1aUTlBTOzLildCtkpKV0hvyENxNumoSccwRR2ZHAfU9XYiuDekf+3Pj/4ysiEW
zdo=
-----END CERTIFICATE-----
Generated at Sat May 3 03:05:05 2025 by rpki-client