Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YGfypBDwVFZOUeiS0n3sq5ET1cY.roa
File: YGfypBDwVFZOUeiS0n3sq5ET1cY.roa (raw, json)
Hash identifier: YSZu8xzli+ZQelEzllMKQ4aULdg6sC75ISqJz+soCnk=
Subject key identifier: 60:67:F2:A4:10:F0:54:56:4E:51:E8:92:D2:7D:EC:AB:91:13:D5:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878D351FB713AFDAEAC26DC95619ABBF04
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YGfypBDwVFZOUeiS0n3sq5ET1cY.roa
Signing time: Mon 17 Apr 2023 03:14:41 +0000
ROA not before: Mon 17 Apr 2023 03:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8d:35:1f:b7:13:af:da:ea:c2:6d:c9:56:19:ab:bf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 03:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6067f2a410f054564e51e892d27decab9113d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:ab:6c:28:f3:b6:de:b6:1b:24:b4:44:2a:
98:f5:f5:d8:d1:31:0e:cd:a5:1f:b0:ca:e9:97:7e:
45:37:b7:b3:70:95:3d:a3:8b:5d:25:09:4e:37:01:
99:89:96:58:e1:37:10:66:1e:03:bd:ec:51:6d:f2:
d7:e4:22:e6:d9:bd:75:37:ba:e0:66:dc:aa:2f:92:
a8:fc:e7:98:19:8e:2b:46:e9:5c:52:86:d1:c4:ac:
42:15:53:62:34:cc:e7:51:a8:50:7d:f1:de:10:8d:
51:e6:29:8a:1c:4b:0c:7c:a3:87:17:e7:8b:0c:29:
4c:12:2e:a7:ff:db:5a:8b:88:ea:36:81:59:4e:f9:
22:47:7d:cd:fd:8f:0b:e7:c9:38:78:37:fb:61:7d:
8e:8b:81:8c:68:a1:a0:ec:e7:d4:bb:3f:74:95:c2:
bd:2b:f9:92:90:56:bb:99:44:f3:b7:04:aa:4f:bd:
5d:47:3b:57:05:24:e2:98:25:c3:7f:6d:58:6c:82:
5d:8e:32:26:b1:50:9b:5f:91:b8:36:eb:b9:22:b3:
6d:ad:0e:b7:b8:77:ba:0d:88:b3:4d:57:1e:fe:28:
b6:b0:1b:49:38:a3:24:b1:f4:7c:aa:b2:7d:47:df:
c7:e1:c8:d2:0d:7b:e1:6f:b6:f2:85:bc:bc:f3:52:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:67:F2:A4:10:F0:54:56:4E:51:E8:92:D2:7D:EC:AB:91:13:D5:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YGfypBDwVFZOUeiS0n3sq5ET1cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:a2:2d:7b:fc:10:f7:de:45:c1:c1:7c:13:e0:bc:1f:62:2f:
1f:f9:27:57:8e:d9:e9:38:46:e2:20:81:fd:2c:ca:18:28:ae:
a8:27:5f:99:75:2b:1f:0b:79:a5:30:63:78:2a:29:66:9e:0a:
23:99:d8:4f:58:80:ff:63:e7:34:85:3d:e9:cd:03:99:70:bb:
c8:c0:a0:12:60:ba:ce:80:de:98:68:fb:64:71:21:5f:57:38:
92:fe:0a:e4:83:6d:2b:b1:67:5e:f9:f8:54:aa:b5:e9:b9:b4:
b9:12:12:da:c4:88:f2:c3:02:69:19:68:6f:3f:86:b7:8e:17:
48:4c:85:2b:60:97:77:6f:7f:90:74:af:e3:f2:af:b9:10:1a:
c9:db:e6:41:c3:ee:c8:22:ff:14:1a:b9:83:7d:a8:53:45:d4:
e3:3e:f0:c2:ca:58:6d:72:82:61:20:79:0a:a7:d5:77:6b:2e:
98:07:10:ba:2f:89:1c:b2:e1:44:41:71:21:e1:8e:97:09:24:
ad:d9:7e:cb:4d:9c:69:19:14:a5:23:0b:92:eb:1f:24:97:61:
59:57:d3:63:04:2f:2f:7f:31:22:6c:cf:e4:61:7b:86:0e:02:
41:45:b5:7f:82:0c:ed:56:b3:47:79:de:df:73:49:01:76:40:
71:0b:85:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:45:03 2025 by rpki-client