Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YGmDxvmdJd7m8GO3yS-0FU4AO4E.roa
File: YGmDxvmdJd7m8GO3yS-0FU4AO4E.roa (raw, json)
Hash identifier: lOi6aDNXH1b5mY5u3qYAQhY0tDL2ZwkFxRcjGoME9yg=
Subject key identifier: 60:69:83:C6:F9:9D:25:DE:E6:F0:63:B7:C9:2F:B4:15:4E:00:3B:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B1394A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YGmDxvmdJd7m8GO3yS-0FU4AO4E.roa
Signing time: Wed 16 Feb 2022 10:14:40 +0000
ROA not before: Wed 16 Feb 2022 10:14:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1796445351 (0x6b1394a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 10:14:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=606983c6f99d25dee6f063b7c92fb4154e003b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:df:9e:b7:6a:e2:b5:33:4b:2f:16:c9:32:
c8:67:e5:d9:df:eb:c7:a9:9b:50:f7:f2:cb:6f:72:
5d:f7:a2:96:9b:f5:39:c1:e0:f2:60:1e:29:02:72:
23:cf:48:a2:51:88:22:24:9f:bd:46:cf:49:d9:9d:
1b:ad:09:d7:7b:fd:bc:c4:b1:6a:c5:ec:06:73:78:
7d:a1:57:28:82:a5:91:6f:55:81:ea:67:fa:4a:f0:
bd:3d:7e:70:d5:87:12:80:f7:ae:bf:51:3d:f1:65:
60:32:f1:e8:dc:45:aa:7a:18:21:e9:08:28:b6:b4:
1c:7e:05:42:86:03:43:8e:a5:71:ce:82:1e:6b:a1:
2d:e1:ad:b8:fa:f7:6a:03:b3:5b:fa:af:1e:37:dd:
22:3e:24:84:e1:7f:8b:e2:e6:6d:11:e9:0d:27:71:
28:84:80:31:c8:72:47:61:46:fe:b9:cf:60:87:06:
1b:71:f9:ff:ae:f1:c3:f2:25:fc:e3:ae:d6:96:14:
6c:7b:a8:8d:5b:8a:9d:1a:ab:42:e7:40:c7:c4:fd:
05:7f:07:23:f7:23:d4:1a:53:4e:47:11:9d:00:05:
8c:0f:cd:af:2c:fa:9a:48:e6:31:47:99:20:8f:0c:
9a:f2:38:05:07:bc:8e:1b:6c:bb:b4:a5:1d:e6:61:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:83:C6:F9:9D:25:DE:E6:F0:63:B7:C9:2F:B4:15:4E:00:3B:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YGmDxvmdJd7m8GO3yS-0FU4AO4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:7a:c8:b8:9d:96:58:0d:fa:2c:65:67:b9:2d:76:2b:b3:9e:
67:bb:36:59:74:8e:0e:b5:b5:57:91:2e:f0:4d:8c:c3:25:9e:
98:42:0c:ce:bc:b4:52:16:2e:83:9f:8e:e1:3c:43:e8:12:6f:
8e:b5:c8:37:42:a0:1a:8f:3b:c0:7d:fb:2b:bc:f9:3e:bd:2d:
c5:a8:3d:51:bc:11:76:0b:89:e7:3c:40:c2:6f:94:bb:35:09:
50:8d:00:f2:f3:b1:24:50:aa:91:75:e5:c4:c9:93:86:73:73:
04:60:37:a4:27:e5:0d:fc:b2:22:02:15:75:ee:a8:22:12:08:
83:b5:4a:d6:be:c9:f7:0c:6a:20:7a:e0:60:9c:5b:fd:a7:34:
cd:d4:34:93:04:d4:95:58:bf:ff:5f:72:60:a2:69:19:2a:73:
d9:26:a4:13:e8:cf:50:9c:a2:c3:ee:3e:93:d1:54:24:af:25:
c2:a3:d6:29:aa:df:9e:db:f4:42:5a:0e:a6:78:84:0d:27:5c:
33:e4:2b:f4:a3:78:40:38:19:31:23:81:5f:6f:4f:08:9f:ad:
b5:27:b4:bd:4e:b0:51:e2:77:57:51:f6:f3:cd:b1:d5:96:60:
44:13:a6:11:dc:f4:fb:cd:b1:0b:cc:32:45:47:63:f1:bb:9f:
0f:06:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:14:11 2025 by rpki-client