Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YJndBYkrGLyXqBT4neT6BHf77yQ.roa
File: YJndBYkrGLyXqBT4neT6BHf77yQ.roa (raw, json)
Hash identifier: qwKBgzV3lBfdF/AGv5TbJcZvPGEAQmTHjwPyVBi3XJY=
Subject key identifier: 60:99:DD:05:89:2B:18:BC:97:A8:14:F8:9D:E4:FA:04:77:FB:EF:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C6F29A388DC89D769412E00A436E379F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YJndBYkrGLyXqBT4neT6BHf77yQ.roa
Signing time: Thu 09 Mar 2023 15:17:13 +0000
ROA not before: Thu 09 Mar 2023 15:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:f2:9a:38:8d:c8:9d:76:94:12:e0:0a:43:6e:37:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 15:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6099dd05892b18bc97a814f89de4fa0477fbef24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c8:b5:2c:78:cf:3b:8b:6f:ab:67:95:25:78:
4d:6d:73:38:f5:4f:b8:8c:7d:ec:64:4c:8d:c6:b2:
11:fa:3a:80:95:fe:ab:e0:1b:bd:d6:d9:cc:ff:ab:
76:04:88:1a:6e:ce:41:61:2d:b2:e2:d0:90:60:7c:
44:12:05:62:ff:f0:82:c5:93:50:08:5a:e0:31:71:
fa:83:0e:a7:6b:87:ea:90:e0:6e:5b:2c:64:19:c1:
bf:3e:3a:53:5c:97:94:d9:8f:20:e9:34:e4:25:6b:
0a:77:4f:a1:c9:e8:38:4e:03:76:ae:0f:8f:e0:c8:
64:a2:ef:e3:15:a9:14:2c:5f:f8:eb:20:c7:b1:7a:
47:6c:79:22:e2:40:f8:86:a6:a5:d6:05:66:5a:0f:
af:80:c4:e2:b1:bc:ab:2a:c2:74:6f:77:03:82:dd:
73:03:62:92:ec:8b:a8:ae:ca:ab:ee:5e:8c:58:d5:
de:9d:f5:d7:f0:9d:09:f8:bc:eb:45:d3:39:7b:e3:
c0:70:56:15:bd:56:b4:6e:f1:e9:de:e4:6a:b5:d5:
4e:bb:48:44:76:d5:48:86:9f:49:ba:ec:8f:84:72:
ed:60:4b:13:ce:ca:97:29:f6:bb:71:0f:41:09:da:
52:66:48:d3:37:58:b6:11:49:d4:91:01:9f:c4:54:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:99:DD:05:89:2B:18:BC:97:A8:14:F8:9D:E4:FA:04:77:FB:EF:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YJndBYkrGLyXqBT4neT6BHf77yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:76:ed:da:a2:94:f4:0f:8c:1f:73:d6:40:a9:e2:65:1a:8b:
4b:e0:1d:c2:39:31:ca:83:5d:13:44:70:da:fa:32:57:f9:ea:
83:4a:77:22:be:e3:bd:5c:00:5f:42:0d:ac:59:07:6b:ef:e7:
8c:aa:31:1d:f9:6d:87:bc:75:0b:7f:45:83:d7:3a:a7:f9:c4:
11:bb:86:ec:4a:8e:6e:2d:fc:33:82:8b:2f:57:59:37:10:b8:
47:2e:4b:73:a8:15:fa:1a:ba:b4:d4:f2:9d:fc:a5:55:77:3b:
16:f6:97:44:83:f4:04:5e:20:27:10:25:7b:58:59:6e:68:f0:
cb:69:fd:ba:6c:5a:75:53:eb:5f:18:48:94:ae:4d:4f:f9:d8:
37:7b:ad:b8:90:9b:94:89:44:b1:0a:b3:9e:4f:7a:4d:e6:5a:
04:65:da:45:e5:01:d7:3c:4b:13:34:72:4b:45:b5:29:65:1c:
38:f3:5c:90:49:64:17:9b:3e:be:8e:ca:ec:3c:90:27:f6:e6:
14:a3:01:b4:30:94:5d:7b:df:7c:a0:bf:c5:ca:5f:30:a2:a7:
d8:79:a8:30:24:cf:86:1c:ea:d1:63:c3:07:e5:66:f4:33:80:
d3:9d:10:1d:66:fb:a9:a0:8e:72:a8:d3:f0:a6:47:8a:7d:94:
84:b8:9d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:28 2025 by rpki-client