Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YK5gJKizlYfFyFSCZQWcGmnbMKk.roa
File: YK5gJKizlYfFyFSCZQWcGmnbMKk.roa (raw, json)
Hash identifier: wRxnfIcnlrkm5P+nQvkEE1Qh0Yx/os8/8wvRjIjWUP0=
Subject key identifier: 60:AE:60:24:A8:B3:95:87:C5:C8:54:82:65:05:9C:1A:69:DB:30:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01824A19D5648D20A7A39ECEE6D2990716F4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YK5gJKizlYfFyFSCZQWcGmnbMKk.roa
Signing time: Fri 29 Jul 2022 13:16:23 +0000
ROA not before: Fri 29 Jul 2022 13:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:19:d5:64:8d:20:a7:a3:9e:ce:e6:d2:99:07:16:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 13:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60ae6024a8b39587c5c8548265059c1a69db30a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:f8:8f:da:06:64:ee:5e:12:3b:84:73:e9:
5c:36:54:ba:c1:ac:af:18:94:5c:49:c0:55:88:2e:
93:9a:c9:22:e0:42:70:ee:eb:e8:44:69:16:c6:14:
da:61:be:c9:40:0e:1a:8e:66:91:80:11:80:54:41:
25:ec:33:53:ad:59:5b:c8:1e:90:06:cf:26:79:6f:
64:9a:86:65:5e:17:36:08:ca:97:67:86:0c:e4:19:
bd:08:6e:8d:2f:8f:e9:86:6f:95:10:66:c1:1f:66:
0a:f9:2d:0a:37:2c:bb:7a:2c:48:71:cc:e8:6c:89:
5b:f9:c5:2c:21:70:55:c2:36:12:38:0a:1a:01:2f:
c0:f1:e5:31:de:03:c5:61:e3:0b:e5:e0:7d:57:d2:
03:6f:07:11:43:30:ed:46:96:1d:95:e6:74:25:d9:
f0:ea:ea:17:da:9a:b7:37:36:d3:3e:c1:40:e2:d2:
a1:bb:c3:0a:c3:be:7d:c5:cb:7f:d1:f1:45:e3:6d:
f9:ee:3c:40:b1:4d:c9:f4:a7:3c:bd:2c:33:63:86:
7f:da:2e:42:d9:d5:ad:fc:6f:c3:4a:73:91:1f:bc:
f3:9d:50:20:85:d9:cf:59:7f:ab:3b:e1:2e:40:9a:
00:6c:7c:23:cd:4c:89:4d:21:ce:65:36:4d:c1:1f:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:60:24:A8:B3:95:87:C5:C8:54:82:65:05:9C:1A:69:DB:30:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YK5gJKizlYfFyFSCZQWcGmnbMKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:3d:a9:e8:b1:8c:72:62:e1:18:2a:da:03:13:6b:ad:63:96:
5b:71:5e:fc:68:af:05:ce:89:7b:23:3e:c4:66:85:eb:9f:16:
4d:9a:3d:82:63:b5:3e:05:13:9f:d8:7c:43:c6:eb:32:ba:34:
61:34:cf:01:22:29:c9:12:86:7f:1a:2e:85:84:8d:4a:11:8a:
4d:c2:e9:68:fd:90:26:3e:b1:8e:9a:5a:a9:80:7b:80:38:34:
bd:f4:1d:ac:ba:2e:a1:7f:bb:61:da:35:3a:7f:a2:2b:28:46:
34:73:be:9e:82:40:e1:1e:98:89:d1:14:55:a1:01:47:b9:64:
30:3e:0a:e6:e7:3d:2f:dc:f3:5d:37:b7:4f:9c:26:b4:6e:19:
a8:7d:fa:10:71:b4:e0:eb:5d:05:05:2a:e1:bd:d3:dd:b2:93:
c6:dd:88:ec:29:f9:b3:c1:e5:f2:4b:ac:30:86:d0:0e:f8:a4:
34:36:f7:34:b5:3a:de:96:85:00:7b:6b:1e:4d:d1:05:f7:4a:
7f:92:c7:5e:d9:1a:6f:93:22:5b:00:d8:8b:99:6f:7b:01:05:
29:42:5e:b4:77:2e:e5:20:3b:15:e2:05:67:10:ee:4c:f7:0d:
ef:5f:73:ef:db:9c:42:c3:6b:f5:83:1a:43:04:46:e1:12:3f:
35:ef:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:56:02 2025 by rpki-client