Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YKDAL042tFendHzXzF_hrgJ9X_A.roa
File: YKDAL042tFendHzXzF_hrgJ9X_A.roa (raw, json)
Hash identifier: GlC4+0n8Y1g+0WOqUETJiXquFGwtzitlqa3tyc6scEo=
Subject key identifier: 60:A0:C0:2F:4E:36:B4:57:A7:74:7C:D7:CC:5F:E1:AE:02:7D:5F:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187259025E9DAB71FD3B7524D993F49912D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YKDAL042tFendHzXzF_hrgJ9X_A.roa
Signing time: Tue 28 Mar 2023 00:13:36 +0000
ROA not before: Tue 28 Mar 2023 00:13:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:25:90:25:e9:da:b7:1f:d3:b7:52:4d:99:3f:49:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 00:13:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60a0c02f4e36b457a7747cd7cc5fe1ae027d5ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:bb:22:fd:62:56:09:4b:96:29:08:10:91:
7e:a1:31:bb:8b:89:db:3a:c2:f9:86:cc:a5:ae:7d:
5b:a0:f6:61:eb:2e:06:30:07:5d:1d:b5:88:ff:d9:
95:aa:43:67:b2:27:48:46:a0:02:46:33:f2:5f:2d:
1a:ca:e0:c2:5e:01:30:64:62:b7:a4:42:8f:f4:0b:
aa:3b:92:cd:23:93:9c:8f:86:25:44:c1:14:14:72:
43:69:de:a5:19:8d:8f:72:f6:ae:6c:08:73:b9:2e:
ce:de:fb:50:17:81:8b:3d:54:08:78:4c:56:e0:2f:
ec:c3:e7:5c:8f:bc:33:01:64:1f:86:2f:7e:6f:32:
0f:ff:2b:cc:77:ba:39:08:93:1f:67:e0:fc:7c:05:
d9:79:3e:ff:42:15:3f:c5:95:0c:e6:02:00:63:c6:
c6:08:76:ad:0b:23:b8:c6:ef:03:84:db:b6:58:58:
df:39:cb:30:db:7f:f3:7c:37:7e:8a:da:aa:f3:4c:
81:53:ed:57:d4:39:97:6f:84:71:1a:ab:49:09:21:
1a:ce:88:15:81:0a:45:18:c1:97:7a:41:03:ef:ba:
5c:f2:39:53:55:48:b7:56:c8:46:01:6d:c5:a9:da:
e8:6a:2d:91:c3:4a:2c:db:90:42:de:d8:dd:ea:4c:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:C0:2F:4E:36:B4:57:A7:74:7C:D7:CC:5F:E1:AE:02:7D:5F:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YKDAL042tFendHzXzF_hrgJ9X_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:16:26:38:7f:52:9f:ab:53:f2:21:4c:6c:ee:f8:4f:0a:ea:
4d:e3:35:0b:8a:21:47:5c:93:ac:63:8c:7b:70:62:79:51:0a:
4b:db:a1:49:c0:b4:74:a4:9d:e4:87:e1:ce:2f:07:39:a7:96:
52:63:ad:ba:b7:79:68:2a:4b:70:36:96:98:9a:2d:60:a8:e2:
d1:04:6e:1e:c6:d9:90:09:2a:03:4c:f5:c9:14:7c:7e:f8:32:
b8:3f:3f:91:b4:31:e2:10:4e:0e:93:bf:45:51:23:9c:6f:a0:
2d:16:9d:22:4d:7c:b4:b3:b6:31:77:cb:4f:4c:79:a3:9e:cb:
42:29:a9:f3:26:c6:f6:a5:41:a3:07:8b:7c:00:b1:9d:32:4b:
91:fe:eb:50:80:f9:98:d8:39:88:fa:6d:ca:42:de:e3:20:ba:
e5:4f:11:56:c4:99:21:9f:2e:50:36:19:5e:d7:ed:b9:04:bd:
61:b2:1a:cb:a3:83:f6:d4:66:5e:07:7f:49:df:40:c1:b8:0f:
8c:62:3a:6d:6e:f8:59:68:68:dd:d1:a6:dd:04:59:b1:f2:af:
d9:da:be:47:dd:52:20:6c:66:66:bc:2a:2c:16:ba:d2:ce:0c:
cc:7d:9d:ca:1b:34:f9:cb:47:4c:ce:00:a9:9b:46:8d:0e:b9:
42:87:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:10:03 2025 by rpki-client