Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YLiV-EOMss43qdOg6uOgDYRcmho.roa
File: YLiV-EOMss43qdOg6uOgDYRcmho.roa (raw, json)
Hash identifier: PdJ96Cgq/7reOKouFnJjDOcaP1Obn6S/XJ3S0LAi1pw=
Subject key identifier: 60:B8:95:F8:43:8C:B2:CE:37:A9:D3:A0:EA:E3:A0:0D:84:5C:9A:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D5EC08BA3ED23563429BF31B8840A89D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YLiV-EOMss43qdOg6uOgDYRcmho.roa
Signing time: Sun 12 Mar 2023 13:04:21 +0000
ROA not before: Sun 12 Mar 2023 13:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:d5eb:ed35/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:ec:08:ba:3e:d2:35:63:42:9b:f3:1b:88:40:a8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 13:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60b895f8438cb2ce37a9d3a0eae3a00d845c9a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:a9:b9:8b:68:df:83:2d:f8:97:ac:bb:eb:
6a:d4:99:71:34:71:73:20:fb:b2:1b:a3:cb:5b:30:
ec:0a:75:0b:35:ab:f0:24:83:f6:23:ff:84:04:98:
21:21:15:d8:9e:5b:1a:f7:9d:45:59:5e:fb:fe:b8:
a6:90:e4:a7:b8:dc:0e:c7:4d:03:35:32:88:b8:12:
48:d8:6d:62:84:4e:a7:a7:9c:85:72:c1:2f:f4:d3:
e3:db:3c:29:db:49:13:71:37:c9:ef:76:66:ff:15:
80:3c:25:5a:dd:0a:b6:be:05:7b:42:4d:67:90:65:
aa:84:86:ba:ce:61:a1:d7:0f:1c:db:97:5c:0b:43:
e7:ea:e1:ac:b1:3c:b7:50:82:e1:7e:d5:77:c8:fe:
2c:e6:f0:b5:37:44:bb:94:50:22:cc:6e:54:96:77:
6d:f2:b5:16:9d:d9:6a:9d:c4:14:7e:d4:cf:a2:a3:
8b:80:bf:e9:0a:8d:d1:07:60:95:48:e3:66:d3:19:
5a:7c:2d:1b:5b:e6:84:95:4f:d1:db:e7:18:00:5c:
84:c8:e8:de:f4:4a:f8:b8:42:15:bf:fa:a9:25:33:
bf:57:18:c6:8c:b6:ed:64:62:ac:4d:58:ab:52:04:
ed:16:8b:50:fd:09:cf:bf:d4:94:f6:bb:af:d5:0c:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B8:95:F8:43:8C:B2:CE:37:A9:D3:A0:EA:E3:A0:0D:84:5C:9A:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YLiV-EOMss43qdOg6uOgDYRcmho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:0d:ce:92:78:c2:67:44:7d:9c:f6:1b:0b:bb:9f:90:b5:78:
14:9d:d1:e1:d5:29:9e:3c:5f:76:68:13:8d:ea:9c:7d:bd:6f:
32:ad:45:76:df:32:53:dd:de:19:d7:6e:a9:fd:42:17:2a:9b:
12:fe:fa:9c:e5:35:21:05:f5:81:9b:5c:6f:22:09:0b:c2:45:
aa:d6:1e:49:34:e8:ef:45:0d:2d:8f:92:ad:51:20:01:8a:79:
bb:6c:c6:0d:77:ec:a9:c8:43:37:00:b7:2e:11:ab:76:ed:ab:
44:5d:0d:7b:54:e4:bc:70:9f:28:d8:c4:5b:5b:e0:8a:d8:62:
7e:bf:52:68:c2:db:b7:fd:e1:f9:a9:d2:88:b8:63:14:62:d4:
39:41:4a:73:57:34:e6:ba:ab:7b:95:a4:90:f7:0a:2a:55:f3:
11:6f:57:7b:c1:8f:fc:5b:25:8c:a8:8b:d1:50:a6:7c:dd:77:
ce:82:a6:8e:f2:3a:3c:96:3f:4f:5d:d7:83:60:3e:01:01:04:
31:4f:57:41:2f:a7:8e:36:68:85:20:a9:cb:cb:f0:34:6f:66:
aa:79:d0:fe:7d:0b:85:57:44:3b:fe:d6:31:89:2c:97:ba:fd:
75:6a:ae:52:61:7c:67:2d:c9:6a:d7:8d:1f:86:a4:0d:aa:43:
68:3b:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:32:40 2025 by rpki-client