Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YMVV6Nr-q_l6Yts0MNZLscpNeoM.roa
File: YMVV6Nr-q_l6Yts0MNZLscpNeoM.roa (raw, json)
Hash identifier: jo9kJzkZyvWiq70CF6TMD64hOZzbahlWHnXyEhmOjkE=
Subject key identifier: 60:C5:55:E8:DA:FE:AB:F9:7A:62:DB:34:30:D6:4B:B1:CA:4D:7A:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1CFA00B92A0D48404DE6CA325293597A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YMVV6Nr-q_l6Yts0MNZLscpNeoM.roa
Signing time: Tue 22 Aug 2023 11:21:00 +0000
ROA not before: Tue 22 Aug 2023 11:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:fa:00:b9:2a:0d:48:40:4d:e6:ca:32:52:93:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 11:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60c555e8dafeabf97a62db3430d64bb1ca4d7a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3e:94:9e:c8:01:99:4e:cb:d4:81:10:0e:a3:
1f:55:c9:88:cb:15:00:ec:b8:36:15:06:8f:7e:27:
98:03:ed:a8:05:5a:67:f2:2a:e6:be:2f:9f:89:83:
72:48:90:73:be:73:6d:b3:d2:d0:cb:68:d9:2a:e8:
6e:39:80:3a:8e:ea:30:7a:07:e5:d0:69:47:15:bd:
98:cd:84:50:ce:68:3d:22:45:a0:6e:13:de:fe:3e:
28:c5:e2:86:1f:ac:1e:a5:5a:f7:4b:92:09:c8:53:
55:58:6e:fd:b7:e3:ef:51:bd:ee:87:26:8e:af:22:
92:df:77:15:09:72:f6:b6:a4:67:16:40:36:4e:97:
4e:df:e4:2f:03:70:1a:a4:ff:44:22:84:85:f3:77:
93:9f:1f:52:cc:b8:4d:ac:25:7a:b7:11:8c:82:73:
71:39:cd:cd:65:b0:e8:d2:02:76:12:7a:5b:16:f4:
18:4a:3d:94:ce:b2:b2:c2:96:c5:a7:99:8a:30:a4:
62:60:28:bc:25:6e:08:d9:60:58:8b:c3:92:41:27:
c7:3d:bc:0c:bf:f4:fa:25:07:ea:a7:a1:76:be:87:
f4:4b:ce:fd:6a:39:59:26:98:8c:ef:32:5d:84:7f:
a3:78:b6:cb:42:2a:24:f7:70:6d:d2:5a:33:f0:c9:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C5:55:E8:DA:FE:AB:F9:7A:62:DB:34:30:D6:4B:B1:CA:4D:7A:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YMVV6Nr-q_l6Yts0MNZLscpNeoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:ce:95:d2:9f:0b:ac:cf:e7:7c:f1:15:a5:4e:a4:3c:d5:38:
34:b0:d5:4d:b8:a8:8d:54:b1:ff:25:b9:01:18:e4:fe:d5:08:
75:28:58:7c:82:f8:47:01:c7:bd:16:cd:d5:2d:ab:4c:7e:f8:
dc:45:54:ab:99:81:6b:8b:65:24:cf:05:3e:ba:a7:1a:19:41:
1d:17:dc:4c:e8:ba:ee:b8:92:a9:c7:9c:e7:e7:3a:29:8f:d4:
63:16:c8:2f:08:a6:54:b2:bb:81:ac:17:9c:9b:2b:da:ca:7e:
10:1e:c9:8f:f5:94:3e:37:df:81:a1:de:dd:40:63:40:0e:ab:
a5:9b:20:bd:d4:16:48:a3:44:36:59:e1:6d:21:30:90:fa:d3:
2c:21:81:76:bb:d7:50:6b:d5:7b:60:49:16:b4:1c:ce:5c:e9:
fe:d3:27:f8:35:8c:5d:b6:a3:35:43:62:72:48:82:58:f1:25:
8a:d0:1a:8a:eb:03:17:74:d1:ce:c8:0f:92:05:5d:00:29:c8:
ce:de:5c:e4:12:f3:a3:ca:96:ac:c2:47:ea:30:49:6d:49:e9:
2a:4a:e3:7e:4f:7c:6f:9a:45:a0:93:c2:d3:b4:21:3b:a9:63:
0d:2e:50:29:58:21:ac:0b:12:e7:3c:a1:0f:38:9a:f7:95:20:
5d:e6:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:26:02 2025 by rpki-client