Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YOWPANwQryVXlGM7P5_z53LN1LY.roa
File: YOWPANwQryVXlGM7P5_z53LN1LY.roa (raw, json)
Hash identifier: d8+8rRTtNnBWMFe4GHe5SsrlbWTVsDb0ADV6evGb9rQ=
Subject key identifier: 60:E5:8F:00:DC:10:AF:25:57:94:63:3B:3F:9F:F3:E7:72:CD:D4:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68DB1D06
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YOWPANwQryVXlGM7P5_z53LN1LY.roa
Signing time: Tue 08 Feb 2022 07:04:45 +0000
ROA not before: Tue 08 Feb 2022 07:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759190278 (0x68db1d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 07:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60e58f00dc10af255794633b3f9ff3e772cdd4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:88:36:dc:93:4b:30:30:8d:82:0d:e1:98:
0d:90:ac:0e:66:47:b0:20:ae:0e:a4:c5:f6:e5:cc:
72:2c:33:ae:b4:7d:08:a0:0a:29:89:b4:49:be:ae:
ef:78:9a:4a:ae:60:08:ae:06:6e:fd:2c:65:8f:1a:
f8:11:06:66:ee:18:14:67:5c:62:53:de:3f:48:23:
57:06:8f:33:25:0e:eb:7c:08:ff:ce:e2:9f:3a:0e:
0c:69:c0:df:37:9f:c8:87:38:37:f0:60:50:63:ad:
02:60:85:4f:da:81:34:89:10:f6:39:c1:a2:f5:ce:
00:5a:72:30:f5:18:bd:06:d3:09:a9:57:df:ea:f3:
9c:e0:42:1c:23:78:e6:96:ca:e9:7b:ff:47:be:6b:
5c:26:82:83:a8:1a:fe:62:9b:2d:b6:69:34:33:99:
24:f3:f4:72:ac:b6:e5:4a:e9:5c:9e:80:a7:be:5a:
28:74:76:4b:af:96:01:93:87:96:47:57:61:d1:5e:
58:a0:f8:18:90:c6:b6:b2:a9:82:7a:72:73:33:e9:
00:e3:a2:73:0f:75:87:89:3c:e2:99:23:a9:de:80:
2e:ca:0b:b2:74:81:48:b5:dd:97:13:9b:c3:1d:d0:
13:c1:3c:1b:80:4d:e7:e1:ae:41:6c:5f:51:0b:01:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E5:8F:00:DC:10:AF:25:57:94:63:3B:3F:9F:F3:E7:72:CD:D4:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YOWPANwQryVXlGM7P5_z53LN1LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:db:ff:93:91:6d:de:ae:d5:7d:d5:4a:01:90:8a:1b:6b:0d:
83:83:00:25:1b:62:3e:8f:aa:d8:67:c1:5c:b5:be:7c:68:dc:
29:d2:3a:ed:7b:ca:ea:d4:09:11:88:d8:6b:a1:63:2e:ba:42:
17:1c:4b:66:f9:3a:1b:1c:88:55:f2:e2:56:27:22:97:0b:45:
16:18:b2:62:bd:c5:18:a2:0a:c3:14:83:dd:26:44:7f:3a:37:
ce:04:c7:d0:ee:da:5b:7b:a7:9f:e4:08:21:36:e2:89:09:87:
cd:08:32:0a:06:1c:7e:c9:cf:82:1f:b4:70:09:a8:0e:c5:86:
34:14:d8:23:2a:27:07:de:bf:4e:c7:6f:8e:d2:95:04:95:24:
7c:fa:58:03:17:19:f3:17:0c:8a:a3:6d:b5:58:b9:14:c8:0d:
75:b8:23:32:ab:1a:b5:91:74:0c:31:9b:8f:2d:0e:38:63:8d:
4b:23:88:44:d6:29:da:b5:9a:1f:e3:c8:0b:2e:62:f4:13:b2:
cf:a2:4d:b6:e8:1c:24:f6:7e:f5:8f:85:06:90:2b:74:46:61:
61:4f:60:6a:6e:71:3d:b1:61:db:2c:6c:78:14:e2:f1:b2:a4:
83:e2:89:ef:7d:b8:ad:50:4f:65:db:26:85:50:a3:45:fe:b0:
f4:1c:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:46:33 2025 by rpki-client