Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YOY4X5LWXhg5ED1VmMviGztfoWA.roa
File: YOY4X5LWXhg5ED1VmMviGztfoWA.roa (raw, json)
Hash identifier: 94qqUg6lYkA971NZ0InlKMKG0C1yGlH2BBR6vTtTTcI=
Subject key identifier: 60:E6:38:5F:92:D6:5E:18:39:10:3D:55:98:CB:E2:1B:3B:5F:A1:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BE8164595A104052B435D2B49C72B32E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YOY4X5LWXhg5ED1VmMviGztfoWA.roa
Signing time: Fri 04 Aug 2023 03:04:58 +0000
ROA not before: Fri 04 Aug 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:be81:1c53/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:be:81:64:59:5a:10:40:52:b4:35:d2:b4:9c:72:b3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60e6385f92d65e1839103d5598cbe21b3b5fa160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:f1:ce:ba:b4:c0:a2:bd:ef:5d:a2:cd:74:
81:85:9f:45:a4:45:6e:6b:80:0c:e7:11:e4:79:3e:
3e:90:25:36:e3:76:05:9b:96:73:73:42:98:1c:c0:
07:29:a7:e4:02:56:8c:37:5b:08:1d:57:da:1f:55:
f4:c9:c4:26:e5:e3:21:dc:c0:53:73:91:af:1e:46:
30:3e:43:43:5d:a3:8a:a2:0f:6d:3d:83:b7:1b:27:
81:37:f3:94:2d:4c:c5:19:87:15:0e:23:0f:6a:6f:
5e:07:af:27:12:04:94:19:c6:c5:a6:e1:12:1f:b9:
78:95:60:19:82:38:1f:c9:1a:08:13:e5:bb:0a:f9:
94:22:42:ed:b2:71:a0:31:2e:39:a2:c8:4c:28:ab:
c9:9d:b1:33:bf:cd:83:bb:83:fe:ff:14:f2:5f:4a:
ef:97:9e:3f:14:31:aa:80:1c:8c:43:25:82:41:79:
6f:db:5e:70:28:f7:89:67:85:00:32:ea:db:09:78:
88:d1:ec:3b:1d:92:0a:f7:73:dd:f1:52:25:de:c8:
3d:df:b7:4f:23:e1:a3:44:ee:53:8b:6a:b1:80:20:
6b:ad:5b:7c:67:08:05:3a:7c:45:51:12:5d:46:8b:
e8:8f:e9:8f:af:e8:e3:c2:d7:45:67:f1:42:a3:72:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E6:38:5F:92:D6:5E:18:39:10:3D:55:98:CB:E2:1B:3B:5F:A1:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YOY4X5LWXhg5ED1VmMviGztfoWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:99:d9:cf:c2:e1:e5:1c:59:af:a2:b0:3a:d1:6c:ee:71:2d:
85:16:a3:67:89:cb:39:d4:95:82:d5:2f:78:ba:bd:2d:ab:70:
53:e2:36:42:48:2c:fc:40:a1:44:13:f3:0c:c5:6f:d7:ae:79:
fc:59:06:15:5f:76:5b:02:aa:1e:3b:70:79:5b:6f:1b:38:7a:
58:d3:d1:a3:da:ff:8f:77:05:dd:97:b7:9f:01:d9:35:80:95:
89:26:f7:8d:a9:66:7b:de:f9:28:ee:76:69:8c:ba:21:76:9b:
5f:6b:db:dd:e4:87:16:de:b2:06:aa:23:fb:46:38:3e:2e:13:
5f:4f:4c:cf:9d:71:a8:86:b7:32:9c:e9:ec:fd:ef:18:0a:9a:
82:d0:0a:32:34:e1:a4:bf:c4:36:0a:21:de:92:39:65:e5:0c:
59:d4:93:de:d6:a7:15:ce:21:84:e4:ad:c5:45:21:bd:9d:81:
a1:6b:ab:67:20:a6:a7:50:04:d7:03:a8:72:93:d9:39:41:8a:
49:01:da:88:6e:1b:f7:59:c2:e3:e1:37:a5:95:a1:ac:49:be:
99:ef:c1:6d:cb:ea:2f:c7:af:88:8d:d5:41:a9:6a:c7:6b:27:
8d:3d:21:2e:a8:43:44:c8:2b:a2:53:0f:0f:3a:f7:9f:1c:a9:
4c:ac:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:53:35 2025 by rpki-client