Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YOcBFDkLPxBekcEBCrk00uu5EdY.roa
File: YOcBFDkLPxBekcEBCrk00uu5EdY.roa (raw, json)
Hash identifier: O487k++R/5HZpV4wa2DgzKDFp1NoWtEhKfJXPI08nDM=
Subject key identifier: 60:E7:01:14:39:0B:3F:10:5E:91:C1:01:0A:B9:34:D2:EB:B9:11:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DEB5B5F70BD8B3D67741E1271ED1EB9E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YOcBFDkLPxBekcEBCrk00uu5EdY.roa
Signing time: Tue 02 May 2023 23:04:23 +0000
ROA not before: Tue 02 May 2023 23:04:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:deb5:8365/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:de:b5:b5:f7:0b:d8:b3:d6:77:41:e1:27:1e:d1:eb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 23:04:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60e70114390b3f105e91c1010ab934d2ebb911d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:d9:d7:8f:15:cc:75:d1:a5:39:8b:75:f4:
f1:a6:40:6b:87:13:f3:8b:5b:e9:d1:73:67:4e:37:
35:cc:3b:0d:bb:98:41:c2:a6:4d:58:80:38:18:7b:
81:b7:46:14:e3:69:22:54:86:95:ff:a3:69:29:a9:
c2:4a:c4:d3:00:f5:7e:3d:a0:a0:2c:f9:c1:a2:a1:
2a:e7:1c:70:45:49:54:c0:7a:ec:f0:24:7a:51:22:
76:7c:db:3c:c0:2d:1c:c2:ff:d4:07:01:82:0f:89:
e5:7f:30:94:07:7e:fa:15:c2:77:29:dc:31:2c:5f:
ec:22:34:ec:73:5d:3f:1e:f0:b9:31:01:0a:6e:69:
69:a7:93:82:8a:ea:06:4f:8e:19:a9:18:f0:f2:24:
61:56:1b:c3:3a:e4:32:8d:12:e7:d4:5d:4a:38:43:
c1:43:64:42:a2:09:0c:09:00:5e:46:49:63:54:d2:
5d:29:b4:85:6e:db:76:98:fa:b8:e2:c5:f2:98:90:
ff:30:fa:0e:86:93:41:3a:7c:b6:c6:a6:4f:bf:c2:
9d:85:a9:c4:58:12:06:d0:e7:e2:e3:66:21:32:a2:
56:8f:e7:eb:6e:3c:51:df:b9:53:fe:f1:1c:68:01:
26:53:11:43:82:f5:6a:43:30:0c:7f:34:31:0e:00:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:01:14:39:0B:3F:10:5E:91:C1:01:0A:B9:34:D2:EB:B9:11:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YOcBFDkLPxBekcEBCrk00uu5EdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:c0:37:66:ab:d7:ed:d3:0e:ef:f7:90:4b:69:63:30:c1:3c:
0d:b2:47:fd:e6:8e:cf:3b:c8:53:bb:aa:2a:20:c0:4c:cd:af:
15:e3:cc:3b:34:22:65:d7:af:57:b8:44:3e:41:67:f6:38:66:
dc:8a:73:d9:21:55:fe:e6:8f:3a:3e:ef:07:38:2e:09:7d:60:
39:0d:8c:49:1d:66:6b:79:dd:31:99:d1:89:72:de:f6:96:44:
e3:dc:43:eb:31:75:0a:9d:75:7e:a0:2b:4e:48:e1:25:4a:09:
90:4e:aa:4c:82:28:dc:db:29:9c:e7:32:4f:b9:ca:40:66:fe:
b9:c4:e9:79:4f:ff:69:52:6d:b9:ff:db:54:d5:53:af:b3:03:
b4:eb:a6:68:98:bb:d7:56:c5:a6:0b:2b:d2:ae:08:49:61:0e:
70:99:63:d7:4b:d6:ec:16:c1:62:e5:ea:65:41:dc:4d:2e:4a:
96:17:93:1c:67:d2:8f:39:e2:f5:3a:b8:b2:85:88:fe:87:92:
26:40:77:09:7d:74:cb:4b:29:40:eb:e5:74:2e:64:10:67:11:
41:4c:41:28:3a:68:98:3d:ef:df:42:9e:e7:52:65:6a:80:ec:
4a:62:94:71:c1:0d:a6:12:d6:e6:e2:8c:67:f6:09:c8:66:62:
5d:51:6d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:18 2025 by rpki-client