Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YPH4C7EUB1hBsRw_INiJAQiB-98.roa
File: YPH4C7EUB1hBsRw_INiJAQiB-98.roa (raw, json)
Hash identifier: OrF8KIwRUdwgSdb+kMiOKCELESkzKhvW0dF7gVuU33E=
Subject key identifier: 60:F1:F8:0B:B1:14:07:58:41:B1:1C:3F:20:D8:89:01:08:81:FB:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018936B309F6CDA3680D131F03A1EE6322B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YPH4C7EUB1hBsRw_INiJAQiB-98.roa
Signing time: Sat 08 Jul 2023 18:10:50 +0000
ROA not before: Sat 08 Jul 2023 18:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:b3:09:f6:cd:a3:68:0d:13:1f:03:a1:ee:63:22:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 18:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60f1f80bb114075841b11c3f20d889010881fbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:b3:88:d4:42:24:f3:7b:9e:f5:3e:d8:92:
84:71:ba:d2:e6:19:24:55:10:34:4a:58:3a:02:d3:
51:a1:11:fb:e9:c6:31:35:62:9d:62:42:86:61:fc:
5c:e4:9b:04:04:f5:5c:d1:c7:05:99:59:3e:05:fd:
96:24:d6:2a:5e:63:20:92:78:8b:8a:b9:54:a5:b4:
96:89:54:56:9e:6b:62:ee:0a:bd:51:54:47:8e:9f:
3a:09:d7:8a:ef:49:fa:7f:94:76:3f:9b:75:c4:ee:
5f:66:b1:a8:ed:f4:d4:f7:a6:8a:98:53:1c:c9:70:
89:e3:1e:05:2b:7e:f9:43:32:92:cd:da:fd:cb:c5:
5a:81:72:05:09:16:e2:b0:4c:ac:fe:fe:1b:32:a8:
80:e0:f5:37:9e:20:8d:e0:2b:ed:29:a6:9b:80:0d:
09:76:59:24:f8:17:20:36:65:e1:1f:2a:93:fe:71:
ff:cc:cd:2f:d2:e6:72:48:1a:c7:06:1f:9d:a8:50:
90:d7:44:35:d1:76:00:31:9d:f2:51:d8:ba:0c:2a:
29:84:fa:3f:29:2c:e4:1c:d6:93:44:33:ae:6f:f1:
20:f4:a0:a9:6e:7d:fe:1f:2f:01:10:b4:08:6a:ae:
d5:ea:d0:ad:37:f1:56:5e:b0:98:f1:20:a7:b9:31:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F1:F8:0B:B1:14:07:58:41:B1:1C:3F:20:D8:89:01:08:81:FB:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YPH4C7EUB1hBsRw_INiJAQiB-98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:44:0f:07:48:17:18:0f:d8:3e:60:ee:04:10:a8:09:de:9e:
43:d9:19:7f:f6:a7:d7:7e:8a:64:f3:a6:fa:4b:1a:1e:0a:af:
0f:38:be:20:88:36:b9:ee:89:09:f1:7c:81:29:9b:4b:67:0d:
20:51:3a:7c:f1:50:91:48:4d:64:c8:3d:3f:e0:8a:82:9e:7b:
8c:e0:6a:53:10:26:dd:3a:a2:35:2a:36:b7:67:f4:cd:a9:c0:
c6:7d:5f:ff:ab:42:58:74:c8:68:1a:a8:24:3c:13:17:e0:8c:
13:a8:5e:05:0b:b1:74:ca:70:ad:d1:0d:84:d0:94:b8:65:f7:
fd:d6:6e:ac:52:24:29:c5:f4:bc:0b:c4:42:59:13:24:8a:ff:
73:3b:12:00:17:f9:90:9a:55:5e:f8:88:0f:d8:30:d7:e4:ba:
77:b8:7f:20:99:7d:22:19:27:ab:d3:69:dd:3a:56:51:fb:be:
9d:39:6f:62:a7:5c:bc:09:27:fa:34:50:48:9b:b3:46:4d:79:
80:07:18:ec:f5:35:6a:e1:56:6f:1e:2e:99:c8:3f:0a:f6:02:
68:0e:96:2e:6a:c6:dd:ce:45:5e:be:49:77:f7:b4:b7:70:0f:
32:d6:ff:9a:8b:c3:ed:c4:c8:d1:a0:90:c0:8d:f8:d8:2a:63:
d7:a5:d7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:42:05 2025 by rpki-client