Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YQiNEKou-cPSyZ3iIvNZLSOv1sU.roa
File: YQiNEKou-cPSyZ3iIvNZLSOv1sU.roa (raw, json)
Hash identifier: ftdn8Dw9s7XbW5Atwl5mQK2qzP2Zy1H6y7IBuyM37+k=
Subject key identifier: 61:08:8D:10:AA:2E:F9:C3:D2:C9:9D:E2:22:F3:59:2D:23:AF:D6:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A2A2F37692442C9239D733641B61A145
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YQiNEKou-cPSyZ3iIvNZLSOv1sU.roa
Signing time: Sat 10 Jun 2023 00:09:28 +0000
ROA not before: Sat 10 Jun 2023 00:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a2:a2:f3:76:92:44:2c:92:39:d7:33:64:1b:61:a1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 00:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61088d10aa2ef9c3d2c99de222f3592d23afd6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:9c:51:8b:13:55:fc:b0:99:24:72:f6:cf:
ec:2d:15:8c:fa:db:95:b2:8a:20:4a:67:fe:0d:9c:
f1:06:a1:ac:7c:34:cd:f1:0f:37:b4:78:64:55:fd:
f3:7d:74:55:b7:8d:2d:e4:63:1e:26:66:3f:1f:ee:
f7:33:8e:4c:ec:49:72:c4:01:f5:5a:3a:67:f2:5b:
51:f8:93:42:32:69:43:f5:d8:58:b6:29:87:e3:95:
4d:92:fb:33:a2:91:5f:d0:1a:20:62:ff:a5:c0:2d:
0b:76:a7:b3:c8:ea:d4:0d:ef:c6:59:b4:55:b6:a1:
47:b4:ff:b8:c5:1e:60:e1:8d:f3:23:cd:82:35:d2:
39:16:a8:e3:30:89:16:29:95:87:3f:67:7e:a6:da:
f4:bc:2b:e9:6a:fd:16:0e:a3:0a:f0:6b:aa:62:be:
58:08:9b:17:01:8b:19:85:8f:08:1a:d0:cf:11:1a:
69:86:26:77:cd:df:f7:36:f6:6c:1f:c4:a9:62:04:
91:56:ee:36:d3:70:18:f3:fd:78:f0:4a:1d:a0:f5:
1c:2b:4d:21:54:63:af:84:cd:16:ea:d8:ec:1e:37:
45:a3:83:da:12:96:c0:c3:5b:13:8c:c6:0d:ab:77:
70:77:85:a7:68:ec:25:a4:dc:0d:d5:b3:b6:9c:60:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:08:8D:10:AA:2E:F9:C3:D2:C9:9D:E2:22:F3:59:2D:23:AF:D6:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YQiNEKou-cPSyZ3iIvNZLSOv1sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:f7:5c:25:7d:d3:c2:8c:7c:0c:fa:11:ee:10:d8:12:8f:8a:
eb:a9:a5:6d:cb:47:a0:c5:07:d0:62:c6:bf:11:d9:5d:06:3f:
28:89:df:32:c0:73:62:a8:c7:c6:f3:c6:b2:de:69:a9:7a:55:
bb:68:bd:20:75:39:37:a1:26:38:25:f4:5b:28:5e:81:20:ed:
04:22:85:d5:17:3a:e3:68:53:94:8b:76:36:4c:72:30:d3:c6:
82:a9:18:6f:32:8d:fe:e6:43:29:19:ad:8a:32:dc:95:58:10:
2d:07:b4:d1:d9:ad:6b:1f:96:96:9e:6a:4b:e4:f6:a1:2b:42:
1b:70:37:b7:e1:ea:85:29:c3:c9:a4:90:27:3d:01:84:4b:d8:
7d:84:a4:e6:17:3b:0a:d9:36:42:74:d8:ee:ac:b7:e8:36:1e:
03:e8:b2:5a:63:41:67:0f:8e:ae:ad:a1:8d:36:48:1c:c4:5a:
a3:c9:0d:72:dc:eb:70:f2:45:04:8b:a1:65:d0:64:0d:8c:b8:
13:60:1f:b1:ab:47:b7:6e:8d:0e:3c:70:e4:d9:e9:0c:ce:07:
b6:b6:3a:01:1d:91:bc:29:c4:1d:4c:b8:98:75:55:b3:cc:7d:
53:7c:6d:c6:e6:93:e3:b8:76:e5:7f:7a:02:c3:7e:44:4b:82:
de:15:03:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiiovN2kkQskjnXM2QbYaFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEwMDAwOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTA4OGQxMGFhMmVmOWMzZDJjOTlkZTIyMmYzNTkyZDIzYWZkNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGOcUYsTVfywmSRy9s/sLRWM+tuV
soogSmf+DZzxBqGsfDTN8Q83tHhkVf3zfXRVt40t5GMeJmY/H+73M45M7ElyxAH1
Wjpn8ltR+JNCMmlD9dhYtimH45VNkvszopFf0BogYv+lwC0LdqezyOrUDe/GWbRV
tqFHtP+4xR5g4Y3zI82CNdI5FqjjMIkWKZWHP2d+ptr0vCvpav0WDqMK8GuqYr5Y
CJsXAYsZhY8IGtDPERpphiZ3zd/3NvZsH8SpYgSRVu4203AY8/148EodoPUcK00h
VGOvhM0W6tjsHjdFo4PaEpbAw1sTjMYNq3dwd4WnaOwlpNwN1bO2nGDBowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGEIjRCqLvnD0smd4iLzWS0jr9bFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWVFpTkVLb3UtY1BTeVozaUl2TlpMU092MXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEb3XCV908KMfAz6Ee4Q
2BKPiuuppW3LR6DFB9Bixr8R2V0GPyiJ3zLAc2Kox8bzxrLeaal6VbtovSB1OTeh
Jjgl9FsoXoEg7QQihdUXOuNoU5SLdjZMcjDTxoKpGG8yjf7mQykZrYoy3JVYEC0H
tNHZrWsflpaeakvk9qErQhtwN7fh6oUpw8mkkCc9AYRL2H2EpOYXOwrZNkJ02O6s
t+g2HgPoslpjQWcPjq6toY02SBzEWqPJDXLc63DyRQSLoWXQZA2MuBNgH7GrR7du
jQ48cOTZ6QzOB7a2OgEdkbwpxB1MuJh1VbPMfVN8bcbmk+O4duV/egLDfkRLgt4V
A3E=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:14:49 2025 by rpki-client