Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YQjnq0jq31V4jcKNuE0anD49SyU.roa
File: YQjnq0jq31V4jcKNuE0anD49SyU.roa (raw, json)
Hash identifier: dFWiuDiPrXb07GtulmfGbvB04BUAL6niR7Aemk1TRqA=
Subject key identifier: 61:08:E7:AB:48:EA:DF:55:78:8D:C2:8D:B8:4D:1A:9C:3E:3D:4B:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01839E669773906A9485A1237B19D17897AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YQjnq0jq31V4jcKNuE0anD49SyU.roa
Signing time: Mon 03 Oct 2022 15:11:07 +0000
ROA not before: Mon 03 Oct 2022 15:11:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:66:97:73:90:6a:94:85:a1:23:7b:19:d1:78:97:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 3 15:11:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6108e7ab48eadf55788dc28db84d1a9c3e3d4b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:2c:50:a6:87:1b:ed:e8:ef:75:fa:aa:a3:
e8:69:be:af:ba:90:e5:b7:92:f3:77:a9:63:dc:52:
e9:b0:cd:cf:c0:39:74:21:9c:c6:fe:8f:64:97:3e:
a9:51:0c:69:07:28:ad:cb:07:7d:00:d4:6e:9e:58:
4f:de:aa:3d:5c:c6:41:db:63:d4:79:05:fe:60:53:
ad:9c:c6:4c:2c:29:dc:63:5f:36:11:f0:8c:68:3b:
3a:6e:80:a0:25:33:9c:d3:88:83:46:c9:dd:34:f7:
7d:a3:6c:19:ff:d1:1b:1a:fc:51:62:43:b1:2e:b7:
1d:79:9a:f6:8a:80:d9:96:e5:c5:e1:92:c8:9c:a0:
bb:ec:d8:de:eb:86:4e:00:dd:22:cf:d0:0c:1a:b8:
aa:f5:08:3a:fc:c5:b8:e3:59:30:71:d6:be:e5:df:
6a:a0:b2:57:2a:99:19:30:8f:78:0c:32:b2:c6:ef:
71:a2:40:16:61:3a:04:e3:3b:36:ae:d0:a8:fb:89:
e1:55:05:9c:a6:b7:89:07:f4:e5:1b:49:7b:0e:24:
ff:96:7d:84:1d:9d:44:77:f8:3a:20:23:7e:f0:93:
84:fe:1a:78:73:1e:37:1a:cc:7c:b1:f2:24:d9:0d:
96:b2:02:2e:aa:54:6d:13:d9:29:df:c6:7a:1c:e1:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:08:E7:AB:48:EA:DF:55:78:8D:C2:8D:B8:4D:1A:9C:3E:3D:4B:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YQjnq0jq31V4jcKNuE0anD49SyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:34:a0:ad:25:f5:32:66:05:54:9d:bf:a0:4e:c7:3c:fd:76:
55:8a:21:1c:96:ec:cd:23:fd:f6:f4:ba:c6:1c:47:a7:9f:e9:
d5:a7:f2:7e:9f:e4:48:a1:ca:76:bc:1a:31:cc:3e:27:bc:f7:
40:88:24:43:b8:75:61:20:65:81:35:19:4c:22:ef:11:5c:a5:
23:c7:a6:84:ef:b7:44:92:e0:50:41:ba:f6:23:8c:b2:a2:bc:
31:87:b1:25:32:17:fb:67:86:a7:85:26:d3:a2:07:57:22:ed:
e0:33:c4:95:db:11:c7:30:fd:d7:37:8a:bb:1b:9e:76:65:1a:
3a:1e:e3:21:00:5a:53:18:33:82:27:11:0c:46:39:3d:7e:25:
ab:17:a3:55:d0:a3:5e:73:04:fc:a7:17:21:de:20:39:2e:90:
bf:ef:a1:d8:52:e9:98:9f:00:90:c2:f5:16:09:8d:66:f8:de:
75:d0:3d:6d:16:34:98:14:01:e9:75:ee:1b:63:ed:ea:a0:c4:
5e:fe:06:71:63:e9:d5:2a:78:ef:94:50:b6:1a:f2:f8:f1:56:
42:fa:19:28:e7:f6:9b:e1:ba:8c:eb:9c:39:ed:68:42:48:be:
74:d3:b8:43:a8:23:89:64:ba:47:72:12:07:d5:bf:41:6d:be:
f7:c9:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:14:43 2025 by rpki-client