Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YRRv1b9TubBq3atJRiZoIhuPh-M.roa
File: YRRv1b9TubBq3atJRiZoIhuPh-M.roa (raw, json)
Hash identifier: xSFtHpQuRt9Ok/msQvRJxp1IiILsvJuSvEdxiY4VaHE=
Subject key identifier: 61:14:6F:D5:BF:53:B9:B0:6A:DD:AB:49:46:26:68:22:1B:8F:87:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186974C4EBD1D77CF7366181E293A18DB87
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YRRv1b9TubBq3atJRiZoIhuPh-M.roa
Signing time: Tue 28 Feb 2023 09:13:25 +0000
ROA not before: Tue 28 Feb 2023 09:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:4c:4e:bd:1d:77:cf:73:66:18:1e:29:3a:18:db:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 09:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61146fd5bf53b9b06addab49462668221b8f87e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:27:32:03:0e:2a:0d:1f:51:40:28:c3:70:ac:
e0:25:2e:fb:a7:ea:f2:ba:a9:d3:4a:ee:6a:d2:1b:
d9:19:19:29:78:43:f7:33:ab:4f:c9:9c:83:a7:5e:
64:7e:95:84:fd:f7:20:5f:e2:9b:a4:e8:58:41:25:
c8:31:2f:5c:1f:d0:95:c0:a9:a3:4b:ca:29:b3:0d:
97:1a:f9:60:e2:09:56:bd:ba:e0:f3:c3:77:3f:63:
1f:81:9c:7e:17:4b:3c:21:7a:8d:d7:74:f6:95:b3:
85:88:f1:1e:26:7e:47:90:24:77:71:91:3f:b6:ce:
4f:d5:7b:41:69:7b:59:15:17:89:23:58:f7:06:0d:
e5:97:2b:13:86:3c:48:1f:71:e9:f7:77:c0:df:fd:
5b:76:af:85:83:e6:92:ea:34:5f:1e:8a:c0:9e:c5:
2d:71:83:23:db:9c:04:65:c9:33:a2:93:2e:85:83:
1c:cf:5f:8b:64:d7:48:af:87:00:54:8e:5b:ba:e7:
78:e7:4e:8d:2d:9c:6c:83:6b:ea:a4:9f:f0:78:23:
0a:c1:32:78:70:29:87:c9:62:f7:15:1b:b1:15:fe:
84:c7:8e:c0:33:78:17:c1:99:70:21:a8:49:a1:19:
38:08:35:7f:fa:3c:a4:11:9c:cd:73:33:55:62:85:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:6F:D5:BF:53:B9:B0:6A:DD:AB:49:46:26:68:22:1B:8F:87:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YRRv1b9TubBq3atJRiZoIhuPh-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:0d:94:14:25:47:25:db:86:99:04:22:25:c6:2f:87:3a:17:
6f:f1:fe:46:1e:a9:ac:ec:60:ec:c9:dc:38:c7:c7:cb:67:5a:
8a:a2:16:f4:67:63:5b:4c:36:51:13:8f:4e:7f:cd:ad:2a:d0:
6c:7d:b4:19:4f:e8:ad:bb:d8:87:6d:45:96:68:62:f4:5b:47:
a5:57:44:87:ec:52:54:bf:c7:ea:94:1c:83:b8:0c:c9:5c:af:
e5:89:7d:71:74:49:04:a2:5d:27:79:20:34:16:25:e2:2b:71:
8f:8d:28:c3:e8:15:ea:77:d6:57:84:8b:8e:92:9a:a8:3d:4b:
f9:79:70:90:5f:b8:42:c2:42:aa:c9:9d:9c:f8:d7:37:11:e9:
36:34:4f:be:b2:e8:03:72:e7:58:4c:76:f2:c0:4b:d2:e6:69:
ed:6c:f7:a6:3d:d9:85:be:12:66:cb:21:6e:bb:16:2c:d6:4f:
84:b7:0e:08:e8:37:6b:72:47:51:9e:a2:3b:64:f1:64:ad:88:
1e:cc:1f:aa:d9:91:1f:1b:20:82:a6:d0:e5:bd:b9:9d:b4:74:
d7:fb:41:ff:0e:3b:a1:9a:65:2e:a9:07:bc:92:15:5b:92:09:
22:0e:06:68:83:cc:aa:ed:b0:3c:1c:23:59:89:e7:f5:18:70:
eb:fe:84:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaXTE69HXfPc2YYHik6GNuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI4MDkxMzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTE0NmZkNWJmNTNiOWIwNmFkZGFiNDk0NjI2NjgyMjFiOGY4N2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCcyAw4qDR9RQCjDcKzgJS77p+ry
uqnTSu5q0hvZGRkpeEP3M6tPyZyDp15kfpWE/fcgX+KbpOhYQSXIMS9cH9CVwKmj
S8opsw2XGvlg4glWvbrg88N3P2MfgZx+F0s8IXqN13T2lbOFiPEeJn5HkCR3cZE/
ts5P1XtBaXtZFReJI1j3Bg3llysThjxIH3Hp93fA3/1bdq+Fg+aS6jRfHorAnsUt
cYMj25wEZckzopMuhYMcz1+LZNdIr4cAVI5buud4506NLZxsg2vqpJ/weCMKwTJ4
cCmHyWL3FRuxFf6Ex47AM3gXwZlwIahJoRk4CDV/+jykEZzNczNVYoXcbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGEUb9W/U7mwat2rSUYmaCIbj4fjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWVJSdjFiOVR1YkJxM2F0SlJpWm9JaHVQaC1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH4NlBQlRyXbhpkEIiXG
L4c6F2/x/kYeqazsYOzJ3DjHx8tnWoqiFvRnY1tMNlETj05/za0q0Gx9tBlP6K27
2IdtRZZoYvRbR6VXRIfsUlS/x+qUHIO4DMlcr+WJfXF0SQSiXSd5IDQWJeIrcY+N
KMPoFep31leEi46Smqg9S/l5cJBfuELCQqrJnZz41zcR6TY0T76y6ANy51hMdvLA
S9Lmae1s96Y92YW+EmbLIW67FizWT4S3DgjoN2tyR1Geojtk8WStiB7MH6rZkR8b
IIKm0OW9uZ20dNf7Qf8OO6GaZS6pB7ySFVuSCSIOBmiDzKrtsDwcI1mJ5/UYcOv+
hDg=
-----END CERTIFICATE-----
Generated at Fri May 2 08:48:14 2025 by rpki-client