Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YS6Jm_xgnJPVxeQ680CdKcN0iUA.roa
File: YS6Jm_xgnJPVxeQ680CdKcN0iUA.roa (raw, json)
Hash identifier: kTguXYUIlosS6G2piQdWLZaHA2OGvG6aggHp0PedZSw=
Subject key identifier: 61:2E:89:9B:FC:60:9C:93:D5:C5:E4:3A:F3:40:9D:29:C3:74:89:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183229302CD008D4424EFFD19B64C71EDAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YS6Jm_xgnJPVxeQ680CdKcN0iUA.roa
Signing time: Fri 09 Sep 2022 14:06:43 +0000
ROA not before: Fri 09 Sep 2022 14:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:93:02:cd:00:8d:44:24:ef:fd:19:b6:4c:71:ed:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 9 14:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=612e899bfc609c93d5c5e43af3409d29c3748940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:e4:dd:a1:86:93:b5:00:5c:5b:a0:3b:0b:
5c:1e:6b:2f:58:7e:0f:29:e9:a8:91:bc:72:5c:d2:
d2:f4:77:1b:36:3e:13:00:fc:df:b7:e8:e1:59:88:
2f:f2:50:af:56:54:e4:e4:fe:01:78:74:f1:18:28:
33:53:0c:69:38:73:bf:92:ce:f4:dc:c9:db:3d:39:
1e:fa:dc:08:b1:da:b7:c5:2d:4f:d5:d2:a2:03:ec:
39:59:cf:b1:ea:58:d3:f2:25:1b:e2:66:4d:95:23:
85:fd:d7:e3:45:e3:46:24:09:62:eb:ea:13:85:59:
75:5f:33:c6:d1:c4:fb:d3:5e:07:4d:c5:99:47:8c:
2c:7c:f0:0b:8b:3a:5f:a5:9d:0a:4c:d8:c1:d0:6b:
e4:1c:8b:59:e6:38:fc:b1:0d:5e:86:a3:86:b5:76:
d5:e3:a5:98:93:47:a8:b3:a4:b7:45:aa:7c:5a:9b:
a6:fe:10:61:ab:77:a1:73:74:a9:e3:df:dc:95:60:
6f:4d:ee:d9:7c:ff:82:13:7a:e9:77:2d:8e:a8:a6:
a6:0a:17:ec:75:58:c7:f7:4f:7a:cb:6d:d4:bd:81:
04:86:38:58:8c:ba:67:49:f8:29:fb:b5:f7:25:4f:
d7:b4:41:69:7a:8a:3e:40:37:bf:c7:4c:71:9a:b5:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2E:89:9B:FC:60:9C:93:D5:C5:E4:3A:F3:40:9D:29:C3:74:89:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YS6Jm_xgnJPVxeQ680CdKcN0iUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:52:04:f6:78:97:72:95:00:68:bd:56:1c:46:45:eb:d2:6b:
31:00:e8:f0:c9:a3:1f:a4:61:08:8b:80:fc:50:c3:03:d3:a2:
1a:7d:a9:52:da:ca:2f:2e:ae:f3:c4:a5:3a:15:82:99:68:a9:
58:e1:77:05:bb:11:75:ac:41:c6:0e:87:91:60:5a:65:30:91:
ab:ef:39:c0:3a:42:1e:c1:43:b2:d2:fe:40:51:b4:9d:0b:31:
8a:fd:88:74:34:89:d2:d6:b2:94:a5:ef:2d:cd:58:a6:10:60:
91:1a:d7:0c:4d:2e:8f:2e:3b:f6:45:da:37:47:d3:08:b0:b2:
04:43:fd:92:07:75:ef:19:17:09:71:c5:86:70:97:09:22:0e:
31:2a:80:b8:71:6b:09:0e:63:c5:09:02:35:16:5a:12:e2:05:
4f:fa:cd:e3:45:6b:28:38:7e:7e:bc:bc:00:40:83:7c:a6:3f:
51:c8:94:b8:73:b4:84:fa:0b:6d:c6:28:35:ea:dc:01:22:63:
4c:0a:22:cf:a2:8b:4f:d2:83:0f:b5:0b:3b:72:5b:f8:b5:d9:
a0:dc:37:9a:08:59:8b:b1:ed:4c:ba:b6:75:84:a1:c2:a1:98:
6b:d0:9a:73:32:75:d7:ae:fe:0a:33:31:f8:b6:2f:74:25:49:
2a:fc:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:16:22 2025 by rpki-client