Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YT9Hhb2ilvywXjaYc74oz-y-1p4.roa
File: YT9Hhb2ilvywXjaYc74oz-y-1p4.roa (raw, json)
Hash identifier: 9/q23RDHauEVnDglguZD5ubTpILSBkujiotdCIBFUfQ=
Subject key identifier: 61:3F:47:85:BD:A2:96:FC:B0:5E:36:98:73:BE:28:CF:EC:BE:D6:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183162937C8BE77B6DD6C96DB88D76C69D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YT9Hhb2ilvywXjaYc74oz-y-1p4.roa
Signing time: Wed 07 Sep 2022 04:15:43 +0000
ROA not before: Wed 07 Sep 2022 04:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:29:37:c8:be:77:b6:dd:6c:96:db:88:d7:6c:69:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 7 04:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=613f4785bda296fcb05e369873be28cfecbed69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:90:6e:d4:fe:5f:1e:ce:cc:46:7d:d6:44:
80:20:90:aa:29:af:38:78:5e:12:a3:1b:02:44:47:
87:0f:2f:fc:f6:e8:69:fa:ff:32:55:39:da:d8:50:
ce:41:f1:30:96:15:70:34:6a:7e:ee:39:e3:f1:05:
cf:22:cb:b9:c8:26:db:47:a9:6a:02:1e:e1:db:b3:
3e:da:61:51:40:85:be:64:ac:c0:4a:2d:93:e9:90:
85:32:b8:14:6f:8f:f3:99:a6:5f:06:4e:d2:e0:0f:
6c:81:36:3d:4d:34:04:88:b5:21:9a:5b:97:69:fd:
cd:b3:e3:6f:50:4a:d5:8e:c8:51:22:3e:ef:ca:a0:
b7:25:83:1f:99:a2:c8:b4:fb:26:e5:14:26:cd:0d:
ef:70:3f:42:d2:1c:49:71:3c:e2:b7:ba:64:78:71:
fa:94:dd:2a:e7:a5:0a:a4:88:b3:f3:c2:dc:d8:7b:
16:d4:82:85:f9:f9:52:18:43:03:95:40:6c:56:4e:
5c:33:63:3b:0c:7d:c3:86:9a:58:cc:5d:80:3f:47:
31:5a:1b:cb:18:cd:d5:7d:1b:13:1d:97:a4:a9:33:
e8:89:62:ab:2a:00:a1:2f:ee:2d:48:40:66:43:e5:
81:38:7f:25:17:91:a7:0a:9e:12:42:15:1b:6e:02:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3F:47:85:BD:A2:96:FC:B0:5E:36:98:73:BE:28:CF:EC:BE:D6:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YT9Hhb2ilvywXjaYc74oz-y-1p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:aa:48:99:24:e3:86:41:e7:4e:b0:85:dc:21:22:a8:ab:15:
8d:71:26:c0:62:0d:6c:a0:16:e1:24:8e:9e:55:4d:e3:8c:40:
4e:29:c4:2a:50:3e:b0:42:17:bb:24:f9:18:ec:c1:7a:0e:aa:
bc:af:5b:a9:11:eb:56:81:b7:ca:55:e4:b7:51:97:78:e8:a5:
63:46:6b:7e:65:80:97:4c:20:bc:fc:70:2e:09:eb:5c:15:0c:
53:d2:c0:92:e9:53:bc:ae:cf:72:a3:24:ce:5d:93:78:de:a2:
36:71:20:ec:f6:65:a2:a1:99:76:e2:92:e5:26:8d:c6:f8:e4:
00:4e:6b:4f:24:c4:f8:0f:3b:ed:7c:8d:26:6c:b0:80:2c:05:
ed:60:8e:83:6b:50:66:53:92:de:e0:02:ff:54:cd:a4:24:f4:
b6:b5:c0:a3:d1:73:96:8a:f3:73:91:17:64:ea:ce:76:01:4c:
8e:6b:aa:b2:4d:4b:6b:84:ca:41:45:f5:e8:1a:7e:32:e0:58:
0f:a8:70:c2:68:2d:38:bc:e5:fc:82:87:1a:e2:50:3b:30:05:
6d:99:2a:8a:da:7f:59:18:23:db:a2:7b:14:b2:4a:5d:91:87:
d3:94:34:a0:3b:ef:48:af:d3:22:83:48:96:11:aa:8e:df:87:
6c:08:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:51:01 2025 by rpki-client