Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YTkRl5en93xxtTsaPVbBSjaf1JE.roa
File: YTkRl5en93xxtTsaPVbBSjaf1JE.roa (raw, json)
Hash identifier: 9IU/3pzB5fBGwgWHHnm85KaH+May74odVOCuFi76uxc=
Subject key identifier: 61:39:11:97:97:A7:F7:7C:71:B5:3B:1A:3D:56:C1:4A:36:9F:D4:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01828406E9E71C5FDA0D0499AA7BBBAAA3AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YTkRl5en93xxtTsaPVbBSjaf1JE.roa
Signing time: Tue 09 Aug 2022 19:13:41 +0000
ROA not before: Tue 09 Aug 2022 19:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:06:e9:e7:1c:5f:da:0d:04:99:aa:7b:bb:aa:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 19:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6139119797a7f77c71b53b1a3d56c14a369fd491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:6d:58:f4:08:f0:4d:8a:62:8c:d2:1c:20:
9c:81:0e:69:52:3a:68:fd:5a:cd:ab:a3:db:cc:41:
1c:c9:51:ba:58:67:da:f3:a6:a3:9f:ca:a2:2b:7f:
05:5f:7a:e3:0f:b5:50:e1:5e:47:ce:e6:c5:00:56:
a5:5e:5e:37:56:b8:55:45:7c:89:7f:57:67:1e:ec:
af:2d:7e:aa:d2:e8:38:52:dd:73:f8:62:44:12:7f:
69:59:f0:7f:3c:5b:d1:c4:64:c5:2c:c7:a9:9c:fa:
e0:35:ae:3a:62:8c:51:e4:f7:2f:a7:cd:a5:04:e0:
52:47:6b:40:bd:e7:66:ed:f6:a6:60:0e:fd:84:f4:
9e:07:2e:72:bd:c4:6e:cc:e9:4b:a8:2f:ab:d2:eb:
28:7e:1d:16:b1:b8:6b:06:31:11:4f:f9:78:d7:69:
d4:5a:63:e6:86:68:a5:d1:c5:f2:8a:1d:3b:18:b5:
79:f1:af:2e:96:ab:9b:4f:a2:15:ef:2a:e2:34:e5:
d8:cc:de:ce:68:5e:1f:3b:62:8b:de:fd:5b:03:bc:
48:65:6f:2c:b3:bf:c9:a9:9b:ae:08:00:d1:2e:e9:
cb:93:dc:0e:e9:5d:cd:6c:fc:d2:2c:2d:86:08:fb:
79:12:d7:f6:b5:af:21:62:8b:a9:89:1b:89:1d:a4:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:39:11:97:97:A7:F7:7C:71:B5:3B:1A:3D:56:C1:4A:36:9F:D4:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YTkRl5en93xxtTsaPVbBSjaf1JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:58:0f:39:d4:d1:ae:53:c2:ba:1a:3a:4d:a8:31:4f:d8:49:
22:29:fc:68:f9:b0:58:dd:bf:f1:c8:59:bc:0d:fc:25:83:ab:
66:54:5c:f0:0f:3d:74:27:0c:60:08:4e:0b:fa:31:5e:5e:57:
3a:a0:55:fe:8b:c1:f6:8c:f8:c9:31:77:d7:83:21:ba:49:7f:
35:ff:82:f1:84:af:ac:2e:e6:42:9b:c9:f9:08:78:94:ee:cf:
4b:da:85:23:77:87:c8:5e:01:b9:1c:51:6c:fa:ad:bd:ea:66:
60:1a:40:61:a7:0c:a6:19:99:44:3d:db:e9:c4:8b:10:0a:e0:
2d:b2:4e:2f:3b:4e:2a:57:e2:63:65:b4:70:3e:09:ba:f1:6a:
01:3e:23:4a:d5:fc:e8:c6:30:8e:1a:75:49:af:0d:8c:7f:df:
6f:a9:d9:9c:39:e9:98:fa:db:9a:ec:6a:3d:07:58:0c:f1:a7:
f9:f0:6c:7d:26:94:57:11:61:c8:05:2b:15:fa:5a:5f:71:26:
33:9e:c3:ea:0e:e6:bc:dd:d0:a3:82:15:e5:80:87:b9:80:17:
19:49:af:99:0e:03:c5:61:8f:16:b5:ab:57:f9:e8:6e:cf:97:
a9:5a:1f:ae:d7:e0:32:e6:48:a5:c9:b6:0d:76:5e:26:55:5f:
2a:48:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:36:27 2025 by rpki-client