Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YUH6gYnchs0SNZReE71V-MGc94Q.roa
File: YUH6gYnchs0SNZReE71V-MGc94Q.roa (raw, json)
Hash identifier: wrIb+VfsIccCG4Jw/gx0Le6A1wzkV7r+czsQr3d/5fw=
Subject key identifier: 61:41:FA:81:89:DC:86:CD:12:35:94:5E:13:BD:55:F8:C1:9C:F7:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A19BFA8EBF0E8180D1499BF8A706B4C3B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YUH6gYnchs0SNZReE71V-MGc94Q.roa
Signing time: Mon 21 Aug 2023 20:18:25 +0000
ROA not before: Mon 21 Aug 2023 20:18:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:19:bf:a8:eb:f0:e8:18:0d:14:99:bf:8a:70:6b:4c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 20:18:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6141fa8189dc86cd1235945e13bd55f8c19cf784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:19:54:4c:1c:b4:e9:c1:c3:b7:98:66:d3:
e7:e2:20:87:5a:41:18:ed:db:33:37:b5:38:74:1f:
0e:a4:2a:66:14:46:2a:29:70:5e:7f:52:88:89:6a:
17:8b:15:e2:0b:a0:5d:b3:57:48:bf:13:fa:05:46:
07:86:f6:13:b5:5a:4e:32:57:0e:8c:87:1a:69:54:
6d:4a:bd:f2:e0:7f:85:b7:37:d8:03:7a:0d:14:aa:
d9:50:2a:98:14:aa:95:3b:73:95:47:7a:77:94:7e:
b7:3d:98:56:b8:f7:49:97:c4:a6:ed:f2:37:7a:c2:
30:4d:46:f3:29:e9:8f:9f:24:d3:74:e5:26:b9:82:
f2:6d:d6:63:a0:4e:61:2f:02:05:4c:6c:34:e0:03:
9d:c7:54:29:2d:89:71:0e:75:a3:49:a9:a2:f9:09:
c6:0d:4e:e6:0c:7b:a5:45:96:25:c9:15:f3:1d:3a:
31:42:52:8c:bf:2b:5c:55:69:21:78:e7:25:3a:85:
c1:d6:c8:52:2b:6c:79:ac:e8:25:80:6e:6a:da:e7:
3f:2a:75:97:56:cf:70:2a:3c:27:a3:e3:be:20:f8:
ab:67:1e:28:8a:62:97:2a:64:15:93:e5:e0:96:42:
c4:94:35:8c:18:0b:04:d9:2f:3b:20:56:70:f0:82:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:41:FA:81:89:DC:86:CD:12:35:94:5E:13:BD:55:F8:C1:9C:F7:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YUH6gYnchs0SNZReE71V-MGc94Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:60:c7:17:27:c3:e2:9e:77:f4:a3:0e:14:cd:49:db:f7:3f:
3e:ab:03:94:ff:96:0e:32:cf:87:e7:00:bf:e3:43:47:d8:09:
e6:11:1c:0a:7c:fe:47:ea:f7:7b:06:8e:57:51:fe:b7:6c:d1:
c6:d0:9e:e3:95:1b:bf:1a:04:c7:7b:e0:6e:5b:37:af:68:63:
a7:fe:cb:11:45:5f:fe:b0:af:8f:b9:ea:fa:80:83:47:98:54:
86:7d:02:43:62:ca:ce:74:51:ae:1e:40:55:13:2c:2d:c6:a8:
dd:9b:22:d7:85:a6:3b:bc:40:8b:4a:d3:cf:9a:32:1e:fa:86:
34:8d:58:85:fa:ce:cb:4e:e4:3e:07:79:00:eb:18:4f:18:d1:
b1:19:04:c6:1a:f1:0a:42:f8:62:c6:92:10:f4:d6:0b:8c:e9:
63:be:62:1f:53:e2:2f:51:9e:86:ab:4f:70:0f:c3:f7:4e:7b:
c0:de:4a:54:5a:37:25:17:ec:a0:87:07:f1:b2:fb:17:35:6e:
7b:73:4c:f6:b0:a7:2a:a6:33:30:d6:28:99:a9:46:03:84:33:
2e:e6:cf:16:96:e7:b9:b1:3c:bc:eb:87:94:42:05:47:af:1b:
ef:dd:6c:69:72:4e:61:34:17:41:00:ca:83:59:f5:c0:71:3c:
83:04:1d:01
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoZv6jr8OgYDRSZv4pwa0w7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIxMjAxODI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTQxZmE4MTg5ZGM4NmNkMTIzNTk0NWUxM2JkNTVmOGMxOWNmNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpIZVEwctOnBw7eYZtPn4iCHWkEY
7dszN7U4dB8OpCpmFEYqKXBef1KIiWoXixXiC6Bds1dIvxP6BUYHhvYTtVpOMlcO
jIcaaVRtSr3y4H+FtzfYA3oNFKrZUCqYFKqVO3OVR3p3lH63PZhWuPdJl8Sm7fI3
esIwTUbzKemPnyTTdOUmuYLybdZjoE5hLwIFTGw04AOdx1QpLYlxDnWjSami+QnG
DU7mDHulRZYlyRXzHToxQlKMvytcVWkheOclOoXB1shSK2x5rOglgG5q2uc/KnWX
Vs9wKjwno+O+IPirZx4oimKXKmQVk+XglkLElDWMGAsE2S87IFZw8ILyiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGFB+oGJ3IbNEjWUXhO9VfjBnPeEMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWVVINmdZbmNoczBTTlpSZUU3MVYtTUdjOTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADNgxxcnw+Ked/SjDhTN
Sdv3Pz6rA5T/lg4yz4fnAL/jQ0fYCeYRHAp8/kfq93sGjldR/rds0cbQnuOVG78a
BMd74G5bN69oY6f+yxFFX/6wr4+56vqAg0eYVIZ9AkNiys50Ua4eQFUTLC3GqN2b
IteFpju8QItK08+aMh76hjSNWIX6zstO5D4HeQDrGE8Y0bEZBMYa8QpC+GLGkhD0
1guM6WO+Yh9T4i9RnoarT3APw/dOe8DeSlRaNyUX7KCHB/Gy+xc1bntzTPawpyqm
MzDWKJmpRgOEMy7mzxaW57mxPLzrh5RCBUevG+/dbGlyTmE0F0EAyoNZ9cBxPIME
HQE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:53 2025 by rpki-client