Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YU_tqFqQNU16MBJpvRmqJ38p_20.roa
File: YU_tqFqQNU16MBJpvRmqJ38p_20.roa (raw, json)
Hash identifier: J3msHc+pZQhlLKO+f/SE0BGWX8i7rRMkahBFMBHMLRU=
Subject key identifier: 61:4F:ED:A8:5A:90:35:4D:7A:30:12:69:BD:19:AA:27:7F:29:FF:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863DCFB7AE2F103380081DC8079444D7E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YU_tqFqQNU16MBJpvRmqJ38p_20.roa
Signing time: Sat 11 Feb 2023 00:11:08 +0000
ROA not before: Sat 11 Feb 2023 00:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3d:cf:b7:ae:2f:10:33:80:08:1d:c8:07:94:44:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 00:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=614feda85a90354d7a301269bd19aa277f29ff6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f4:6b:c2:a6:19:91:1c:cd:75:38:e7:9f:1b:
01:f9:94:4b:35:65:56:c6:18:ad:e5:10:2e:1c:1c:
d4:b5:37:d7:10:a2:4c:dc:1d:7a:3d:a6:d9:99:c7:
b6:8d:8d:91:d7:bf:14:59:33:b0:4e:8d:85:f5:88:
0f:5e:93:3a:56:0d:fa:2c:07:e4:57:62:d1:f1:5b:
71:62:b3:45:ea:aa:da:d3:a9:d7:1e:db:8a:70:81:
33:c4:06:0d:1e:6f:ae:65:f2:48:fe:b6:da:a9:68:
f6:c9:71:07:d5:43:8d:b7:00:2b:a2:7d:e4:75:7c:
17:57:03:a0:c4:8f:b6:73:62:57:7a:ed:78:98:8b:
aa:94:fc:82:67:a9:d2:3b:0c:6f:43:51:d0:23:aa:
67:98:5c:68:ad:ff:80:e6:23:cb:c8:8a:3f:2d:55:
69:b5:95:ad:2a:33:03:b4:d8:bc:6e:0f:6d:fd:c5:
1e:f0:c1:8d:4c:a2:fe:4d:12:82:58:ec:a1:aa:5b:
04:53:e4:20:43:52:04:e7:93:e6:3b:81:58:2a:bc:
46:b8:70:9b:10:5e:84:ef:48:4a:25:d5:5e:6b:71:
ee:44:1d:b7:d9:aa:f3:f9:1d:eb:58:ea:83:8e:a3:
49:ad:f9:db:90:02:5c:79:dd:cb:44:15:71:a9:20:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4F:ED:A8:5A:90:35:4D:7A:30:12:69:BD:19:AA:27:7F:29:FF:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YU_tqFqQNU16MBJpvRmqJ38p_20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:2e:83:18:a8:ea:46:e6:a8:b8:dc:a8:28:dd:f7:33:3b:76:
a2:9c:01:03:84:fb:aa:32:99:3a:3d:8c:f1:41:27:96:6d:c6:
2e:78:f6:b5:68:aa:d7:8b:54:8d:9d:85:c3:02:95:d6:6b:ea:
63:86:1b:8a:94:4f:5a:aa:6f:bd:06:c3:e1:fb:de:a7:c6:52:
35:77:fe:96:28:36:64:91:2c:18:dd:e3:70:33:72:1e:2c:23:
1a:11:54:2e:e8:a9:ba:95:13:87:de:21:d1:f7:54:9e:35:40:
ad:37:4e:c8:ca:fb:ca:f0:9a:f6:b7:35:99:25:60:17:62:cd:
fb:aa:8a:14:9b:40:6c:14:01:00:12:43:80:6f:2a:f9:3f:29:
7d:f7:6c:be:da:c7:37:29:42:8f:09:a5:59:7e:e5:2e:48:82:
6c:4b:a5:8a:eb:8b:30:a5:05:a2:20:52:67:db:c6:9b:e2:78:
be:f8:e8:b5:6e:fc:ac:ec:8e:96:42:f7:9f:c8:f9:e3:55:19:
0b:db:b6:11:42:aa:dd:86:a4:98:b6:d8:4f:6f:bf:56:2d:46:
33:9e:ae:39:e1:47:91:ba:c3:ec:e7:3b:cf:d1:7d:a2:a1:e2:
54:35:9b:cf:a3:be:b6:f3:f5:6e:25:c3:78:77:31:85:55:35:
0e:68:53:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:15 2025 by rpki-client