Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YWRI8Bl9Vcc02ylwJKSNPU1-COA.roa
File: YWRI8Bl9Vcc02ylwJKSNPU1-COA.roa (raw, json)
Hash identifier: Hhr1cKu3gkytfSeDRMkxtbP4wdRC7UM7AAPYxxgMtIQ=
Subject key identifier: 61:64:48:F0:19:7D:55:C7:34:DB:29:70:24:A4:8D:3D:4D:7E:08:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6EA6DBD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YWRI8Bl9Vcc02ylwJKSNPU1-COA.roa
Signing time: Tue 01 Mar 2022 04:08:37 +0000
ROA not before: Tue 01 Mar 2022 04:08:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856429008 (0x6ea6dbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 04:08:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=616448f0197d55c734db297024a48d3d4d7e08e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:16:6d:2d:e7:e8:06:50:16:05:ad:c7:c3:
9d:de:c9:15:45:12:e1:96:0a:db:2e:49:70:cf:a9:
8e:e4:95:83:09:76:40:e9:07:25:f9:a3:af:be:e5:
06:0d:be:0b:62:f1:f0:ba:53:dd:1f:f3:86:36:d5:
cf:d9:2d:fc:28:f9:da:64:e8:e3:bd:a0:e4:af:cc:
e8:e0:3f:be:bb:00:c4:62:06:48:0d:56:cb:de:c5:
05:e5:ac:f4:b7:db:28:af:26:46:76:07:8e:cd:00:
d8:cc:7e:df:cd:b5:a2:4f:32:12:2c:37:52:e4:d4:
f7:bd:de:5a:98:0c:46:55:a2:cc:31:5b:a2:d1:7f:
13:fc:90:17:73:e4:8e:c2:26:c9:ff:c7:11:0f:89:
6d:d8:2a:1b:fa:d0:d9:e4:48:8f:61:40:f7:66:c0:
7e:49:c8:ec:18:11:58:46:92:30:33:70:bd:6a:b9:
33:27:7d:c9:9c:c2:99:36:6c:81:ac:ea:4a:4f:d1:
a5:e4:b5:c9:cb:91:e0:ce:f9:b1:4a:c8:2c:84:de:
4a:95:1d:31:2b:94:9c:e1:03:40:8c:f2:58:33:99:
1c:04:6b:30:be:2d:3c:b9:c2:d3:48:49:45:fb:f1:
b1:1a:71:c9:4a:0c:ee:fa:6e:15:7c:7c:7c:13:9c:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:64:48:F0:19:7D:55:C7:34:DB:29:70:24:A4:8D:3D:4D:7E:08:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YWRI8Bl9Vcc02ylwJKSNPU1-COA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:ef:48:f2:a4:3c:30:59:1b:86:1d:d0:b6:19:a3:5c:8f:11:
4e:53:79:5e:e5:3f:9e:e3:e7:38:7a:b0:10:73:11:0c:4a:e5:
19:8a:f3:94:ea:34:6b:de:8a:20:78:c6:c7:de:ef:75:ba:6a:
7b:03:4c:27:4e:1e:c3:45:a9:d1:1b:7e:f5:50:f2:39:0c:97:
dd:83:9f:9b:46:5f:2f:3c:b6:cd:1d:47:5a:91:47:86:e4:5b:
79:50:69:30:4a:8d:75:e1:ef:3a:e8:51:e7:e8:b6:d1:70:bc:
a4:19:29:3d:a5:51:05:1b:0e:d3:d8:5a:34:db:e4:11:09:b6:
20:e1:cc:c7:01:50:8f:a4:1a:46:dd:69:d6:43:54:ee:d7:bd:
44:52:23:69:43:ae:24:35:26:c3:79:96:25:f1:16:c2:2e:bb:
2f:a3:8e:66:f1:e1:d0:7d:b8:8f:a4:95:5a:4b:1b:a2:37:fa:
57:66:55:fa:4d:82:fe:a6:24:e6:07:68:db:05:48:05:d6:04:
df:7c:df:ed:6f:d6:cf:f5:7b:d6:3c:2a:33:1d:d6:bc:02:1b:
3b:43:33:e9:97:38:9b:5b:91:0a:bd:96:d8:34:0a:1e:87:0b:
eb:ff:1b:50:3f:61:8a:11:d6:8f:4a:1a:8a:a5:15:fd:c6:5a:
31:00:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:04:10 2025 by rpki-client