Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YWiqgEz_dElq4zy1Od4v3Uw9NbU.roa
File: YWiqgEz_dElq4zy1Od4v3Uw9NbU.roa (raw, json)
Hash identifier: ICpBH4PKO23lZMnEGfVAFjFwK7JxsFKsk38D3bh3tM8=
Subject key identifier: 61:68:AA:80:4C:FF:74:49:6A:E3:3C:B5:39:DE:2F:DD:4C:3D:35:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018529A5473FB05CDE564AA64AC9A7267CE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YWiqgEz_dElq4zy1Od4v3Uw9NbU.roa
Signing time: Mon 19 Dec 2022 09:09:35 +0000
ROA not before: Mon 19 Dec 2022 09:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:a5:47:3f:b0:5c:de:56:4a:a6:4a:c9:a7:26:7c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 09:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6168aa804cff74496ae33cb539de2fdd4c3d35b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:8b:86:f2:91:ce:e4:62:af:a3:90:25:2b:
42:04:7b:10:45:c6:4e:a8:83:dd:38:e9:4f:b7:12:
57:fc:e8:a4:be:c9:d6:58:28:2c:14:a2:80:a0:37:
1b:27:5a:ba:d8:06:5b:0c:55:61:17:d4:53:62:5a:
37:61:6a:ba:62:1b:13:70:cb:01:38:5d:53:17:0e:
72:7f:68:22:0c:c4:2a:9c:03:2c:82:04:c8:64:b8:
0e:f8:6e:d9:e5:2a:94:e0:43:78:88:6f:db:89:04:
56:32:9c:c0:32:a8:8a:ab:cd:62:67:ad:65:05:82:
2b:fe:f8:a0:c8:a7:87:0a:2b:33:73:03:26:68:50:
25:55:80:13:e0:5e:aa:72:74:8d:76:dc:45:f5:12:
3f:f5:d8:9a:cd:8f:cb:72:ab:98:50:0e:ed:00:d9:
66:b9:08:08:26:25:03:18:70:3b:88:b4:a8:bd:b6:
f6:4b:d2:9d:c1:89:a2:68:e7:71:82:4a:0b:00:49:
78:76:aa:f5:39:d4:e1:bf:11:e7:b5:92:26:4b:6b:
64:47:31:e2:6d:07:c0:a9:a1:d1:38:b1:ca:c1:c4:
72:8c:55:c6:49:33:e7:19:28:11:10:ec:c8:a7:9a:
dd:b7:a3:83:6c:e0:bb:58:e9:f1:cc:20:26:9a:e2:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:68:AA:80:4C:FF:74:49:6A:E3:3C:B5:39:DE:2F:DD:4C:3D:35:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YWiqgEz_dElq4zy1Od4v3Uw9NbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:57:a4:e6:f6:37:4b:bc:3b:49:ee:9d:2a:62:18:6d:a5:b0:
52:0d:48:bb:14:9d:bf:e8:96:e3:1d:1d:3c:a1:1e:1b:0f:2e:
e2:47:f1:19:bf:6c:0c:77:bb:8a:8b:1d:63:69:c1:44:f8:7f:
79:b6:f3:e5:b4:e8:0b:c1:31:da:e7:e3:e3:45:9a:fe:a5:59:
9a:b4:7b:1e:de:ca:1a:91:08:82:fc:fb:b5:5e:74:00:05:f9:
7a:5c:4c:3e:72:92:30:f6:0c:e6:44:07:5a:47:59:f2:27:94:
b4:1f:f7:ac:34:62:6f:26:16:08:ae:ad:c0:24:64:28:b4:fa:
7b:d0:49:fa:98:09:aa:53:db:4a:48:e5:1f:74:1b:63:d8:d1:
d9:14:ef:91:75:b9:bd:fa:e5:c9:77:f0:eb:d2:1f:aa:9f:36:
be:d5:3e:22:9c:87:b2:5b:6c:91:1c:d7:e5:1f:4a:15:81:40:
47:1b:b4:91:13:39:ee:9d:34:b3:46:74:d9:fc:7c:59:f1:14:
33:86:03:18:0e:6a:36:ae:16:86:7b:7f:91:2f:81:3d:60:72:
25:5d:bd:81:37:c3:a3:aa:11:4c:10:e9:75:13:7e:ef:a6:97:
c2:61:fe:44:db:d3:9f:28:aa:cc:7b:81:a5:4a:30:7e:08:f9:
74:5a:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:50:13 2025 by rpki-client