Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YWobkB1ZmzXMNelL_h_sn6xPT3o.roa
File: YWobkB1ZmzXMNelL_h_sn6xPT3o.roa (raw, json)
Hash identifier: nYBl9vvOnJaOy1jP4FuYh1/2CBllznJpQAcYvqOqbMg=
Subject key identifier: 61:6A:1B:90:1D:59:9B:35:CC:35:E9:4B:FE:1F:EC:9F:AC:4F:4F:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018895F9E7D6D298E03D38B4AD746E4E54DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YWobkB1ZmzXMNelL_h_sn6xPT3o.roa
Signing time: Wed 07 Jun 2023 13:09:22 +0000
ROA not before: Wed 07 Jun 2023 13:09:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:f9:e7:d6:d2:98:e0:3d:38:b4:ad:74:6e:4e:54:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 13:09:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=616a1b901d599b35cc35e94bfe1fec9fac4f4f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:3d:7d:16:ef:b9:cb:c8:12:fe:93:84:76:
ae:34:25:8a:dc:b1:f6:5e:c5:2f:b8:94:50:63:72:
3b:11:04:e4:6e:ce:55:90:85:6c:88:21:b6:36:4c:
a9:1a:f3:ad:cb:0d:94:16:de:44:f4:94:09:bc:3e:
fd:5c:3f:b1:66:22:86:b5:3e:cc:5c:5d:ad:44:2c:
4c:55:26:3d:a3:21:e8:8b:84:51:93:ee:ee:8c:ae:
51:97:ea:38:c5:e4:48:13:48:d2:e2:16:f8:e7:82:
01:ca:0d:b5:0e:12:6d:b7:e5:07:3b:6e:d3:b8:38:
70:d3:3c:e3:a5:3b:a4:11:4d:d6:de:4d:ab:33:98:
eb:fc:f9:12:1a:c1:0d:26:d5:36:7a:af:8b:67:26:
0f:76:40:c0:b7:7d:ba:b1:4b:98:44:8d:65:7a:09:
b1:5c:08:7d:77:8c:5e:a8:13:c1:1f:e8:52:91:cb:
f5:b8:2e:a1:c6:6d:b9:bc:f8:52:ce:9a:05:1d:5c:
54:f2:2f:d4:df:d8:95:26:61:54:a0:da:ff:7d:60:
82:29:a6:5a:51:27:1e:14:2e:95:f3:d5:ee:52:e5:
8c:1c:51:e5:22:93:71:3b:b2:06:3b:46:e6:3d:01:
7d:ba:0d:1b:30:27:d9:6d:68:54:d4:7a:dc:13:10:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6A:1B:90:1D:59:9B:35:CC:35:E9:4B:FE:1F:EC:9F:AC:4F:4F:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YWobkB1ZmzXMNelL_h_sn6xPT3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:ab:05:f1:ed:eb:32:32:be:3e:26:76:1f:a8:4b:9a:fe:a4:
4e:7c:2a:91:08:eb:3d:7a:83:1d:88:28:c9:10:17:20:38:4b:
04:12:5a:dc:6e:e7:93:23:77:6e:7f:67:7a:c9:04:75:e3:76:
08:c2:b4:8d:9c:5e:6d:c2:43:68:66:cf:69:22:0c:5a:42:8e:
ee:22:18:3c:0d:ca:a7:a5:d5:86:0f:f2:1c:69:83:0a:80:6d:
8b:d1:89:71:d4:be:4a:94:19:da:1c:97:78:64:f0:ff:c5:70:
7c:9d:b4:c9:86:d4:72:b9:30:d4:da:e9:2f:f7:d1:f7:3c:05:
b7:9f:8a:83:5b:87:c3:8e:b3:63:94:82:53:26:71:2a:de:72:
18:ae:dd:08:66:c1:5f:e4:62:42:15:c5:42:b3:1d:fc:7e:8a:
53:fd:8d:4b:3e:cd:0e:be:1e:8a:45:5c:d6:84:e6:61:b8:1c:
fe:89:2f:51:60:4c:82:e0:c7:58:d8:47:95:4d:4a:ce:77:f9:
e8:44:aa:b6:44:2d:7c:c2:ec:20:d9:18:12:ab:1b:c7:5f:73:
47:89:61:46:e8:7d:30:11:1b:0f:7a:e2:29:92:1b:d4:b8:5e:
bc:a6:93:b9:fd:9b:1e:3d:cf:6c:a5:66:b6:7c:e5:29:65:39:
f8:bb:bb:cc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiV+efW0pjgPTi0rXRuTlTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA3MTMwOTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTZhMWI5MDFkNTk5YjM1Y2MzNWU5NGJmZTFmZWM5ZmFjNGY0ZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD89fRbvucvIEv6ThHauNCWK3LH2
XsUvuJRQY3I7EQTkbs5VkIVsiCG2NkypGvOtyw2UFt5E9JQJvD79XD+xZiKGtT7M
XF2tRCxMVSY9oyHoi4RRk+7ujK5Rl+o4xeRIE0jS4hb454IByg21DhJtt+UHO27T
uDhw0zzjpTukEU3W3k2rM5jr/PkSGsENJtU2eq+LZyYPdkDAt326sUuYRI1legmx
XAh9d4xeqBPBH+hSkcv1uC6hxm25vPhSzpoFHVxU8i/U39iVJmFUoNr/fWCCKaZa
USceFC6V89XuUuWMHFHlIpNxO7IGO0bmPQF9ug0bMCfZbWhU1HrcExDHQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGFqG5AdWZs1zDXpS/4f7J+sT096MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWVdvYmtCMVptelhNTmVsTF9oX3NuNnhQVDNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI2rBfHt6zIyvj4mdh+o
S5r+pE58KpEI6z16gx2IKMkQFyA4SwQSWtxu55Mjd25/Z3rJBHXjdgjCtI2cXm3C
Q2hmz2kiDFpCju4iGDwNyqel1YYP8hxpgwqAbYvRiXHUvkqUGdocl3hk8P/FcHyd
tMmG1HK5MNTa6S/30fc8BbefioNbh8OOs2OUglMmcSrechiu3QhmwV/kYkIVxUKz
Hfx+ilP9jUs+zQ6+HopFXNaE5mG4HP6JL1FgTILgx1jYR5VNSs53+ehEqrZELXzC
7CDZGBKrG8dfc0eJYUbofTARGw964imSG9S4Xrymk7n9mx49z2ylZrZ85SllOfi7
u8w=
-----END CERTIFICATE-----
Generated at Thu May 1 02:53:25 2025 by rpki-client