Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YX4ChophlyMuVE-_5ZlK5DcIS3E.roa
File: YX4ChophlyMuVE-_5ZlK5DcIS3E.roa (raw, json)
Hash identifier: buah+P5ZzOh76+UgvCLRNSZEv5t41MPyLvNJo0JPecw=
Subject key identifier: 61:7E:02:86:8A:61:97:23:2E:54:4F:BF:E5:99:4A:E4:37:08:4B:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88D28EA4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YX4ChophlyMuVE-_5ZlK5DcIS3E.roa
Signing time: Tue 31 May 2022 22:10:16 +0000
ROA not before: Tue 31 May 2022 22:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2295500452 (0x88d28ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 22:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=617e02868a6197232e544fbfe5994ae437084b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:9b:56:6a:05:41:43:a4:79:2b:9f:c9:7a:
f9:76:df:ce:fc:f2:9c:6a:9d:00:0a:9d:5b:c0:ce:
7b:c9:fe:15:a5:f8:3b:27:95:95:24:81:89:6c:09:
95:5e:e6:20:a6:ab:b2:3c:4f:44:05:89:6d:7f:72:
16:b5:3d:da:72:b9:6e:cb:b9:f8:05:67:3b:22:06:
f8:26:16:2b:b4:de:62:13:71:1f:f4:21:5c:13:d1:
0b:9c:72:7d:27:12:94:4d:38:08:b2:3b:fe:35:bd:
e5:30:80:9c:fe:9d:1b:93:0b:04:a5:e1:92:ba:c6:
83:dc:82:bc:57:0d:ab:24:76:1d:0c:47:9d:af:32:
5a:8e:8d:52:30:6b:6f:7e:49:43:92:3c:e5:a3:6d:
c0:02:4a:96:88:fb:9f:49:2c:65:97:44:79:ae:4c:
ad:22:f7:88:ab:e7:46:a8:c9:2e:de:ec:a5:f8:c6:
d6:16:16:08:de:e0:4d:1f:fa:b9:c3:af:a4:81:c6:
bb:79:bb:12:a8:f6:65:e1:ab:df:c4:95:22:31:49:
53:ee:29:d2:ef:5c:4b:b2:91:06:f1:da:bd:bd:e1:
28:28:58:2b:54:18:47:d0:0b:93:30:a1:61:38:3d:
a0:04:df:3f:40:66:f6:16:a4:ac:d3:19:d4:34:f8:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7E:02:86:8A:61:97:23:2E:54:4F:BF:E5:99:4A:E4:37:08:4B:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YX4ChophlyMuVE-_5ZlK5DcIS3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:e2:d1:8f:4d:98:ca:37:32:de:63:9e:f5:94:31:09:75:a1:
9d:f0:cf:2d:87:93:ba:dc:fe:d7:31:4e:61:5e:52:25:91:ed:
5f:cd:ad:06:65:3c:7b:6a:3f:02:b8:35:34:e2:4e:f9:77:70:
c1:b0:5d:8e:d2:bd:80:f6:63:10:81:cd:c6:c5:f0:2d:4f:17:
4b:61:21:95:ed:1d:a0:00:6e:4f:02:a4:3b:ef:08:c5:ae:00:
3b:57:24:31:c0:1a:b1:83:37:6e:a6:de:46:e1:6d:ef:63:69:
e4:c1:cf:85:1d:38:03:f2:ef:3f:85:1a:ee:b0:85:8e:73:fc:
ec:b2:1b:be:c7:a7:0d:12:b1:75:8c:71:4e:79:17:5f:f9:bd:
62:e2:e1:09:42:c1:d5:fc:34:78:22:da:95:a0:ee:69:25:78:
c4:d8:ae:70:00:c7:bd:18:5b:5b:90:3a:eb:cb:07:f4:b5:cb:
c8:60:87:c4:ea:63:3a:6c:de:e2:bb:83:69:9d:6e:92:9d:31:
ab:a6:f4:9d:9a:30:6f:2d:31:ef:7d:fb:7d:e0:8b:1f:aa:67:
c9:bd:a3:3c:f0:9c:c2:f0:dd:9e:e9:8e:fa:e0:1a:f1:17:18:
dc:e6:3c:72:13:40:2d:20:da:dc:f7:1e:17:fc:22:de:2e:fa:
fc:56:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:00 2025 by rpki-client