Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y_USSOSPQT07MK8Nf31whmfuouo.roa
File: Y_USSOSPQT07MK8Nf31whmfuouo.roa (raw, json)
Hash identifier: sm6Hkborom/jSCuVi8EVCVFFFB8+03DrRFaXM1md9+E=
Subject key identifier: 63:F5:12:48:E4:8F:41:3D:3B:30:AF:0D:7F:7D:70:86:67:EE:A2:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8588428F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y_USSOSPQT07MK8Nf31whmfuouo.roa
Signing time: Thu 19 May 2022 19:05:29 +0000
ROA not before: Thu 19 May 2022 19:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240299663 (0x8588428f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 19:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63f51248e48f413d3b30af0d7f7d708667eea2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:09:92:67:87:c5:cd:a5:02:7a:11:55:ab:
dc:6c:5a:4f:d2:26:31:4c:60:50:6d:4e:f7:98:a1:
5e:f0:21:75:9c:45:1a:59:84:b2:db:5b:70:8b:70:
cb:31:5d:1b:f3:35:97:ae:f8:a5:5f:29:43:cc:16:
e1:7c:b0:6a:9a:30:9a:7c:95:85:11:99:0c:c7:63:
f3:f9:e7:e6:1c:25:87:75:05:9c:e3:94:91:d3:24:
11:ff:4b:6a:84:48:93:03:b5:6f:7a:1f:1e:92:f3:
f8:a3:3e:d6:5e:e2:00:80:af:9c:09:4c:18:22:3e:
89:ae:0c:17:84:32:4b:1e:6a:ad:f0:f6:c3:63:c2:
38:4d:9f:61:36:5e:4f:c1:5f:94:64:26:90:e2:78:
9a:8b:a6:71:35:96:72:6a:10:4b:14:77:af:cf:a5:
86:ba:9f:92:49:62:97:11:16:03:92:0b:13:7c:ea:
66:4c:7e:e4:38:99:b5:26:7f:df:69:0b:48:e4:3c:
89:ee:01:05:fc:68:08:c8:99:40:b4:a4:9a:b1:74:
19:f8:a9:7a:d2:3a:f8:0e:4a:a1:3c:bc:32:55:08:
cc:15:9a:7a:76:eb:ee:d1:5d:11:68:82:a1:5a:a1:
57:6a:da:09:29:5d:cb:98:da:ad:da:4f:bb:ba:28:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F5:12:48:E4:8F:41:3D:3B:30:AF:0D:7F:7D:70:86:67:EE:A2:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y_USSOSPQT07MK8Nf31whmfuouo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:fe:db:fd:bf:59:8b:53:1e:4d:ce:05:47:8d:e6:5a:67:09:
65:ee:ae:d5:b2:37:d3:8d:aa:e9:0a:9a:cb:16:e9:03:80:e4:
27:2f:57:5c:a6:2a:98:e3:0c:ee:2a:51:71:12:35:72:da:0f:
28:78:28:ef:95:79:3b:9b:ce:4b:41:df:47:ea:e6:22:5f:83:
96:95:5c:db:bd:f9:4e:0b:b1:66:90:98:a2:22:78:59:9d:dd:
8c:ad:be:63:0f:4f:55:a6:81:47:55:50:54:85:36:48:b7:34:
d4:c8:3d:a0:05:1a:17:2c:8f:58:73:16:9f:d7:d3:f7:4f:8e:
19:95:45:8b:98:d1:66:86:b1:27:ee:fe:4b:e8:d8:4c:b9:8f:
ae:9e:43:78:dd:d5:b4:b6:34:70:38:07:42:72:a5:22:30:43:
4d:2d:8d:74:e5:60:68:04:94:49:0f:fc:54:51:77:68:e5:e7:
ee:03:23:6d:95:09:87:ae:04:77:2f:8a:40:f1:01:02:40:39:
39:f1:6c:35:85:ef:fe:67:f1:a7:59:af:78:f1:85:cb:41:9e:
fa:44:dd:44:b0:4d:24:6d:1e:91:b9:67:61:ff:aa:98:9d:2f:
2d:f8:9d:b5:13:99:ed:0d:44:07:dc:a1:d4:5c:b6:a4:ab:83:
dd:a1:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:37:40 2025 by rpki-client