Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YayOBGOomORgVQ51h7zNjZJG_6I.roa
File: YayOBGOomORgVQ51h7zNjZJG_6I.roa (raw, json)
Hash identifier: HCeQAY6XRWvGREGS7lYJMOr62jm7Cj9hcGZrTbMYzR0=
Subject key identifier: 61:AC:8E:04:63:A8:98:E4:60:55:0E:75:87:BC:CD:8D:92:46:FF:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A2312ED6BD159A719FEC794F0ADA098E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YayOBGOomORgVQ51h7zNjZJG_6I.roa
Signing time: Fri 09 Jun 2023 22:05:12 +0000
ROA not before: Fri 09 Jun 2023 22:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:a230:4eff/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a2:31:2e:d6:bd:15:9a:71:9f:ec:79:4f:0a:da:09:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 22:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ac8e0463a898e460550e7587bccd8d9246ffa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:e4:ec:b5:eb:96:ca:96:25:00:b0:73:5f:
95:9a:93:d7:9f:12:e6:a0:4c:54:6a:4c:0d:b6:71:
07:5f:e0:c7:54:03:5a:b3:79:35:ac:df:21:43:74:
60:86:26:5b:17:35:1d:b7:be:c7:df:1d:1e:30:41:
3e:03:75:e1:b1:33:44:0b:e0:5c:2e:81:d7:2e:81:
33:e1:49:33:2d:ce:f0:14:2d:a6:59:11:11:a3:6f:
f8:bc:18:ec:1d:7f:21:ad:ac:d8:01:c6:7c:25:71:
83:81:c4:08:c0:27:82:d8:45:e4:58:a0:35:70:04:
4a:74:9b:9d:50:b3:54:39:b4:4d:40:e5:f7:cc:52:
47:46:72:62:ad:01:7f:05:c4:b0:e0:02:d0:56:c7:
67:80:eb:97:c9:27:76:1b:d5:d9:14:45:c4:11:b5:
ba:8a:21:f4:f7:41:31:50:1c:79:50:16:17:cd:e3:
c8:71:51:ed:cd:09:7e:f8:ec:42:6a:64:3d:56:7b:
b5:a4:4d:f7:35:ff:f5:22:27:92:cc:47:6c:f0:bc:
0d:14:62:28:25:88:e3:09:24:4a:9e:4b:36:23:7e:
01:80:8a:fa:f3:7d:38:53:92:95:8d:5d:79:2e:24:
af:05:f4:ea:93:88:9b:03:1d:58:14:f7:bb:0a:81:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:8E:04:63:A8:98:E4:60:55:0E:75:87:BC:CD:8D:92:46:FF:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YayOBGOomORgVQ51h7zNjZJG_6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:93:18:04:72:9a:4c:2d:66:7f:5c:9e:91:e3:7c:06:5d:be:
1a:8f:d4:0c:b5:fa:93:e7:82:4a:46:6e:1d:57:41:95:81:7a:
b1:6a:94:db:24:3f:86:66:3f:eb:ac:63:78:96:64:a7:ed:91:
6d:62:5b:b8:9c:56:a8:c2:a5:4f:e9:08:6e:c5:4e:8a:05:71:
83:8d:df:8f:c9:cb:33:ce:0d:1c:e0:d3:57:c4:50:22:a4:05:
7f:f6:a9:ce:f9:b6:c8:3b:91:dc:65:61:25:1c:14:c5:39:29:
aa:4d:65:2d:32:d0:fd:6d:ae:4c:dd:52:56:ff:90:41:0a:7b:
44:d6:6a:f4:4c:41:d9:f8:7d:99:8b:a1:a4:64:18:fb:4d:d5:
15:f3:ed:bc:e6:ef:47:93:06:da:1a:54:7b:4f:e5:6f:54:e1:
73:34:9e:e2:65:7c:dc:a2:27:5e:48:7e:59:47:8e:e9:de:3d:
77:99:bc:bf:e0:d5:4c:03:50:67:3d:07:f7:db:a5:a0:83:43:
87:f1:eb:55:8f:3d:3b:63:b3:ca:f0:d9:b7:f6:5a:58:38:05:
ce:40:a5:3f:55:56:af:71:ea:2a:36:f1:06:e9:c6:19:f8:b0:
7d:22:49:ef:c7:08:e8:90:c1:d8:4a:fa:bd:67:7c:fb:c1:0c:
ed:9f:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:17:36 2025 by rpki-client