Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YeBNNvHP4w8_kjdQ1WxxkVXAL4Y.roa
File: YeBNNvHP4w8_kjdQ1WxxkVXAL4Y.roa (raw, json)
Hash identifier: H7Amv/+OsHypA6oc0YwRKkCGUFOB/+lN2wG8SHoRWpU=
Subject key identifier: 61:E0:4D:36:F1:CF:E3:0F:3F:92:37:50:D5:6C:71:91:55:C0:2F:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 842194AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YeBNNvHP4w8_kjdQ1WxxkVXAL4Y.roa
Signing time: Sun 15 May 2022 02:12:01 +0000
ROA not before: Sun 15 May 2022 02:12:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216793261 (0x842194ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 02:12:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61e04d36f1cfe30f3f923750d56c719155c02f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:4e:56:a9:6d:f8:fc:53:7b:a9:77:20:b2:
9f:08:88:7f:b4:8c:51:7e:80:37:0f:d3:f3:e0:59:
bc:e3:ec:33:65:15:a8:4a:3f:6d:f5:67:4f:29:3c:
f3:97:f7:c2:6f:4d:a1:97:d3:c4:c6:f6:3a:0a:92:
72:f0:ce:7a:19:44:f0:18:dc:c9:56:b5:0c:0c:70:
57:be:76:96:90:d0:85:8a:cf:1b:bc:b7:58:35:0a:
34:3e:31:2d:ae:a1:1c:a8:11:36:18:ae:ad:84:46:
6a:de:06:0a:62:7c:2d:62:24:5d:05:36:75:2f:cd:
09:93:2d:f0:ca:58:81:04:72:da:14:ec:4f:17:f4:
73:1c:de:48:f6:ea:23:59:86:b7:15:10:a7:f5:2b:
b5:4b:ee:a7:8a:1e:e5:2a:b0:46:03:32:63:c8:4e:
7c:90:78:92:8d:17:96:42:df:ae:2f:dc:84:65:64:
86:86:66:b3:17:06:de:48:6c:73:bd:14:24:54:9f:
85:37:21:b4:88:db:d3:5b:2f:d4:7e:86:dd:af:57:
0d:58:ea:d5:5a:e1:d1:ab:b7:a4:31:d0:29:76:0a:
a9:0a:8c:39:d6:7d:b1:24:a9:0e:48:23:22:eb:62:
9d:ae:7f:28:d1:a8:75:8a:3c:55:f7:2d:ab:86:be:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:4D:36:F1:CF:E3:0F:3F:92:37:50:D5:6C:71:91:55:C0:2F:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YeBNNvHP4w8_kjdQ1WxxkVXAL4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:72:d4:c5:36:78:18:72:28:33:42:67:e8:58:7b:c7:e8:4c:
f4:77:13:7f:ff:07:d4:d9:92:b7:48:5e:6a:b4:4b:ce:77:f3:
1e:7a:7b:f6:a5:74:bc:26:0f:4d:5c:fd:d6:b7:39:84:79:03:
4d:c5:e5:c2:27:ec:1f:bc:fd:f6:d9:08:da:b7:eb:b3:3b:77:
53:2b:97:09:03:3c:a3:04:6e:ad:e7:8b:b4:03:09:eb:f7:54:
a9:06:55:da:a0:fa:9a:7c:07:06:ea:a4:35:19:10:38:33:14:
fb:bb:c8:4c:b3:0f:e7:40:0b:a6:cc:f0:92:0c:4f:e9:7e:d8:
28:0f:51:75:49:07:1f:a8:fc:e9:57:b1:57:ca:f3:a0:25:24:
f3:06:b5:60:28:d7:be:c9:af:c7:ae:7f:77:de:04:54:df:1c:
40:87:b7:d2:70:30:50:db:92:f0:94:83:5d:fc:07:68:d0:09:
9a:e1:8f:8b:20:0f:ba:77:c2:eb:46:6b:42:dc:2a:7e:db:5d:
0e:11:40:4e:35:0e:3d:c1:aa:3e:be:65:c0:3f:76:7b:63:4e:
b5:5f:48:57:0d:af:90:14:78:ee:47:b8:40:8a:87:54:92:82:
3a:fb:e9:b1:08:1f:c3:a0:20:1c:86:b4:71:f7:e6:c4:18:39:
ca:61:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:16:10 2025 by rpki-client