Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YefRaoxCW6VQQprzVKbAF8lJ1qg.roa
File: YefRaoxCW6VQQprzVKbAF8lJ1qg.roa (raw, json)
Hash identifier: NeU1y9DbAP84Vwdx+euJUoNbhfhvvrQIRP6rPL1JgY0=
Subject key identifier: 61:E7:D1:6A:8C:42:5B:A5:50:42:9A:F3:54:A6:C0:17:C9:49:D6:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E6B004D5866B42BB714A89168ECD57DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YefRaoxCW6VQQprzVKbAF8lJ1qg.roa
Signing time: Wed 25 Jan 2023 02:09:33 +0000
ROA not before: Wed 25 Jan 2023 02:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e6:b0:04:d5:86:6b:42:bb:71:4a:89:16:8e:cd:57:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 02:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61e7d16a8c425ba550429af354a6c017c949d6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:4d:67:81:e2:ba:bd:ca:10:89:48:ec:99:
07:ad:0d:6a:78:47:f5:dc:17:50:c2:8e:da:10:92:
c6:41:33:4a:1e:c2:20:94:c3:a0:7a:36:1e:5f:e7:
f5:85:70:7d:97:2d:b3:e9:a5:04:8e:45:a4:f6:5a:
24:08:ff:fd:25:58:b0:b4:73:85:fd:7a:03:40:1c:
70:c3:00:c3:3e:6a:59:9a:a5:57:ed:c5:d9:a9:78:
48:f1:ea:f5:d3:02:60:87:98:f3:56:ef:94:8b:3c:
14:92:4d:e2:b3:16:84:aa:06:b0:44:9c:5d:83:e8:
58:95:33:41:2a:e6:6a:16:33:0e:72:36:0a:d2:07:
01:61:65:da:73:29:53:c9:33:e9:cb:70:65:e3:79:
6b:53:14:2a:0e:9b:39:b1:ab:cc:2b:33:01:63:4a:
30:d5:12:b2:77:f5:6c:f3:09:de:f4:13:5e:75:f9:
13:c8:d6:6e:1c:0f:96:67:3c:46:3a:3f:76:60:04:
91:ec:57:33:64:f5:89:53:b6:d9:33:4d:95:a6:98:
69:47:1b:d6:c1:4e:8c:c9:e2:c7:1b:11:d1:68:63:
cd:6d:1f:ae:e2:7b:49:04:60:be:98:10:3c:57:65:
00:81:3d:e2:6d:42:56:78:06:7b:63:bc:5c:d4:08:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:D1:6A:8C:42:5B:A5:50:42:9A:F3:54:A6:C0:17:C9:49:D6:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YefRaoxCW6VQQprzVKbAF8lJ1qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:66:61:e3:c4:68:07:e7:b0:5e:98:01:c9:9c:f8:3a:d4:b7:
61:c1:68:03:63:7a:86:6a:eb:35:73:1a:41:00:59:30:1e:74:
3b:b1:32:0b:58:3d:a7:ea:2b:96:a2:2f:10:67:71:63:f4:3a:
0c:15:d3:c0:31:10:3f:54:f2:44:42:71:3e:8e:31:50:05:52:
36:1c:7b:7e:16:9c:38:38:2d:f2:2f:c9:71:00:e3:fc:15:14:
f3:e7:97:63:01:cc:d3:98:42:01:9f:16:b1:bd:59:1d:e7:cc:
73:f0:8f:33:c7:a2:53:59:d5:eb:56:c5:4e:6c:7d:bb:82:83:
f0:b8:d7:5b:41:02:39:8a:63:3d:ac:29:d3:b4:5a:39:c4:93:
1a:0c:c1:a4:21:89:39:71:aa:6e:cc:62:44:2b:37:a7:63:c5:
1d:fa:1e:ce:90:a1:8d:a5:99:9a:70:2f:91:6d:44:04:c4:3e:
95:22:14:d5:5f:ab:92:be:64:19:ad:c4:e1:db:12:3e:88:0c:
39:f9:da:25:73:1f:fc:3a:1a:18:c9:6b:62:7b:ff:ac:f8:33:
8e:da:e9:89:56:fe:c8:15:f8:a5:3e:0b:2a:c9:a7:c2:c6:6b:
63:b1:16:9c:b5:8d:82:bf:a3:04:e7:99:0a:7a:03:fc:e6:b6:
54:b9:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:36:48 2025 by rpki-client