Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YgtaVK3mb07ejrSCKPToPCa71BA.roa
File: YgtaVK3mb07ejrSCKPToPCa71BA.roa (raw, json)
Hash identifier: w1Xp9epKF3RDB5HF2tKKVUC3hfk2noYIPBvH4V7Jxt4=
Subject key identifier: 62:0B:5A:54:AD:E6:6F:4E:DE:8E:B4:82:28:F4:E8:3C:26:BB:D4:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 77238738
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YgtaVK3mb07ejrSCKPToPCa71BA.roa
Signing time: Thu 31 Mar 2022 05:09:04 +0000
ROA not before: Thu 31 Mar 2022 05:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998817080 (0x77238738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 05:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=620b5a54ade66f4ede8eb48228f4e83c26bbd410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:35:17:f5:c0:64:fd:95:a0:af:17:6f:6b:
2c:34:7a:73:f8:83:e5:8f:b0:a1:ae:3a:a4:06:51:
49:d2:6b:7a:6b:52:3e:c9:e4:8f:f5:c2:00:20:e6:
f5:ab:62:57:7c:98:b9:72:81:6f:39:85:00:8c:0b:
c6:1f:11:b1:75:2d:da:84:ad:0c:a3:e1:be:d2:0e:
72:a2:5d:18:03:89:9c:9e:bd:cb:dd:81:e2:f7:9a:
18:6d:6b:42:a7:d3:33:89:23:8c:cb:6c:04:6b:25:
32:91:5f:d6:7b:0e:9c:ae:9d:c8:de:3f:31:3c:e9:
79:31:39:90:81:8c:02:1f:47:0c:f4:c2:38:4e:2a:
94:07:e5:a5:f1:61:08:38:4e:74:cb:2c:80:90:5f:
cd:09:d6:db:6a:de:5a:91:31:b3:59:36:ef:70:2f:
77:c4:69:97:52:cf:c9:92:b5:86:96:b2:26:a0:94:
d1:11:d9:f7:9f:f1:93:6a:4f:35:c0:22:27:9c:13:
dd:f1:16:82:7a:33:a7:e0:e2:9c:a8:5e:ce:5c:5b:
ed:e1:4c:9a:bf:a0:4b:ba:20:f2:71:2c:6c:e0:d3:
7a:9a:b6:9c:33:c5:4d:a4:0f:8d:87:2e:14:75:69:
df:fb:a8:52:3d:52:dd:b5:0d:fb:cf:b5:c1:a2:aa:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:5A:54:AD:E6:6F:4E:DE:8E:B4:82:28:F4:E8:3C:26:BB:D4:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YgtaVK3mb07ejrSCKPToPCa71BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:2d:be:44:60:43:be:52:6d:13:5d:1a:41:85:62:06:7b:cb:
d0:9a:e6:c8:8a:6a:ee:aa:d7:4b:e5:8a:7f:a1:b6:f8:f7:9f:
5e:f0:82:41:4c:de:35:be:3b:fe:bc:b0:33:65:9d:b1:cd:93:
e0:47:a9:f3:0c:5e:42:a0:a3:28:ea:cd:56:08:42:86:f9:60:
26:ed:89:fd:0e:9e:5d:c3:a5:5f:cb:9a:4b:b8:e9:d1:d3:5e:
00:71:1f:07:22:da:24:2a:f9:ce:71:fe:8b:29:b6:22:db:84:
44:07:7b:17:9a:6a:da:12:2c:6f:96:e5:c9:28:29:f2:73:97:
68:71:db:2c:4d:a6:37:17:93:12:98:17:a8:a2:96:fd:1d:85:
97:52:15:e2:26:6c:54:dd:f4:ba:d3:67:f9:f2:fb:03:4d:02:
f9:a0:92:20:68:99:9c:d9:04:12:6d:a9:e7:ab:fc:2a:ab:91:
43:9d:db:4b:4a:b8:d0:9d:22:c6:d2:9f:d0:3d:ee:fe:b4:ff:
6f:82:80:98:0d:4a:2c:69:83:26:87:0e:f1:e9:2c:e6:9c:55:
5e:5a:2c:cc:7a:be:3f:87:f8:a9:56:1e:e0:0b:03:32:7f:f0:
1d:1d:47:79:d3:cc:85:d5:a5:3a:b6:86:4d:c0:4e:fd:75:8e:
c7:94:39:22
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdyOHODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMz
MTA1MDkwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjIwYjVhNTRhZGU2
NmY0ZWRlOGViNDgyMjhmNGU4M2MyNmJiZDQxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJpfNRf1wGT9laCvF29rLDR6c/iD5Y+woa46pAZRSdJremtS
Psnkj/XCACDm9atiV3yYuXKBbzmFAIwLxh8RsXUt2oStDKPhvtIOcqJdGAOJnJ69
y92B4veaGG1rQqfTM4kjjMtsBGslMpFf1nsOnK6dyN4/MTzpeTE5kIGMAh9HDPTC
OE4qlAflpfFhCDhOdMssgJBfzQnW22reWpExs1k273Avd8Rpl1LPyZK1hpayJqCU
0RHZ95/xk2pPNcAiJ5wT3fEWgnozp+DinKhezlxb7eFMmr+gS7og8nEsbODTepq2
nDPFTaQPjYcuFHVp3/uoUj1S3bUN+8+1waKqyZ8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRiC1pUreZvTt6OtIIo9Og8JrvUEDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1lndGFWSzNtYjA3ZWpyU0NLUFRvUENhNzFCQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCOLb5EYEO+Um0TXRpBhWIGe8vQmubIimruqtdL
5Yp/obb4959e8IJBTN41vjv+vLAzZZ2xzZPgR6nzDF5CoKMo6s1WCEKG+WAm7Yn9
Dp5dw6Vfy5pLuOnR014AcR8HItokKvnOcf6LKbYi24REB3sXmmraEixvluXJKCny
c5docdssTaY3F5MSmBeoopb9HYWXUhXiJmxU3fS602f58vsDTQL5oJIgaJmc2QQS
bannq/wqq5FDndtLSrjQnSLG0p/QPe7+tP9vgoCYDUosaYMmhw7x6SzmnFVeWizM
er4/h/ipVh7gCwMyf/AdHUd508yF1aU6toZNwE79dY7HlDki
-----END CERTIFICATE-----
Generated at Thu May 1 01:28:53 2025 by rpki-client