Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YjjeLerIVYr-btZER5L9AZtsuYc.roa
File: YjjeLerIVYr-btZER5L9AZtsuYc.roa (raw, json)
Hash identifier: j/15pDGEn1ghoF2cjrLZyberQMrXHY/YlOtFHor/6Ug=
Subject key identifier: 62:38:DE:2D:EA:C8:55:8A:FE:6E:D6:44:47:92:FD:01:9B:6C:B9:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F4A84A1E4B8DEEEB1E1D860E8C774579
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YjjeLerIVYr-btZER5L9AZtsuYc.roa
Signing time: Fri 09 Dec 2022 02:13:00 +0000
ROA not before: Fri 09 Dec 2022 02:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f4:a8:4a:1e:4b:8d:ee:eb:1e:1d:86:0e:8c:77:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 9 02:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6238de2deac8558afe6ed6444792fd019b6cb987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:ac:58:3c:3b:35:7e:ad:5d:f1:46:5a:a6:
55:63:7e:22:18:6d:eb:1a:02:8f:1b:cf:b8:4e:7a:
bc:cb:59:67:8e:01:7e:8a:2c:b3:ad:b2:6d:7c:04:
8e:60:70:04:3d:b2:1d:18:e0:4d:f3:9f:a1:be:c0:
05:7a:07:bf:1a:e4:a5:8c:45:25:6f:53:23:dc:43:
9f:c9:21:81:5e:5d:b5:ff:31:83:05:77:ce:92:1a:
7f:7b:a4:89:9a:74:49:ad:58:1b:8a:eb:43:19:c3:
bf:3f:02:02:4f:47:b6:a8:30:ad:fe:96:d6:f1:21:
fd:56:1a:d2:f5:af:83:ff:3c:8b:db:be:ae:18:61:
cc:b9:d4:83:75:35:f8:85:90:46:23:6a:a0:e1:39:
02:d1:05:58:04:1d:2a:70:e6:20:6d:58:2c:d3:57:
a1:9e:10:18:db:c6:c1:7b:eb:5d:4e:84:db:e4:a8:
59:86:a9:30:81:04:92:3f:e3:1e:d8:18:9f:71:90:
06:6a:9d:6d:85:77:51:dd:ca:79:49:de:f8:63:e7:
d4:34:33:5d:bc:f6:d1:ed:1e:39:09:cc:ca:8e:23:
8f:d8:0f:f4:66:f0:d1:ea:f5:85:d1:65:44:f8:22:
f2:29:6b:2f:21:f3:6b:94:cd:36:7a:38:61:32:ba:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:38:DE:2D:EA:C8:55:8A:FE:6E:D6:44:47:92:FD:01:9B:6C:B9:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YjjeLerIVYr-btZER5L9AZtsuYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:c5:d8:f6:67:0e:ff:b6:81:60:be:a8:29:8d:b2:0c:ee:f9:
62:b8:1a:8d:86:28:b9:36:45:b5:eb:45:bc:ef:a3:09:f4:fd:
c8:d0:b0:90:08:e3:fb:cb:58:3b:dc:4b:c0:66:f1:4f:d5:d2:
51:37:78:9f:18:56:c9:d7:d4:8f:68:a8:e5:3d:ac:cd:f8:ad:
7c:1f:91:c6:e1:3f:c2:37:2e:58:63:46:00:7c:c5:f0:4a:b7:
d4:92:15:c9:a0:4d:9f:97:d8:a1:62:37:f0:17:00:a0:a2:2b:
dd:1b:11:06:67:6f:b2:20:a5:ca:4b:2c:e5:77:e4:ff:62:9e:
be:f9:53:38:14:e8:99:02:f9:15:07:22:c0:ce:1e:5b:24:1f:
4f:86:18:75:06:a4:7f:c8:01:af:91:df:f6:46:ba:b8:5b:18:
90:71:8b:3c:55:eb:fd:3d:a3:20:31:a6:d3:2e:3d:ad:8e:18:
a5:f3:41:93:ca:45:46:a6:9f:b6:3b:71:ce:98:6e:4d:cb:0f:
09:28:48:54:5f:70:65:7e:92:65:c4:63:91:19:da:8b:46:ea:
55:af:33:cc:ad:bf:d1:7c:44:16:7e:26:68:c8:e8:d1:5b:03:
bd:d0:be:9d:44:9b:34:8d:c0:94:02:c1:c1:33:85:10:5f:0e:
2e:6d:e7:a4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYT0qEoeS43u6x4dhg6Md0V5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA5MDIxMzAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjM4ZGUyZGVhYzg1NThhZmU2ZWQ2NDQ0NzkyZmQwMTliNmNiOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiECsWDw7NX6tXfFGWqZVY34iGG3r
GgKPG8+4Tnq8y1lnjgF+iiyzrbJtfASOYHAEPbIdGOBN85+hvsAFege/GuSljEUl
b1Mj3EOfySGBXl21/zGDBXfOkhp/e6SJmnRJrVgbiutDGcO/PwICT0e2qDCt/pbW
8SH9VhrS9a+D/zyL276uGGHMudSDdTX4hZBGI2qg4TkC0QVYBB0qcOYgbVgs01eh
nhAY28bBe+tdToTb5KhZhqkwgQSSP+Me2BifcZAGap1thXdR3cp5Sd74Y+fUNDNd
vPbR7R45CczKjiOP2A/0ZvDR6vWF0WVE+CLyKWsvIfNrlM02ejhhMrqvhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGI43i3qyFWK/m7WREeS/QGbbLmHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWWpqZUxlcklWWXItYnRaRVI1TDlBWnRzdVljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJrF2PZnDv+2gWC+qCmN
sgzu+WK4Go2GKLk2RbXrRbzvown0/cjQsJAI4/vLWDvcS8Bm8U/V0lE3eJ8YVsnX
1I9oqOU9rM34rXwfkcbhP8I3LlhjRgB8xfBKt9SSFcmgTZ+X2KFiN/AXAKCiK90b
EQZnb7IgpcpLLOV35P9inr75UzgU6JkC+RUHIsDOHlskH0+GGHUGpH/IAa+R3/ZG
urhbGJBxizxV6/09oyAxptMuPa2OGKXzQZPKRUamn7Y7cc6Ybk3LDwkoSFRfcGV+
kmXEY5EZ2otG6lWvM8ytv9F8RBZ+JmjI6NFbA73Qvp1EmzSNwJQCwcEzhRBfDi5t
56Q=
-----END CERTIFICATE-----
Generated at Thu May 1 06:12:44 2025 by rpki-client