Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YmgeRbYm7AZr76MFP6VzemKVaV0.roa
File: YmgeRbYm7AZr76MFP6VzemKVaV0.roa (raw, json)
Hash identifier: TO8PSq4NlOQp39L8e3/qm/5od1X6yjFjv7cwoQWvUnQ=
Subject key identifier: 62:68:1E:45:B6:26:EC:06:6B:EF:A3:05:3F:A5:73:7A:62:95:69:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BFAB89A506A2F1E748DEF773A687B85D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YmgeRbYm7AZr76MFP6VzemKVaV0.roa
Signing time: Mon 28 Nov 2022 19:16:40 +0000
ROA not before: Mon 28 Nov 2022 19:16:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:ab:89:a5:06:a2:f1:e7:48:de:f7:73:a6:87:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 28 19:16:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62681e45b626ec066befa3053fa5737a6295695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:98:a2:11:bf:60:50:3f:bc:8e:d6:d6:b8:
7f:cb:77:d0:f8:ad:7b:7c:dc:25:91:23:c0:bc:2b:
40:1d:c4:63:10:9d:a8:47:21:b7:23:79:3c:de:95:
0d:1c:0e:fa:06:b9:1f:df:4d:8e:15:eb:ed:cd:1c:
cb:08:15:34:79:b8:c2:c0:04:72:26:f7:58:73:cb:
76:1b:a2:46:e4:8a:cf:b8:49:8e:9f:e4:0e:a7:c6:
00:3d:77:d0:25:f8:2e:ba:45:03:5b:90:02:20:e7:
c0:94:a8:1c:3e:1a:3d:c8:ed:1d:bc:09:d1:03:2f:
3f:b3:d2:86:ce:7f:51:37:9c:54:88:16:3b:6e:53:
26:fb:f6:80:1b:57:06:55:7d:dc:b5:42:52:3a:50:
5e:6f:da:0c:9a:c4:76:a6:f2:4a:c9:48:14:ca:2a:
a3:db:5b:ac:ab:fc:8d:9b:59:4b:5c:b0:dd:37:28:
dc:8a:cd:7e:40:26:30:e4:44:5c:a3:6b:da:ef:6b:
07:87:02:a7:dd:9c:74:69:1c:0e:ae:92:12:09:c0:
37:03:5e:92:23:41:f9:29:88:8f:f4:be:1c:7d:76:
d6:ea:ed:fc:5c:1a:9a:fe:1e:df:c9:57:af:83:17:
d5:9e:99:cd:60:bf:f8:3a:b3:b8:3c:36:c0:91:8b:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:1E:45:B6:26:EC:06:6B:EF:A3:05:3F:A5:73:7A:62:95:69:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YmgeRbYm7AZr76MFP6VzemKVaV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:66:12:73:1d:bb:5c:d0:4a:51:d8:b7:3b:25:0e:31:14:ac:
58:21:01:66:e0:8c:a5:9c:95:d3:72:51:55:8a:b3:81:99:e0:
f0:b0:30:e3:de:04:4f:b4:e1:07:67:5f:55:be:9f:a3:51:4d:
bf:9d:2f:ba:86:20:96:a4:30:e3:d6:91:77:9a:a6:c0:26:dd:
af:89:db:3f:e5:6e:f7:a9:34:93:77:94:35:39:c1:d4:d4:e2:
37:c1:de:16:de:17:83:e7:1b:db:36:c3:ec:c8:08:69:a6:fc:
a1:5a:b1:85:a1:a3:a7:7f:2d:66:69:8d:c9:57:93:ac:a8:71:
a0:22:8b:44:4c:fc:2a:c7:45:a0:02:33:e7:89:85:09:53:8a:
dd:b1:5c:cf:66:41:96:a3:48:51:00:01:2c:1f:64:7d:ee:65:
ab:e9:5c:4e:7d:5c:3e:e8:63:28:fe:e7:02:a6:1e:7b:1d:80:
92:85:fa:46:f2:ee:5e:ec:65:8d:63:ba:2f:4d:a8:86:10:61:
7c:e7:88:df:3a:4d:7e:2f:2f:d4:a0:01:7d:37:2c:73:df:55:
2e:26:31:19:9c:5b:f7:50:d4:45:de:55:f0:79:16:98:97:82:
73:6d:85:ef:03:88:c5:74:a7:90:61:4d:7e:4c:ae:64:9f:a1:
a3:a6:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:23 2025 by rpki-client