Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YmoIHzpz4o9_huipnF6bNOvJj7k.roa
File: YmoIHzpz4o9_huipnF6bNOvJj7k.roa (raw, json)
Hash identifier: CEXGP3T9wRoclKxb6GkGIVPbyvV5BSn2tffdN2fmKyU=
Subject key identifier: 62:6A:08:1F:3A:73:E2:8F:7F:86:E8:A9:9C:5E:9B:34:EB:C9:8F:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018723D99B9CBE56C04996C038B891E9B90E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YmoIHzpz4o9_huipnF6bNOvJj7k.roa
Signing time: Mon 27 Mar 2023 16:14:36 +0000
ROA not before: Mon 27 Mar 2023 16:14:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:d9:9b:9c:be:56:c0:49:96:c0:38:b8:91:e9:b9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 16:14:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=626a081f3a73e28f7f86e8a99c5e9b34ebc98fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:7d:f8:9c:15:cc:45:33:46:f5:e9:45:cd:
68:e8:94:0c:e3:b3:ea:60:2e:49:ce:07:3f:2b:2b:
bd:51:65:82:fb:7d:d5:73:ef:a1:ce:1c:8c:6d:67:
58:7f:a2:e5:82:0a:fa:f9:cf:3c:2e:9c:92:6f:4e:
df:0d:52:c0:03:81:26:a5:d5:b7:18:d5:fa:8a:c7:
22:02:17:ad:24:09:af:3b:ff:94:37:e5:4e:0c:a6:
ca:b6:26:8c:e1:5a:94:bf:25:de:41:46:71:e5:a5:
e7:55:29:80:93:3d:a4:c8:f0:e7:67:05:84:e2:07:
a6:01:b6:98:ad:40:a2:14:a4:5b:a8:b2:fa:d7:12:
78:bc:77:b4:77:72:64:ec:e9:8a:b7:9d:89:3f:6b:
e3:91:e2:85:62:0a:3d:6e:a0:35:5b:bb:ea:47:45:
b6:b7:65:5b:0b:db:7f:dc:6d:95:ca:e2:f0:a0:b3:
5e:91:53:fa:90:e5:7f:6b:df:e5:6b:6c:2a:7b:31:
89:93:18:dc:55:3c:2a:4b:9e:91:b2:89:de:7e:d0:
29:1e:17:14:46:16:d8:e5:77:4e:f6:72:54:1c:2a:
b3:ae:3d:57:2d:44:a2:5c:45:de:82:10:9d:9f:be:
21:56:4a:20:a7:bb:2f:69:82:bd:3c:b9:06:e3:99:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:08:1F:3A:73:E2:8F:7F:86:E8:A9:9C:5E:9B:34:EB:C9:8F:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YmoIHzpz4o9_huipnF6bNOvJj7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:25:55:26:db:e7:86:a2:ab:e8:b2:30:eb:68:8d:5a:63:0c:
9f:09:39:2e:ce:d4:59:e4:28:89:d7:fc:18:b3:44:59:e1:e0:
1f:b1:1f:88:85:00:eb:9c:34:93:2f:cc:f0:05:ff:54:24:26:
0d:16:d0:bc:c3:e8:2f:ea:04:a2:eb:0f:a2:89:92:b3:03:fd:
a2:bc:e9:22:e0:d4:3a:07:66:09:5c:e3:a6:3a:11:bd:92:7c:
53:c3:de:99:c6:54:89:a0:7d:4a:8f:a3:92:7c:e4:06:ac:99:
4f:64:c2:85:8b:5f:2c:b7:de:8b:ff:2b:47:b3:2a:3e:40:86:
72:1c:90:93:68:68:cc:fa:84:64:80:93:fa:44:e8:22:59:e6:
bb:16:2b:d0:95:56:43:45:d7:95:fe:8b:23:46:87:c4:01:47:
42:ee:55:e1:3d:92:20:8f:d0:e1:b8:18:82:61:6f:29:b5:6a:
84:38:9b:b1:26:ea:39:4e:bf:d9:6a:11:97:58:2a:ae:30:dc:
e5:4c:e9:d9:3e:3d:34:16:8f:2b:11:70:e5:79:51:be:89:bb:
a8:8a:c9:f4:26:cf:e9:18:0c:28:29:33:5d:7f:da:be:95:42:
52:7e:64:b5:35:77:37:dc:06:4c:39:b1:9d:b0:91:9a:ad:42:
e7:ce:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:48:39 2025 by rpki-client