Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yp8UaIwYaACIlxNkq9UXjzgK-60.roa
File: Yp8UaIwYaACIlxNkq9UXjzgK-60.roa (raw, json)
Hash identifier: e0iQ1dLwhtPWihmxXesDaUbQD6NCXCum2BsUMnWcP70=
Subject key identifier: 62:9F:14:68:8C:18:68:00:88:97:13:64:AB:D5:17:8F:38:0A:FB:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3F86486FF4D71E1466CA7E6778B5F047
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yp8UaIwYaACIlxNkq9UXjzgK-60.roa
Signing time: Tue 29 Aug 2023 04:21:19 +0000
ROA not before: Tue 29 Aug 2023 04:21:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:86:48:6f:f4:d7:1e:14:66:ca:7e:67:78:b5:f0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 04:21:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=629f14688c18680088971364abd5178f380afbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:f7:4c:3b:00:b7:90:98:ce:4f:fe:00:1d:
6d:d5:7b:4d:c9:a9:b0:7d:d6:ea:5e:c9:c9:5c:dc:
dd:cf:07:76:9e:ef:8f:74:fd:6d:c7:78:65:7c:95:
97:66:53:ac:0e:65:c9:61:f4:2f:ac:e4:72:0d:a6:
ab:f7:c5:bf:f7:9c:e0:70:d3:4a:ec:5a:8e:75:8e:
c1:dd:eb:bc:2c:c7:d9:6b:c5:9a:c4:e1:89:e4:ea:
82:3d:46:7d:e6:74:c1:8a:c9:61:97:88:ef:f8:99:
1a:4a:e1:dd:24:c3:ff:0d:64:57:00:f1:c4:ba:35:
2d:63:24:e5:9e:52:a8:aa:4e:97:c2:5f:85:7f:68:
d7:81:82:4e:9a:93:9b:0f:38:3b:83:a5:1a:bf:dc:
d0:94:6c:e2:19:e3:ba:74:29:c0:8d:03:c7:20:f0:
73:c5:13:ea:2e:cc:79:df:fd:53:99:58:07:91:5c:
b4:03:f5:9a:4c:c8:8d:a1:a2:11:cf:9f:20:20:95:
53:04:68:5a:96:b0:92:b4:db:d4:7e:db:96:1b:03:
eb:c7:21:68:ed:4f:16:80:73:1f:1a:24:1f:00:3f:
f3:2d:b5:7b:5d:ba:33:3d:3d:dc:0c:93:02:93:67:
4c:4e:a2:57:f4:2d:da:50:a9:b6:f9:6f:cc:d4:e3:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:14:68:8C:18:68:00:88:97:13:64:AB:D5:17:8F:38:0A:FB:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yp8UaIwYaACIlxNkq9UXjzgK-60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:46:90:fc:a9:bc:b6:0f:e9:a4:9d:69:b6:3a:dc:72:5c:0c:
13:a5:f1:a9:f8:71:4a:c9:f6:bc:eb:9b:b3:5b:87:40:a1:99:
74:dd:04:34:b3:2d:d3:8a:26:3c:45:24:52:8c:1f:93:a7:28:
5e:fe:be:77:bc:50:54:0a:f6:a6:d7:d0:73:70:02:96:c0:17:
82:34:3a:37:60:02:0e:10:64:ae:c0:d8:27:8d:e3:a2:a0:b3:
73:b8:a1:74:f5:07:5b:79:63:46:19:5f:51:62:d1:27:4f:d2:
1a:a3:8f:bf:e4:d3:2f:eb:2c:49:df:c2:ed:48:fc:23:d4:80:
38:11:66:ed:5c:20:c6:d4:cc:e3:30:62:24:43:70:21:9b:de:
f1:87:69:cf:66:3f:2b:c2:fa:38:05:cc:38:bb:f7:3a:59:92:
77:d1:da:27:41:a3:0b:02:4f:bb:23:bc:2d:57:39:cf:57:19:
68:6e:fa:87:0f:90:f2:0c:9d:df:ac:76:fd:5b:c8:15:3a:4f:
5b:5e:f5:ac:89:ed:14:87:bc:8f:ab:fd:be:cf:f0:81:6d:7f:
bc:bd:b0:41:99:03:80:7e:25:9d:7a:85:92:b4:76:4d:47:63:
5b:bc:81:37:a4:71:77:bd:07:71:ad:95:d4:0e:82:2d:e2:d6:
ce:bf:bc:26
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo/hkhv9NceFGbKfmd4tfBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI5MDQyMTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjlmMTQ2ODhjMTg2ODAwODg5NzEzNjRhYmQ1MTc4ZjM4MGFmYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOv3TDsAt5CYzk/+AB1t1XtNyamw
fdbqXsnJXNzdzwd2nu+PdP1tx3hlfJWXZlOsDmXJYfQvrORyDaar98W/95zgcNNK
7FqOdY7B3eu8LMfZa8WaxOGJ5OqCPUZ95nTBislhl4jv+JkaSuHdJMP/DWRXAPHE
ujUtYyTlnlKoqk6Xwl+Ff2jXgYJOmpObDzg7g6Uav9zQlGziGeO6dCnAjQPHIPBz
xRPqLsx53/1TmVgHkVy0A/WaTMiNoaIRz58gIJVTBGhalrCStNvUftuWGwPrxyFo
7U8WgHMfGiQfAD/zLbV7XbozPT3cDJMCk2dMTqJX9C3aUKm2+W/M1ON3cQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGKfFGiMGGgAiJcTZKvVF484CvutMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWXA4VWFJd1lhQUNJbHhOa3E5VVhqemdLLTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI5GkPypvLYP6aSdabY6
3HJcDBOl8an4cUrJ9rzrm7Nbh0ChmXTdBDSzLdOKJjxFJFKMH5OnKF7+vne8UFQK
9qbX0HNwApbAF4I0OjdgAg4QZK7A2CeN46Kgs3O4oXT1B1t5Y0YZX1Fi0SdP0hqj
j7/k0y/rLEnfwu1I/CPUgDgRZu1cIMbUzOMwYiRDcCGb3vGHac9mPyvC+jgFzDi7
9zpZknfR2idBowsCT7sjvC1XOc9XGWhu+ocPkPIMnd+sdv1byBU6T1te9ayJ7RSH
vI+r/b7P8IFtf7y9sEGZA4B+JZ16hZK0dk1HY1u8gTekcXe9B3GtldQOgi3i1s6/
vCY=
-----END CERTIFICATE-----
Generated at Thu May 1 14:59:24 2025 by rpki-client