Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YqJHalWgWynv1K-_x9OYO7is8p0.roa
File: YqJHalWgWynv1K-_x9OYO7is8p0.roa (raw, json)
Hash identifier: XPyswgdP79upzmmJ5Fr9jamG7GZ6nasZ6zls6S1dXT0=
Subject key identifier: 62:A2:47:6A:55:A0:5B:29:EF:D4:AF:BF:C7:D3:98:3B:B8:AC:F2:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188239DE30C4DEFABA1CDC55A1B13FEAEFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YqJHalWgWynv1K-_x9OYO7is8p0.roa
Signing time: Tue 16 May 2023 08:12:09 +0000
ROA not before: Tue 16 May 2023 08:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:9d:e3:0c:4d:ef:ab:a1:cd:c5:5a:1b:13:fe:ae:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 08:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62a2476a55a05b29efd4afbfc7d3983bb8acf29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:06:c3:26:4b:fe:99:95:a5:30:4f:e8:3c:
2b:96:8d:ef:84:15:00:a6:4e:a6:45:b4:65:ee:74:
e1:ae:c9:07:61:31:f3:73:7c:ae:5d:7f:3c:f4:ea:
a4:7b:6f:c1:35:6f:66:53:c4:9c:b7:40:8a:b7:0e:
1b:3f:01:fe:a5:0d:0d:48:2b:90:6a:52:8e:01:43:
7f:8e:0e:34:1e:fb:55:29:4d:7c:35:40:a9:83:17:
37:45:47:84:1f:e0:f0:cc:ca:96:e1:8f:30:b7:a8:
8f:2b:f8:51:f9:59:12:d9:1d:68:48:63:34:18:53:
7d:7e:4d:ca:36:ae:17:7f:5d:89:c1:47:ec:82:9a:
ff:37:8a:65:6e:dd:45:9f:31:48:f0:f5:c7:c3:08:
b4:0f:fc:1c:3b:dd:04:f7:7c:72:50:bc:f9:9b:0a:
9c:71:2f:fb:4f:7f:d0:32:fa:91:7f:4c:9e:f5:48:
0d:6f:30:2d:0a:01:6f:f8:5d:eb:53:e5:cf:3c:36:
8b:fb:55:a4:0c:ab:8c:d0:67:ce:61:5b:63:62:81:
e5:6d:50:ab:41:4a:31:f1:98:5b:58:42:59:39:ae:
a6:50:7f:3e:04:9f:29:41:e3:8a:79:34:7f:b1:df:
14:6a:3f:03:d1:e0:e2:bd:8d:ea:8c:33:5a:dd:8b:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:47:6A:55:A0:5B:29:EF:D4:AF:BF:C7:D3:98:3B:B8:AC:F2:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YqJHalWgWynv1K-_x9OYO7is8p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:af:fa:5b:4e:bd:05:cb:80:2a:24:75:8f:35:f9:70:0f:e7:
62:c1:a4:b9:ae:d9:3a:bf:fb:20:b3:2d:06:89:e8:ab:6d:44:
0b:1d:cc:b3:5f:33:7a:c7:03:ec:9c:23:f0:be:65:ea:96:5a:
ba:87:4d:e0:c4:50:2c:2b:56:e0:61:7f:f1:bd:87:a6:c5:d7:
6e:1c:72:1b:a3:09:89:f4:c1:84:b4:03:5b:76:5e:8d:04:06:
85:5a:c2:86:26:e6:52:c1:66:4f:bb:13:9e:a7:b4:7a:f2:e4:
c9:87:01:56:1b:fe:7c:42:19:be:18:8c:a4:e1:a4:89:c2:a0:
b1:81:b4:10:ca:91:04:37:d7:ad:64:33:88:39:21:79:20:73:
fe:70:ed:1e:81:f5:b1:cc:e1:0c:5d:eb:b4:d9:e7:0b:da:dc:
20:cb:c2:32:30:05:b2:c8:04:c6:03:3d:66:5f:fe:90:53:1f:
10:5b:98:e7:7f:30:e0:73:23:f0:d0:de:06:22:9e:90:50:d3:
d0:82:6c:e5:b9:d8:83:78:ff:07:9c:64:12:d1:35:42:1a:b8:
ce:80:93:df:3c:59:8d:25:19:66:e4:45:c1:29:49:72:8b:93:
a9:ab:02:98:3f:aa:00:8d:c5:6e:b5:00:dd:10:b3:7b:81:5b:
d7:cf:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:53 2025 by rpki-client