Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YrtrksvCJtE8vXHcg7QrA9K99Us.roa
File: YrtrksvCJtE8vXHcg7QrA9K99Us.roa (raw, json)
Hash identifier: v8ZTnsRGkHVoS4tU2biRFVSJErmgY/q0SAlwnMI87rU=
Subject key identifier: 62:BB:6B:92:CB:C2:26:D1:3C:BD:71:DC:83:B4:2B:03:D2:BD:F5:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B7E033A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YrtrksvCJtE8vXHcg7QrA9K99Us.roa
Signing time: Fri 10 Jun 2022 06:10:04 +0000
ROA not before: Fri 10 Jun 2022 06:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2340291386 (0x8b7e033a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 06:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62bb6b92cbc226d13cbd71dc83b42b03d2bdf54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:5e:49:c1:f6:27:8b:69:29:7b:d4:0f:85:
ff:44:81:c9:43:5e:1e:c8:dd:60:74:ca:f7:4c:bb:
2c:ec:8c:ee:0e:ee:6d:0f:ab:6e:d5:21:ba:11:c6:
74:9c:04:28:15:af:f6:95:35:24:ab:83:59:be:cc:
db:01:d7:38:45:c7:0c:13:1e:4b:68:55:e4:85:89:
cc:99:4a:ba:5a:b2:58:e7:1f:37:7c:37:45:bf:4a:
4c:f8:eb:e9:18:07:24:bb:19:2d:f2:4b:c5:9b:9d:
43:4c:12:9b:68:d8:7e:a3:1e:db:d4:03:1d:94:3a:
fb:10:c0:21:22:ed:44:05:7b:88:f6:13:25:08:a6:
25:62:27:f0:db:31:e7:a2:36:c5:f0:c8:28:d2:fa:
3b:60:85:0c:1d:57:9c:28:b1:c8:84:fa:20:32:93:
90:32:69:e2:6e:f1:94:97:e2:85:92:16:ea:ac:32:
e7:0f:fb:82:48:92:43:70:80:64:30:31:a4:1d:b5:
39:21:b2:cb:70:da:af:7b:23:cf:22:7e:b5:14:f8:
7c:e6:76:8b:49:ec:7e:21:99:73:8d:91:20:19:ac:
e0:7d:3e:ab:f2:53:67:39:5d:2e:5a:c4:69:78:45:
25:a1:5a:dc:41:aa:25:8c:55:52:37:47:1e:f0:57:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BB:6B:92:CB:C2:26:D1:3C:BD:71:DC:83:B4:2B:03:D2:BD:F5:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YrtrksvCJtE8vXHcg7QrA9K99Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:02:50:c7:2a:d4:7b:07:c7:51:5b:bd:43:05:c2:f3:7c:97:
ff:e4:a1:f4:dc:04:d1:97:b5:2d:34:e4:dd:70:1d:3c:cf:a5:
1f:40:bc:cc:80:1f:5b:56:e0:ba:a9:c9:22:98:25:50:a0:f7:
93:18:b6:9f:47:47:54:a9:b0:ad:d7:4c:dc:6d:41:67:30:03:
51:19:fd:73:96:bf:27:36:21:99:6c:4f:4b:e4:65:60:62:47:
fc:f1:80:3b:cf:d2:e9:9e:68:fd:43:56:b6:53:a6:bf:6c:cf:
51:a4:a5:32:56:a4:1a:e1:9e:e3:ef:5e:2a:8e:c0:fb:46:a5:
fe:e3:e7:86:58:b0:88:98:fd:9c:7a:88:12:48:15:a8:b2:eb:
4c:1c:56:eb:84:31:fb:c2:27:4c:4d:8d:d3:0a:df:7c:07:fc:
21:86:29:d8:bb:97:e0:7d:63:45:a0:ad:26:e4:1d:0b:bc:b5:
1c:79:4f:6d:19:2a:af:92:8a:63:b0:35:29:ed:0d:7f:3d:73:
6f:32:a2:22:e6:0d:04:c8:8e:66:c8:a1:40:41:69:fc:61:0a:
ce:63:2a:25:44:c3:25:28:f8:c6:99:67:50:a4:9c:50:ab:8c:
5e:5a:89:98:c7:1b:6f:20:93:ff:33:3d:d7:6c:a9:df:af:68:
9d:53:7a:75
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIt+AzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTAwNjEwMDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDYyYmI2YjkyY2Jj
MjI2ZDEzY2JkNzFkYzgzYjQyYjAzZDJiZGY1NGIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxHl5JwfYni2kpe9QPhf9EgclDXh7I3WB0yvdMuyzsjO4O
7m0Pq27VIboRxnScBCgVr/aVNSSrg1m+zNsB1zhFxwwTHktoVeSFicyZSrpasljn
Hzd8N0W/Skz46+kYByS7GS3yS8WbnUNMEpto2H6jHtvUAx2UOvsQwCEi7UQFe4j2
EyUIpiViJ/DbMeeiNsXwyCjS+jtghQwdV5wosciE+iAyk5AyaeJu8ZSX4oWSFuqs
MucP+4JIkkNwgGQwMaQdtTkhsstw2q97I88ifrUU+HzmdotJ7H4hmXONkSAZrOB9
PqvyU2c5XS5axGl4RSWhWtxBqiWMVVI3Rx7wV671AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUYrtrksvCJtE8vXHcg7QrA9K99UswHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9ZcnRya3N2Q0p0RTh2WEhjZzdRckE5Szk5VXMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAEQJQxyrUewfHUVu9QwXC83yX/+Sh9NwE0Ze1
LTTk3XAdPM+lH0C8zIAfW1bguqnJIpglUKD3kxi2n0dHVKmwrddM3G1BZzADURn9
c5a/JzYhmWxPS+RlYGJH/PGAO8/S6Z5o/UNWtlOmv2zPUaSlMlakGuGe4+9eKo7A
+0al/uPnhliwiJj9nHqIEkgVqLLrTBxW64Qx+8InTE2N0wrffAf8IYYp2LuX4H1j
RaCtJuQdC7y1HHlPbRkqr5KKY7A1Ke0Nfz1zbzKiIuYNBMiOZsihQEFp/GEKzmMq
JUTDJSj4xplnUKScUKuMXlqJmMcbbyCT/zM912yp369onVN6dQ==
-----END CERTIFICATE-----
Generated at Sat May 3 02:22:17 2025 by rpki-client