Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YsZ7KoltS4yY7MjidIr0ZH8snhg.roa
File: YsZ7KoltS4yY7MjidIr0ZH8snhg.roa (raw, json)
Hash identifier: I686bikvXvd82fPx26pfsGVwXHvI86yhhaMymNNnZq8=
Subject key identifier: 62:C6:7B:2A:89:6D:4B:8C:98:EC:C8:E2:74:8A:F4:64:7F:2C:9E:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6EBADD71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YsZ7KoltS4yY7MjidIr0ZH8snhg.roa
Signing time: Tue 01 Mar 2022 11:09:13 +0000
ROA not before: Tue 01 Mar 2022 11:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857740145 (0x6ebadd71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 11:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c67b2a896d4b8c98ecc8e2748af4647f2c9e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:3c:e8:63:16:c0:eb:1b:b6:19:7d:12:ba:
81:11:76:3b:e5:fd:f8:b2:1c:65:0d:2b:d3:9c:a3:
b4:29:6f:61:8e:7e:36:d7:99:13:89:a9:b2:d8:a3:
3b:8a:79:fb:0b:e9:c3:5b:bc:ea:38:d3:9f:d4:31:
5e:56:a0:fc:b9:5a:31:d0:60:ac:74:e1:e3:2a:db:
d1:36:eb:61:de:3c:07:ea:9d:74:9c:81:b9:de:52:
cd:13:c6:7d:1e:0e:52:53:f6:dd:ff:41:61:21:10:
28:46:5b:30:94:92:ae:c4:11:8d:fd:ee:13:c4:14:
f5:14:41:b4:2f:17:3f:bb:fe:fc:76:cc:56:fc:8e:
f6:84:20:6c:ac:a4:2c:be:2a:e8:7a:e8:fd:29:2c:
5d:75:45:76:c9:33:d2:58:5c:62:aa:5a:64:0d:72:
4f:6c:83:bb:5d:c6:e8:88:d3:0f:b9:c3:ec:65:ac:
e3:22:ca:d4:35:67:2e:c4:20:b3:8f:78:bd:a6:12:
34:29:67:5c:5a:ad:67:8e:cd:b6:5a:ff:c4:ea:df:
b1:00:c0:cc:9a:12:8e:e8:24:22:54:44:5c:30:6b:
14:dd:d0:e5:48:d9:4b:3c:ef:db:53:1a:f9:28:82:
4d:ed:7e:ae:5d:f6:06:e6:d6:ff:18:a1:b8:78:0c:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C6:7B:2A:89:6D:4B:8C:98:EC:C8:E2:74:8A:F4:64:7F:2C:9E:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YsZ7KoltS4yY7MjidIr0ZH8snhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:27:7d:f6:b0:de:7a:74:e1:53:25:8e:0a:74:92:c7:55:95:
5a:00:46:38:e0:ad:54:f9:e9:d4:e8:90:7c:a2:c4:0e:d7:03:
37:92:33:04:b1:01:11:79:51:75:b3:7b:b4:77:cb:49:75:e7:
71:6e:0c:d7:25:dc:34:16:62:ba:10:a5:58:46:48:ed:b2:b1:
d1:af:38:46:99:13:6a:c3:b4:92:d5:5f:55:eb:be:a2:2e:eb:
24:7c:9b:b7:2c:b1:95:e4:6b:f8:9a:8b:96:b3:ab:cd:80:9c:
a4:1e:01:6d:c8:b6:e9:fd:c6:f4:10:98:53:7f:16:27:c5:1c:
95:e3:ac:73:55:3c:70:89:12:b5:91:90:47:09:04:54:8c:a9:
6e:ad:9b:83:27:d0:92:43:ba:2b:61:5a:69:00:01:de:3d:5f:
74:b4:8a:a1:1b:36:06:69:b2:f7:d2:33:d4:95:9d:19:4d:61:
cc:6c:b9:6c:f1:6a:13:f4:0c:23:03:8f:6e:bc:fd:bf:72:15:
87:76:08:c4:5f:7a:d6:f6:0c:cc:16:e1:d3:06:f0:ec:27:01:
8f:72:1e:d9:7e:6e:5c:df:12:db:94:f3:76:d6:3b:05:99:de:
a3:88:18:d8:ea:fa:37:8f:65:95:39:5d:bf:a0:06:58:2f:41:
90:81:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:07 2025 by rpki-client