Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YsgHqC0L9l5wgj0LU89wiKdTJBU.roa
File: YsgHqC0L9l5wgj0LU89wiKdTJBU.roa (raw, json)
Hash identifier: aNNTKvQV4flzJmc5D3diLUM1vcpMkxWnjTDj+xHyRQw=
Subject key identifier: 62:C8:07:A8:2D:0B:F6:5E:70:82:3D:0B:53:CF:70:88:A7:53:24:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73F3D260
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YsgHqC0L9l5wgj0LU89wiKdTJBU.roa
Signing time: Sat 19 Mar 2022 22:10:29 +0000
ROA not before: Sat 19 Mar 2022 22:10:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945358944 (0x73f3d260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 22:10:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c807a82d0bf65e70823d0b53cf7088a7532415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:91:ef:b7:67:bc:6d:3c:33:2e:80:4f:90:
8a:4c:c7:52:25:01:3c:0b:cd:ed:f6:75:62:cf:3f:
a3:c8:db:dd:b1:c6:af:74:6d:94:22:cc:70:7e:99:
7b:7a:87:c4:87:6a:07:b8:ee:f5:7b:27:9f:83:71:
0a:4b:4c:15:b5:90:13:5d:f0:12:5f:02:f8:2c:40:
fe:18:63:d2:89:9f:41:c7:f2:26:87:b7:db:f8:d2:
2c:c9:d7:4f:71:6a:8f:ed:f7:9a:4b:56:ac:ed:08:
92:3b:93:8e:bf:52:fc:a2:94:5f:89:78:69:82:e2:
0e:83:0b:f3:e7:b2:55:81:92:dc:3e:0d:54:5b:d6:
4b:15:82:f7:ef:aa:14:a5:2e:28:d9:12:8b:4b:bd:
db:a6:a4:b3:39:42:cc:72:79:6f:1b:24:da:64:70:
de:40:94:3a:3f:15:7c:dc:f0:e2:ef:9b:08:f1:cf:
11:b9:c0:dc:11:b8:60:ad:d4:d8:b5:7d:97:72:d2:
92:39:1d:75:0d:e2:04:d8:8d:b3:ac:bf:6e:30:75:
87:7c:44:cb:29:69:01:63:53:aa:12:b6:e1:c2:8f:
e8:bd:58:09:ef:ee:3b:59:83:43:5c:77:fd:b9:af:
ed:53:1e:6a:5d:c6:b6:c0:ac:ea:46:4a:bd:f9:d3:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C8:07:A8:2D:0B:F6:5E:70:82:3D:0B:53:CF:70:88:A7:53:24:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YsgHqC0L9l5wgj0LU89wiKdTJBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:b3:7a:b5:2d:44:03:97:42:e4:4b:b8:d0:c3:f5:7d:26:7d:
98:18:01:05:19:7f:19:7d:c2:ea:1a:47:91:74:1a:6e:f6:38:
8b:61:a1:ea:62:8e:b9:9d:f4:47:58:9f:0d:f4:2f:fc:bb:1d:
45:62:80:ac:7a:55:c6:ed:c7:b0:a0:5f:0a:ba:2c:ed:58:2b:
d8:77:70:f7:ce:24:d0:76:13:d3:8b:e6:45:86:a7:86:17:e5:
de:8d:e6:3c:18:28:65:25:11:06:41:13:33:9c:d8:21:8a:a3:
25:a0:dd:18:fd:4f:62:4c:f4:8a:33:b6:b7:2a:13:e7:18:98:
5a:6a:8b:85:b3:5f:b1:c2:bf:e9:43:9e:d4:ce:5c:34:9b:9f:
61:d9:89:4b:e7:8e:78:ca:c5:97:2d:dc:46:88:d7:eb:e7:59:
05:3b:62:8f:16:54:fc:fd:a5:47:5f:07:1f:ea:8e:7a:70:dd:
4a:15:cf:8c:f0:16:06:3c:2f:08:ca:fc:2a:1f:4a:30:84:a0:
9e:9f:4a:a9:45:31:7e:03:3b:5c:68:58:86:cb:05:a1:ae:aa:
69:f1:27:a0:a8:53:a7:05:b9:82:1a:1f:a3:75:ac:00:d1:80:
93:e8:7c:ef:b4:04:47:19:ae:ab:53:d0:88:78:68:21:70:fa:
3e:a4:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:47:20 2025 by rpki-client