Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ysj_lDW2J0EV9ZWnl1gAH2Er-J4.roa
File: Ysj_lDW2J0EV9ZWnl1gAH2Er-J4.roa (raw, json)
Hash identifier: L3Fz8MEv+OkdOEapZjy7bijh9rATAc/qvdIvHGZPAH4=
Subject key identifier: 62:C8:FF:94:35:B6:27:41:15:F5:95:A7:97:58:00:1F:61:2B:F8:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DDE737519E5F05502FC9EE7588DE5E39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ysj_lDW2J0EV9ZWnl1gAH2Er-J4.roa
Signing time: Sun 04 Dec 2022 16:10:28 +0000
ROA not before: Sun 04 Dec 2022 16:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:e7:37:51:9e:5f:05:50:2f:c9:ee:75:88:de:5e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 16:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c8ff9435b6274115f595a79758001f612bf89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:18:9b:90:5b:27:4c:55:dc:92:84:57:59:
98:b4:ca:cd:e4:46:3d:03:b4:d0:ed:73:b6:eb:ed:
b0:f8:79:1c:94:04:99:5e:ea:59:5d:b1:b6:42:39:
3c:db:0b:03:b0:7a:0a:07:d8:e3:cf:35:c4:1e:57:
28:45:fb:3c:9c:5d:3a:2e:60:ff:f5:ad:b7:80:05:
5a:85:97:56:74:fd:9b:a3:ac:e5:dc:a8:5b:72:8e:
db:68:f9:f0:4b:e2:9d:c6:64:58:aa:f2:63:f9:18:
19:95:99:86:fc:14:d2:e9:b4:6c:22:c7:66:dd:67:
cf:ca:06:80:dd:35:7b:b9:68:ea:bf:f7:1b:72:29:
9c:f9:a1:9f:cb:0d:91:a1:87:23:bf:c1:72:80:a5:
39:16:ea:61:4f:14:dd:89:d7:a3:69:ba:1d:7c:7c:
b5:82:b6:c4:3c:36:67:df:46:5a:4e:39:4e:a1:dd:
60:12:50:fc:b7:c6:68:e0:2d:5e:3a:00:db:a1:be:
dc:53:eb:4a:67:18:3c:45:97:4b:5d:7e:f0:d5:14:
e1:81:dd:cf:d3:e4:5f:47:42:48:7f:1d:8c:ee:51:
d6:13:9f:c5:58:14:a7:b4:16:12:59:59:4a:b5:63:
a1:6c:8c:22:3f:a3:df:c2:45:95:6d:1e:f2:fd:9c:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C8:FF:94:35:B6:27:41:15:F5:95:A7:97:58:00:1F:61:2B:F8:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ysj_lDW2J0EV9ZWnl1gAH2Er-J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:8d:70:b1:60:d7:2f:2c:b4:3a:17:f4:92:11:be:33:b1:e5:
e6:b2:b9:21:15:6b:af:62:06:39:09:cd:9c:f2:f0:0d:ae:98:
b4:8d:fa:fc:a4:c8:23:39:b7:4f:ab:0c:86:f3:ad:06:e5:53:
01:c3:2b:b6:cd:06:da:52:aa:86:fe:45:09:48:5d:35:17:4a:
07:a9:20:80:e8:cd:85:da:26:f3:6c:12:2f:0c:35:59:0c:f9:
84:f3:90:5a:5d:71:9e:70:f8:84:2f:8f:29:50:bb:28:84:42:
4f:27:4a:fc:ee:c1:6d:0a:82:50:69:6d:9d:1d:4d:37:1d:44:
31:fc:2a:88:7a:44:c4:1c:cf:7f:00:7e:e1:bd:74:d5:d9:03:
26:5d:10:92:0f:5b:a9:7c:84:72:1b:11:eb:a8:f2:6f:36:64:
cf:d6:ec:81:b4:74:4d:8a:7a:1d:f0:81:ab:f4:68:10:9a:d1:
68:5f:ff:3b:c4:ff:b9:28:57:d3:e8:ea:c6:45:0f:5f:ce:7d:
91:62:d7:a8:06:85:f9:cc:35:2b:6e:72:0a:10:fe:f7:ce:48:
f1:5c:43:a1:61:dd:b2:c9:7b:a6:82:25:7d:cc:73:99:d5:d8:
d9:bf:88:d1:af:ae:0f:2e:9b:81:ee:6b:b8:cf:6b:8e:af:1b:
ff:83:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:39:24 2025 by rpki-client