Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yt0_u19YmpyZOmLZZfCgMuTTzG0.roa
File: Yt0_u19YmpyZOmLZZfCgMuTTzG0.roa (raw, json)
Hash identifier: KiIbilFrY+sh4c6FrASZpSPUHS/+99/ZPN7DhPypfC0=
Subject key identifier: 62:DD:3F:BB:5F:58:9A:9C:99:3A:62:D9:65:F0:A0:32:E4:D3:CC:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884A367D0D418DFC12E270A284E2035D72
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yt0_u19YmpyZOmLZZfCgMuTTzG0.roa
Signing time: Tue 23 May 2023 20:04:24 +0000
ROA not before: Tue 23 May 2023 20:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:188:4a36:52e3/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4a:36:7d:0d:41:8d:fc:12:e2:70:a2:84:e2:03:5d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 20:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62dd3fbb5f589a9c993a62d965f0a032e4d3cc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:01:96:0e:7e:4b:49:b9:5c:84:bb:46:bc:
79:d6:61:a2:37:49:12:f5:21:e8:23:85:05:41:65:
e4:49:31:41:8c:da:b6:74:39:e2:90:70:95:79:8e:
1a:16:78:26:26:31:fe:f4:7b:47:5b:6c:09:f5:b9:
b8:13:6d:d7:d8:ca:05:eb:07:47:69:f4:f3:c4:1f:
5a:46:03:e9:87:d3:be:b6:8b:23:44:7d:4b:ff:9f:
45:28:db:9e:b1:69:11:60:cf:70:ae:9c:07:8a:6c:
7a:bd:fa:47:e1:e1:ab:fb:70:77:e5:40:65:c8:43:
2f:aa:c2:f3:d9:ca:bb:e3:8e:e7:d7:f9:d7:fd:8f:
6e:0a:f4:79:f0:d2:22:09:e0:1d:b0:06:4b:1c:9a:
25:ca:62:e4:cc:16:c5:51:54:26:3d:fa:ac:87:77:
92:b0:ce:3b:73:3e:ed:41:a5:e8:00:58:6d:1c:1a:
67:4f:a4:3e:5f:08:3a:fe:c8:5a:2b:b9:d4:2e:ba:
3f:95:d2:b2:35:1c:53:d7:85:5d:27:98:9c:e7:03:
d3:cd:29:0e:0b:e2:fe:64:d2:e4:e4:33:2e:9b:70:
3a:24:d9:74:ec:fd:a1:cb:a8:20:c1:d5:57:04:8d:
29:4f:66:3c:e4:d3:cb:0d:7a:33:e0:20:98:1c:6e:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:3F:BB:5F:58:9A:9C:99:3A:62:D9:65:F0:A0:32:E4:D3:CC:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yt0_u19YmpyZOmLZZfCgMuTTzG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:32:0f:ad:f7:09:3c:76:c4:cb:f7:de:85:4d:75:b1:81:33:
d1:87:c9:d6:29:ae:34:07:81:d6:0d:61:a7:6a:e2:70:a6:7c:
e2:81:91:dd:20:ff:35:5a:eb:6b:e6:94:8d:db:2f:a7:ed:1f:
08:fe:ab:67:93:83:e1:95:2f:fb:ad:c1:88:e6:3c:df:a3:4d:
75:fe:05:97:2a:75:b0:76:2a:f0:73:46:7b:95:e8:b5:3d:d2:
61:2e:6e:44:c7:03:8d:dc:5a:4b:c8:73:2e:57:a6:65:6f:7f:
f5:39:ae:b6:8e:2c:47:44:e3:93:3f:16:b1:ee:fc:23:9f:3d:
24:76:86:6d:97:4d:5c:c8:40:1c:a1:d8:91:5c:72:17:b9:f5:
29:65:bf:65:29:b8:35:0c:54:67:3b:af:b2:4e:c6:5b:8d:6d:
24:86:68:9e:6f:6b:69:52:7c:bd:f1:8d:c5:6d:c9:0b:b3:a2:
cb:51:bb:2e:94:6f:0b:4e:4a:ec:c0:15:c4:2b:e6:9a:4f:02:
80:ea:f9:bf:0e:e3:89:84:cb:8f:42:66:29:84:a8:9f:10:b5:
7e:2b:2c:1e:aa:fa:da:29:14:5f:05:de:6e:bb:98:a1:75:5e:
19:58:ab:fb:27:50:62:4e:3e:0c:08:42:2f:7c:fa:79:a0:0c:
54:5f:ea:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:05:44 2025 by rpki-client