Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yv_6K_K4_KtZLvN-zlzc2uUGf8s.roa
File: Yv_6K_K4_KtZLvN-zlzc2uUGf8s.roa (raw, json)
Hash identifier: OPQ8spv/iizhrw9jLP+dvu2jnCCFYylb3btmChbM1SM=
Subject key identifier: 62:FF:FA:2B:F2:B8:FC:AB:59:2E:F3:7E:CE:5C:DC:DA:E5:06:7F:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A13F1BF345DAC1BE903395977AF78DEA7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yv_6K_K4_KtZLvN-zlzc2uUGf8s.roa
Signing time: Sun 20 Aug 2023 17:15:24 +0000
ROA not before: Sun 20 Aug 2023 17:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:13:f1:bf:34:5d:ac:1b:e9:03:39:59:77:af:78:de:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 17:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62fffa2bf2b8fcab592ef37ece5cdcdae5067fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:3f:48:93:28:68:8c:7b:68:da:96:eb:95:
70:72:a7:2a:d1:eb:3c:b2:2e:a3:27:bb:05:fc:31:
d7:ef:3a:8b:9b:5b:1f:6f:4a:c8:fe:ef:5d:f6:8e:
c7:82:f3:fb:a5:55:89:50:2c:21:43:44:60:73:07:
32:6a:90:83:01:eb:0e:33:a0:87:89:a0:3e:16:b3:
e5:6a:4a:65:e9:63:21:fa:fe:ba:00:93:d5:43:24:
75:dc:8f:46:b1:49:a7:73:a8:ec:6c:d7:61:e2:d5:
be:ae:80:46:73:d3:b3:84:39:f6:98:d8:b9:40:7c:
ac:8f:ba:21:85:74:40:60:55:96:54:e4:1d:4b:81:
a5:39:e3:9a:54:d2:f6:83:46:7b:4e:8e:05:9c:e0:
bb:3a:02:80:bb:3c:6a:be:ee:93:c6:e8:3e:a6:6e:
7c:aa:1e:97:f7:a2:e0:4d:05:6d:8e:33:0f:9b:29:
8f:2e:ce:9f:c6:2f:29:48:ac:9e:f8:b7:5a:eb:65:
02:58:99:fe:b7:89:c0:3b:0b:a4:e1:4f:ba:27:7e:
c4:54:a4:11:3e:a7:fe:25:16:57:80:cc:07:10:b5:
8c:3b:bf:33:16:b0:5e:8a:59:58:32:03:ef:5c:f9:
20:25:83:9a:cd:76:9f:8c:1b:4e:54:ce:9f:79:f7:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:FA:2B:F2:B8:FC:AB:59:2E:F3:7E:CE:5C:DC:DA:E5:06:7F:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yv_6K_K4_KtZLvN-zlzc2uUGf8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:dc:0c:3f:e8:3a:af:b0:ce:3e:ae:8d:cf:b2:7c:08:d4:17:
95:68:bd:25:09:b4:d9:9d:d4:3b:91:b9:eb:a2:c9:52:1a:55:
22:34:8a:83:61:3f:f1:b7:69:e9:c0:82:20:05:b5:01:43:07:
30:9b:4e:b6:7f:2a:6b:ef:c2:1e:39:9d:71:4b:da:5d:b4:8a:
35:73:30:1b:79:cd:b3:39:82:33:47:fc:32:b7:7a:5c:ed:64:
11:ec:ec:82:0d:32:02:2b:0f:f8:89:f0:77:e9:32:a0:35:c0:
7c:4b:31:1e:df:49:76:3a:4d:31:be:29:4f:11:3c:eb:51:94:
94:7b:79:ac:06:c6:94:06:c3:34:10:1a:5f:1a:6a:7f:bd:31:
05:a9:44:37:cb:86:c9:6b:c7:21:02:ca:62:09:4c:6f:1a:d1:
18:70:5f:7c:be:de:4e:a5:ea:ea:cc:77:2f:da:7d:43:ab:0f:
e3:38:d0:60:51:52:b6:5c:c3:39:44:07:7c:4a:6c:b7:ba:92:
1c:e1:2b:54:9b:4a:d9:9d:49:1c:99:73:78:a2:36:67:8f:58:
64:74:d8:d5:ad:38:a0:33:44:73:6d:46:cb:70:cd:fc:bb:e2:
5e:49:69:06:af:89:36:82:64:1b:37:6f:2e:2f:6f:52:c5:69:
c1:9a:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:58:22 2025 by rpki-client