Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YwplwIL5JEovbklmQKC2qsrIEiY.roa
File: YwplwIL5JEovbklmQKC2qsrIEiY.roa (raw, json)
Hash identifier: QvjDnY29M792xkXpv3H7Qh+jx/iNogWh9AUt61qNGWg=
Subject key identifier: 63:0A:65:C0:82:F9:24:4A:2F:6E:49:66:40:A0:B6:AA:CA:C8:12:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D51B061E93386C6B95A028625AEA1B23
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YwplwIL5JEovbklmQKC2qsrIEiY.roa
Signing time: Fri 02 Dec 2022 23:10:28 +0000
ROA not before: Fri 02 Dec 2022 23:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d5:1b:06:1e:93:38:6c:6b:95:a0:28:62:5a:ea:1b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 23:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=630a65c082f9244a2f6e496640a0b6aacac81226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8f:70:30:c9:b2:8f:89:32:e4:05:03:4c:3f:
74:ef:a4:3a:62:3d:8a:e4:43:dc:df:6e:c3:86:d7:
3d:06:95:bc:4b:aa:2f:92:4e:5c:dd:28:d0:1c:fb:
6b:1e:27:f3:a1:f1:91:74:20:9e:51:b1:38:d2:24:
48:7a:6c:a3:0c:e1:a3:e0:57:cc:79:ea:5f:47:40:
67:40:c9:ea:82:20:b3:fd:25:ab:2e:c9:b6:98:1b:
0b:c8:7b:8a:b2:06:e7:de:4c:47:2e:98:de:5a:93:
cd:bd:13:99:8a:f4:6f:93:80:29:0b:c0:5c:c8:df:
a7:13:c0:03:66:71:e0:f0:f6:c6:0a:eb:57:9d:66:
38:99:36:59:e8:23:6f:35:ad:b5:68:b1:ed:61:57:
3b:68:1c:a5:e6:a7:b6:01:66:42:e9:60:c1:1e:cf:
8f:64:08:fc:3e:76:1d:f1:65:ab:3e:bd:99:5d:57:
d8:0e:05:3a:0e:5e:a3:d9:4e:dd:de:21:b8:9a:2e:
29:22:d8:b8:f5:f8:2c:ef:6d:fb:6e:b1:5b:7b:c9:
2e:d5:9e:a5:bb:7a:d0:e0:d8:9d:c9:d3:94:3f:b8:
1a:bd:ca:8a:b1:1d:a0:d6:71:ed:7e:19:4e:b6:71:
f2:2f:06:7c:fb:5e:7f:bb:fd:be:21:41:a0:b7:d8:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:65:C0:82:F9:24:4A:2F:6E:49:66:40:A0:B6:AA:CA:C8:12:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YwplwIL5JEovbklmQKC2qsrIEiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:69:e4:3f:21:2a:41:83:d0:3f:e9:73:ad:ff:e2:f4:91:a1:
5a:04:c5:94:8e:b5:9b:ca:1c:d5:1f:c3:8b:34:db:2e:c1:ce:
78:0e:9c:e2:e7:c1:9c:9f:ff:6e:17:7d:7c:d7:83:9b:f2:3f:
c4:fe:53:3b:67:03:40:7f:f8:b0:17:f5:eb:d2:94:a9:0f:2c:
34:ca:e1:18:6b:c7:cd:dc:7d:b4:28:92:a9:da:29:c4:5a:a7:
ab:6e:82:be:c3:4d:ca:86:b1:3c:2d:1e:01:0c:62:1c:e6:f5:
01:9c:9c:da:29:80:3f:4b:2f:55:9f:2c:3d:3a:e2:6d:3d:f5:
05:c1:15:d2:a5:99:a4:3c:ec:fe:84:f3:f8:00:3b:19:36:97:
f3:c2:7b:bf:bf:c0:c5:cf:d0:bf:b2:3a:7b:0d:88:30:62:d7:
32:05:af:1e:5d:23:f7:e2:5f:a6:c6:07:77:33:f6:ba:43:72:
bc:be:b7:4d:0d:fe:c5:0c:49:ad:f2:96:88:cc:01:68:5a:d2:
c3:c8:b9:41:23:92:52:20:aa:37:9a:84:c3:4f:f9:b1:a7:97:
17:fc:22:ec:62:61:06:99:3d:04:d5:29:a0:81:63:1b:0c:74:
ea:03:e3:e3:49:d5:0e:ad:0d:4a:b5:b8:ec:50:97:5b:2a:74:
52:f6:b6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:21 2025 by rpki-client