Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YxAJTwyXN3BkGpjNZzh8EGpVGlo.roa
File: YxAJTwyXN3BkGpjNZzh8EGpVGlo.roa (raw, json)
Hash identifier: jJBVC4wHCH5bgG94Yn28j8BvnHh7KQj1BHVgSDdh9/I=
Subject key identifier: 63:10:09:4F:0C:97:37:70:64:1A:98:CD:67:38:7C:10:6A:55:1A:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181DF3A388F4CDE801F0AE948F46A50F37C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YxAJTwyXN3BkGpjNZzh8EGpVGlo.roa
Signing time: Fri 08 Jul 2022 19:12:23 +0000
ROA not before: Fri 08 Jul 2022 19:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:df:3a:38:8f:4c:de:80:1f:0a:e9:48:f4:6a:50:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 19:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6310094f0c973770641a98cd67387c106a551a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:65:2a:66:ae:4f:d8:63:ac:2b:03:97:9e:
e7:6a:b2:cf:e4:c5:70:14:d6:14:54:c2:b7:61:52:
41:3c:cd:c2:40:7d:e2:2b:f7:5d:72:23:ee:22:74:
7e:16:5a:10:17:05:80:b3:8e:4e:4d:09:c4:93:92:
bd:55:65:e6:02:a0:10:96:3c:95:1d:cc:e4:2d:56:
4f:8b:66:0d:89:98:5f:0a:c3:d6:3d:7c:e5:56:be:
58:52:af:7f:b4:48:6a:ca:f9:d1:85:ea:e6:07:ac:
1c:c4:c4:0a:d7:a1:79:ed:48:65:7e:b3:82:27:94:
b5:5f:a6:78:d4:61:63:97:b2:40:1c:4b:ec:48:21:
7b:dc:e8:5f:e0:b6:c7:2e:da:b3:40:d3:0e:ae:a9:
77:b4:71:4d:a2:3d:ab:0c:55:b6:c5:17:4c:96:ac:
3f:7b:4d:c2:ac:9f:c6:79:76:46:56:49:e4:31:87:
bd:44:d3:fa:ba:83:21:35:6e:39:b2:20:75:92:0f:
cd:d1:8d:bb:c6:49:66:f2:a8:b4:19:68:e7:47:d1:
b9:30:0f:c3:d5:84:6d:a1:d2:33:39:99:c0:80:78:
69:d5:8d:01:14:52:85:9b:2f:e8:fd:96:a2:d4:b3:
8d:38:ed:fc:27:c5:bf:fa:7b:fb:c1:89:01:47:ad:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:10:09:4F:0C:97:37:70:64:1A:98:CD:67:38:7C:10:6A:55:1A:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YxAJTwyXN3BkGpjNZzh8EGpVGlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:50:b1:b6:02:af:f3:0e:d4:5f:2d:d2:aa:e8:63:2a:5e:ca:
df:36:b8:3d:20:cb:4b:c5:36:3d:cc:dc:35:d4:95:a8:38:f3:
51:de:92:fc:5c:35:12:d8:4a:71:50:0e:f4:72:4e:1c:27:f8:
60:e1:b7:7f:48:e9:b6:5a:15:53:33:67:a8:b4:6c:7e:cd:7d:
41:ae:b3:a0:cd:72:7b:64:f7:53:0f:dd:8e:30:15:f8:03:fd:
13:4a:b8:1d:a7:c9:76:0c:b7:2c:cf:cf:a3:f0:ca:7a:7b:a2:
23:8d:27:38:3b:1c:7f:38:f5:71:ef:c5:06:a6:06:6c:b8:1c:
d0:5f:c5:4c:42:5e:75:e4:92:c6:46:c3:93:61:34:8f:6d:c3:
02:6f:be:eb:67:f4:03:7a:c1:8c:38:ba:44:3c:cf:47:81:e2:
ae:30:bb:38:79:4a:db:93:6f:fe:81:2e:99:ab:84:42:b0:8f:
6e:82:8f:9e:fc:f2:14:aa:f5:c3:4f:11:e5:c0:6a:da:6a:a8:
5a:36:11:77:e4:f4:3b:b1:ad:b2:10:0e:43:22:bf:4d:2b:8b:
16:ed:60:6a:64:1c:02:a2:4a:c8:ca:92:71:a3:c7:db:70:be:
2f:89:d4:51:af:a9:f1:05:7a:69:8a:ee:75:b6:47:f0:fb:1b:
30:f1:65:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:23:53 2025 by rpki-client