Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YyuJOQJbqymR3J0bLmXNJRJYwBw.roa
File: YyuJOQJbqymR3J0bLmXNJRJYwBw.roa (raw, json)
Hash identifier: Uzhbzi3CIX1NlBCDTnZMnxpGwx5Y0bZ1Q0gh51WYpOQ=
Subject key identifier: 63:2B:89:39:02:5B:AB:29:91:DC:9D:1B:2E:65:CD:25:12:58:C0:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885C4068F803294B9E78044462207B52CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YyuJOQJbqymR3J0bLmXNJRJYwBw.roa
Signing time: Sat 27 May 2023 08:08:24 +0000
ROA not before: Sat 27 May 2023 08:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:40:68:f8:03:29:4b:9e:78:04:44:62:20:7b:52:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 08:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=632b8939025bab2991dc9d1b2e65cd251258c01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:a9:63:9d:ff:d2:16:29:ee:ad:2a:fa:81:
17:9e:49:fc:eb:88:c4:62:07:47:8c:e0:f7:08:5c:
c5:e2:a2:87:ef:88:ab:f1:81:53:d2:e3:84:0e:9e:
6e:a8:8d:bf:68:ea:6d:48:31:6a:11:a5:ff:ba:26:
ec:e6:ac:ca:b9:bb:5b:7c:15:34:d5:a9:c1:3d:60:
f4:a3:9f:ea:6d:f6:d2:c8:d1:a0:48:65:95:cb:ad:
03:a4:da:e4:7f:a7:5c:ea:8c:43:19:a1:a8:4b:02:
81:23:93:ab:54:a4:55:a4:4f:ed:2f:45:60:68:1f:
4a:23:fd:34:12:4d:11:64:43:d3:35:64:b9:3d:b4:
1f:71:3a:e1:5f:e4:14:7d:3a:f4:81:0b:76:f4:7e:
e6:51:2b:29:dc:41:c2:ee:40:11:18:64:a0:5a:9a:
08:64:01:19:02:93:37:c8:53:5b:8b:e7:c3:a1:5c:
8e:9d:9b:97:e7:f6:b0:4e:a1:ee:f4:ee:cb:78:1a:
4e:9b:05:e7:0d:4d:a2:d6:bd:77:29:3b:d9:7b:e3:
37:f9:f0:de:4e:c9:d0:fc:08:84:f8:7a:c0:3f:25:
92:85:cb:0b:c6:c8:2f:1a:16:a6:ad:98:94:65:9e:
c0:87:4d:22:14:ec:56:94:7a:bf:8a:ca:75:34:85:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:89:39:02:5B:AB:29:91:DC:9D:1B:2E:65:CD:25:12:58:C0:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YyuJOQJbqymR3J0bLmXNJRJYwBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:f2:91:93:9a:d7:4b:3c:db:d3:4d:b1:56:6c:58:ce:29:a7:
83:ad:f9:fe:7b:2a:c2:bb:81:bd:cb:d6:f4:73:d9:32:08:25:
2d:2b:bb:c9:45:6b:3e:58:be:c5:3e:76:80:17:bc:2b:9f:01:
48:59:a4:20:c8:a5:52:12:4b:2f:3c:c8:84:50:2b:46:2a:8e:
ed:2a:96:8d:82:32:65:2f:04:09:9a:b3:5a:46:7e:fd:3a:72:
cc:aa:4a:82:e7:90:28:ae:86:aa:f7:82:be:42:8b:53:f9:ef:
87:9f:16:21:52:f0:6f:ff:12:34:37:5e:f4:08:9d:1f:46:41:
da:54:12:74:44:1d:01:b2:26:85:e0:ef:0a:17:81:c9:ab:e7:
33:48:06:0a:a9:0f:33:79:11:de:3f:97:98:fe:c4:81:a8:bc:
59:86:f4:65:4e:e9:ca:23:70:fb:88:2c:79:2e:1f:a3:fa:bd:
8f:3c:93:ec:6e:74:7d:ae:ae:7e:9e:9b:38:24:4a:05:89:5f:
11:b4:65:27:32:26:96:6d:03:64:b6:2c:18:e6:b0:90:ad:ec:
46:82:da:3d:7d:2b:5a:1a:d3:0f:a0:a4:fd:68:aa:53:6e:a9:
43:ef:1d:f7:ee:ba:91:ef:11:09:69:c6:14:e9:47:d5:aa:64:
ff:38:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:26:30 2025 by rpki-client