Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e_ycxnAr_azTDTdQDjpV4a8dUf8.roa
File: e_ycxnAr_azTDTdQDjpV4a8dUf8.roa (raw, json)
Hash identifier: Jt9ErDqalOe5EYCHiSfOeKUV+kBOT8T9mBr541OJdxc=
Subject key identifier: 7B:FC:9C:C6:70:2B:FD:AC:D3:0D:37:50:0E:3A:55:E1:AF:1D:51:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185560F4FBFCED6B94ED3D4A95CDABA0E8D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e_ycxnAr_azTDTdQDjpV4a8dUf8.roa
Signing time: Wed 28 Dec 2022 00:08:42 +0000
ROA not before: Wed 28 Dec 2022 00:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:56:0f:4f:bf:ce:d6:b9:4e:d3:d4:a9:5c:da:ba:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 00:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bfc9cc6702bfdacd30d37500e3a55e1af1d51ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:a0:45:40:d0:af:28:48:66:9f:1c:b7:47:
bb:df:b3:47:32:f2:59:80:16:ba:09:9e:45:32:a0:
49:3b:3f:0c:72:90:f5:0f:1c:27:07:49:01:39:2f:
e7:c7:10:ad:2a:b0:4f:7a:2b:bf:1f:4f:74:18:5e:
04:cd:a4:b8:ba:f9:01:f3:9a:98:e5:e7:53:7f:1d:
80:23:ac:42:35:44:15:f3:6b:74:15:c7:3d:9a:34:
8b:28:a1:57:1d:04:6b:a5:3e:b5:4c:ee:45:43:1f:
e1:6a:c2:42:21:d1:72:59:53:75:7f:30:da:db:19:
a4:c1:9b:fb:1d:64:f7:d2:ea:b7:fc:53:0e:22:98:
16:24:8b:34:ed:42:20:5b:71:f7:09:fe:4f:e7:81:
a9:96:ce:16:82:a1:fd:6f:2c:4a:48:3b:65:e5:ae:
5c:ac:98:70:62:79:ab:02:71:f6:6a:ac:05:54:ea:
a7:5a:ef:c5:c6:d9:73:b5:09:2b:72:6a:1c:ef:41:
4c:02:f5:91:c2:91:74:25:8c:88:22:fb:96:af:d4:
28:e9:c6:39:b5:f0:1a:1f:c7:21:5c:28:a3:4b:ae:
6b:31:63:9d:d8:ca:37:2c:04:79:69:c8:2b:99:b5:
e0:8b:1a:7e:b7:d8:a5:fd:f7:30:29:e8:54:6e:a5:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FC:9C:C6:70:2B:FD:AC:D3:0D:37:50:0E:3A:55:E1:AF:1D:51:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e_ycxnAr_azTDTdQDjpV4a8dUf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:a2:a1:0c:6c:65:8b:06:63:92:fc:5a:ac:66:11:c9:d3:cd:
60:11:8f:42:aa:39:8d:52:c9:20:e3:c2:b9:cc:ad:46:72:43:
e5:a6:af:52:2f:00:24:8e:96:14:e3:28:90:eb:a1:c4:f6:43:
4b:41:72:98:14:02:a2:4e:03:9f:cd:f2:c4:f4:6c:45:84:1b:
d8:8e:bc:68:12:a0:40:f3:05:91:d9:f0:08:87:1f:9c:d4:dc:
92:2a:2f:f2:ed:bf:a3:1a:ae:e3:c2:53:f4:61:16:26:95:76:
0f:ed:db:96:89:ca:98:85:88:5e:51:cf:34:47:24:d2:b3:9b:
98:3a:da:5e:74:c6:47:0b:d0:df:8d:85:f7:f8:89:b4:d8:ed:
f5:e4:6e:50:9d:0b:44:f4:2a:6c:a2:3c:81:e7:95:0e:0b:8d:
1b:ea:a6:f1:af:69:d6:25:e9:99:a9:91:5a:d8:89:87:52:50:
fc:15:4c:0d:a4:76:be:87:87:7e:ff:18:f4:9b:5b:c3:cc:c8:
64:9d:42:1e:31:f4:b9:da:80:65:5d:a2:6a:b6:67:f9:22:66:
0a:7b:ab:ae:32:de:b4:fb:78:cf:cf:1b:be:8d:d6:0f:6c:3d:
cf:29:30:f9:55:20:8b:e1:23:70:3e:99:5f:92:de:45:ea:8c:
af:81:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:24:32 2025 by rpki-client