Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-YYq82muML-qs8ThOO4HAQNprE.roa
File: g-YYq82muML-qs8ThOO4HAQNprE.roa (raw, json)
Hash identifier: ucE/C99rhPY18AZej6reFQDkWZVgHrNyg09aoRUFBlM=
Subject key identifier: 83:E6:18:AB:CD:A6:B8:C2:FE:AA:CF:13:84:E3:B8:1C:04:0D:A6:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886DD523CDDB4B0D5772987241D757EBE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-YYq82muML-qs8ThOO4HAQNprE.roa
Signing time: Tue 30 May 2023 18:04:24 +0000
ROA not before: Tue 30 May 2023 18:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:6dd4:fb5e/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:d5:23:cd:db:4b:0d:57:72:98:72:41:d7:57:eb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 18:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83e618abcda6b8c2feaacf1384e3b81c040da6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:30:bc:49:e1:df:66:b6:68:07:b7:54:c3:b1:
27:cf:d2:29:31:75:62:c6:d7:69:80:9a:3e:79:e3:
eb:47:b4:5f:a7:99:2c:f1:72:a8:bb:75:00:d2:61:
ca:1a:e4:8f:02:43:fc:c7:28:7a:86:92:59:a3:cc:
9b:92:aa:dd:e3:ad:4d:4d:ca:36:62:08:a3:66:77:
80:c2:77:b7:78:af:d0:eb:c5:0f:06:8c:18:63:7c:
81:20:5f:00:ee:24:03:a6:ba:ec:70:96:ba:bb:81:
9e:14:c1:41:83:43:a1:c3:8b:26:4a:95:e9:65:87:
d6:db:ca:8f:62:34:e1:fe:8b:2f:9b:58:68:21:4b:
c4:6a:4b:5d:99:c8:d5:99:33:be:e0:7c:c8:80:a5:
9d:00:3c:05:17:da:6e:b4:77:e4:2f:0f:05:f6:2e:
17:a4:bb:e5:35:3a:be:fd:b5:50:9a:0d:8d:06:90:
0f:17:11:ef:1b:5a:17:31:28:77:70:9f:be:b5:ec:
8f:d6:3a:6b:27:33:aa:c5:73:84:4a:97:5d:fd:bf:
64:42:bd:2f:35:04:91:cb:ef:06:1e:7c:f5:c0:22:
f2:b5:b1:22:8b:0e:ad:19:80:44:6e:99:f7:f5:63:
e6:d4:ea:1b:74:43:9d:1c:f0:ef:92:60:c4:3d:1e:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:18:AB:CD:A6:B8:C2:FE:AA:CF:13:84:E3:B8:1C:04:0D:A6:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-YYq82muML-qs8ThOO4HAQNprE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:b2:25:ed:bf:bc:fc:5d:d9:aa:23:de:f8:70:72:60:56:b2:
4c:5d:18:91:1f:69:77:22:37:c9:54:8b:44:c5:bf:d6:f5:f4:
47:d0:85:51:ff:fe:a6:ae:2c:0a:82:be:2e:6e:0b:fb:5d:32:
30:4e:12:af:86:da:f3:54:dd:43:fc:63:c4:17:bf:ac:e6:b6:
e7:4d:69:6c:9f:ce:c6:53:f9:e0:29:04:82:10:40:94:5b:08:
24:6c:9d:3c:6c:9d:6e:ec:ed:ac:a9:64:25:de:e4:7e:b0:c8:
dd:20:86:95:62:9d:37:f6:4b:82:c7:25:fa:6d:99:6c:b8:ee:
9f:a4:3e:b1:50:c3:f7:e0:24:42:35:8d:b6:9d:63:e3:60:84:
a5:f1:0c:2d:24:f3:96:e8:99:c2:c2:10:04:ca:89:6a:b4:09:
90:a3:44:c7:ca:ff:0e:c1:b1:4b:60:52:35:11:e9:11:73:38:
09:39:24:83:0a:2f:ad:cd:8c:be:5b:82:3b:25:76:fa:08:bb:
2c:8b:c3:f5:a3:1b:3f:57:81:ac:06:b3:83:a3:29:d8:89:09:
61:98:70:e9:93:00:bd:13:96:78:68:13:0c:c0:b6:a3:e1:41:
01:76:b5:34:a8:7d:8b:0b:83:59:f8:fe:b5:11:2d:6f:a9:15:
ae:f3:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:52:15 2025 by rpki-client