Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mY1Y0TYz87WygdHALtxsmt9mLEw.roa
File: mY1Y0TYz87WygdHALtxsmt9mLEw.roa (raw, json)
Hash identifier: TFYYCo3DxPRk96PqI/wc9FeZbrKdDBPQxtpnwJ+vJ3c=
Subject key identifier: 99:8D:58:D1:36:33:F3:B5:B2:81:D1:C0:2E:DC:6C:9A:DF:66:2C:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AA5BC1C215C07F982EB5EDBE2A3638F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mY1Y0TYz87WygdHALtxsmt9mLEw.roa
Signing time: Mon 31 Jul 2023 05:11:27 +0000
ROA not before: Mon 31 Jul 2023 05:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:5b:c1:c2:15:c0:7f:98:2e:b5:ed:be:2a:36:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 05:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=998d58d13633f3b5b281d1c02edc6c9adf662c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:04:5a:82:c7:93:79:b8:72:ac:5d:ba:d8:
5b:58:c4:31:f7:8e:6d:64:f1:fd:c4:8c:10:89:c3:
7d:0b:db:11:10:d2:1e:3f:91:62:8e:5e:40:96:6a:
2b:83:63:e3:ea:2b:67:1b:84:3b:c1:25:e3:87:0b:
ce:5c:96:63:49:60:94:ba:ca:07:15:80:61:4c:20:
bf:82:6f:39:e9:c7:bb:69:6d:9d:ab:f6:db:8f:36:
c5:77:04:f7:f7:0b:9a:d5:89:7e:81:07:b5:96:c9:
38:39:40:08:21:4b:be:5c:22:65:c1:34:10:0e:ee:
c7:49:df:8c:ab:10:a8:b0:9e:02:2b:0c:72:a4:e2:
d1:8a:b3:75:48:c5:47:4b:1a:1f:f1:0c:89:33:7e:
bb:ff:25:5b:14:54:2a:7b:19:75:37:23:84:70:8b:
cf:4f:ba:4f:60:db:10:3e:4e:1c:81:d2:c3:73:b5:
af:33:f5:6c:30:09:38:e0:07:54:42:92:59:76:8e:
e5:15:fa:55:78:7e:ae:9b:b2:aa:c9:50:c0:d5:b0:
a6:f1:31:cc:8e:ef:d2:42:23:86:ec:57:9e:c8:0e:
c0:bb:75:8f:07:51:3f:34:c5:ff:5d:9c:2d:f4:68:
a9:d4:95:a2:d5:85:4d:37:70:81:08:15:4a:f5:10:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8D:58:D1:36:33:F3:B5:B2:81:D1:C0:2E:DC:6C:9A:DF:66:2C:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mY1Y0TYz87WygdHALtxsmt9mLEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:e4:76:de:49:1e:8c:29:9f:a1:08:a7:fd:05:de:6d:6f:c8:
24:08:b3:18:f3:09:5e:f2:f3:0f:7c:ec:98:ac:3d:d1:c5:67:
c8:1b:68:1e:e5:b3:bf:a7:cf:7a:89:4e:10:33:6f:1d:56:2e:
9c:c9:2e:3e:60:3a:c6:c0:80:bc:2b:d3:bc:44:6a:7f:2a:8f:
10:72:b6:dc:8e:37:2f:59:96:b2:b7:27:fb:aa:38:03:11:eb:
b9:e4:ce:a9:0f:f8:b2:14:ce:78:89:a7:5d:f2:02:53:74:cb:
fe:0a:eb:19:e8:53:58:f4:b3:9a:77:a2:84:c4:47:1a:e2:0e:
1d:62:20:c3:8a:08:f7:9c:52:d0:c3:d3:5c:40:c1:4c:b5:01:
f2:7b:0d:be:04:a1:5c:a8:85:a2:52:8d:dc:61:f6:b8:e3:f7:
27:10:c2:2e:16:16:bc:68:fd:0a:35:a2:b2:14:24:38:ea:92:
4a:21:e5:96:2f:a4:29:95:aa:b8:37:15:1c:43:a6:c2:bf:ac:
8d:b5:27:6e:0d:84:f2:5d:9e:7e:d8:20:4e:6e:bf:28:3c:1c:
e4:c3:15:52:84:ed:3a:29:69:3d:ea:71:c6:13:ff:70:b0:89:
fb:b7:2a:cb:e8:08:89:37:8c:27:03:d6:c1:a1:38:85:e4:26:
af:fd:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:01:06 2025 by rpki-client