Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m_YGGdtFjVRBKNyanxMq_nTv6eQ.roa
File: m_YGGdtFjVRBKNyanxMq_nTv6eQ.roa (raw, json)
Hash identifier: SHezfKDy94TNLD9nk4rN2PEkKctlu9/8j59mYrdSx1Y=
Subject key identifier: 9B:F6:06:19:DB:45:8D:54:41:28:DC:9A:9F:13:2A:FE:74:EF:E9:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874666D0C4AD7DF58CD704470E63BF1CF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m_YGGdtFjVRBKNyanxMq_nTv6eQ.roa
Signing time: Mon 03 Apr 2023 09:15:55 +0000
ROA not before: Mon 03 Apr 2023 09:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:66:d0:c4:ad:7d:f5:8c:d7:04:47:0e:63:bf:1c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 09:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bf60619db458d544128dc9a9f132afe74efe9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:86:a4:d0:db:39:db:c5:04:0e:12:d7:7d:bb:
33:2e:46:ca:85:36:7c:1b:48:c7:30:4c:c1:e2:93:
c9:9d:7a:28:aa:f2:32:15:f2:94:3a:f2:82:a6:e7:
6b:ac:3a:f5:2a:b4:8f:5d:93:37:98:b7:a6:84:67:
0b:94:0e:60:e9:78:60:15:14:9e:45:78:67:f2:21:
34:22:46:eb:12:42:cc:99:ae:c7:d9:a1:23:33:92:
c8:d3:72:cc:cd:45:74:98:b6:ba:6a:32:0b:28:66:
db:a7:07:d1:3e:c3:9e:7f:17:be:f7:3e:ba:68:46:
73:b3:59:d6:b9:c0:bb:78:24:4b:df:21:dc:1e:ac:
e6:52:fb:46:65:ef:ad:20:ad:d4:ee:9f:c1:4d:32:
a7:ce:c6:ca:18:bd:f9:67:e1:7f:f5:be:bf:5f:f9:
e5:cc:09:f1:63:a1:8b:7f:41:79:28:e1:68:c5:9e:
c6:e4:15:5a:94:ff:68:a2:54:60:3d:31:97:e0:5f:
f6:23:ac:38:35:7e:e3:1f:29:29:e8:55:17:de:9c:
e7:e0:37:b3:09:72:da:a2:a9:2a:8d:ca:43:b6:87:
28:09:bf:00:69:84:a1:83:95:76:8b:1a:71:c1:8d:
c3:2d:af:6d:e2:ed:1d:d0:f0:7b:65:7c:1b:10:3d:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F6:06:19:DB:45:8D:54:41:28:DC:9A:9F:13:2A:FE:74:EF:E9:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m_YGGdtFjVRBKNyanxMq_nTv6eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:bc:00:6e:d3:64:62:05:4d:34:f8:ab:0f:b8:4b:04:c7:3e:
fc:ce:49:a2:a7:db:7d:f1:b3:a6:55:d9:fe:cf:4f:d6:a7:4c:
11:f2:b1:f8:78:9c:76:a0:10:6c:a1:f8:a6:6a:39:75:44:a2:
7d:21:bf:ba:43:81:d0:28:68:3f:4d:40:34:be:81:5c:7e:3c:
c0:d0:cd:ac:f9:92:19:6a:8c:74:4b:56:f8:d2:b9:36:8f:37:
c0:ab:90:f4:33:81:11:a7:ac:59:23:b2:7d:9f:85:96:f3:f6:
6e:83:29:e3:a4:f5:22:a5:bc:3f:48:dd:5b:94:4e:86:1b:61:
f5:cf:98:a0:24:3f:4d:56:09:78:4e:d4:0f:9f:0c:bc:64:9b:
de:ed:e2:6f:cf:24:06:95:5e:f7:c1:c9:0f:a3:55:66:d5:a3:
55:3b:05:41:e4:47:51:c7:1e:54:cc:fd:f7:dd:08:64:b7:94:
e1:7c:f2:44:bd:88:6e:5b:c3:82:a4:4c:6e:a5:e7:1c:6b:be:
02:0b:81:d7:78:3a:cc:40:ce:5f:84:9f:46:c5:09:41:08:b1:
77:c9:9a:c2:33:f4:8f:70:d6:f6:d8:47:31:c1:7d:f3:ab:7b:
97:7a:02:76:40:5f:7c:a5:54:0e:e2:88:fa:28:0d:68:66:7e:
62:2c:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:37 2025 by rpki-client