Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/poyNGLS_uaGLg4OJE18j9bkCyyA.roa
File: poyNGLS_uaGLg4OJE18j9bkCyyA.roa (raw, json)
Hash identifier: 4kXdGgCiGAeO/IERpLoTGAU9YKccZidAOe0YlNgu2+Y=
Subject key identifier: A6:8C:8D:18:B4:BF:B9:A1:8B:83:83:89:13:5F:23:F5:B9:02:CB:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187101C0ECD506F42E3B7C9EF59FCBC3B16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/poyNGLS_uaGLg4OJE18j9bkCyyA.roa
Signing time: Thu 23 Mar 2023 20:14:46 +0000
ROA not before: Thu 23 Mar 2023 20:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:1c:0e:cd:50:6f:42:e3:b7:c9:ef:59:fc:bc:3b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 20:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a68c8d18b4bfb9a18b838389135f23f5b902cb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:f0:c7:cb:d3:50:06:6e:70:b6:9a:57:b3:
a1:29:3f:95:df:a3:fc:d3:fa:f2:74:ae:b3:86:12:
24:f6:77:c5:71:70:b8:f8:ef:8c:6b:03:a3:ef:fc:
19:a3:d9:f4:8c:e7:0a:ba:10:91:03:4e:58:c0:40:
b9:c6:8e:d6:4a:d2:b6:e6:67:96:c5:3b:9f:f2:b5:
bf:9b:5a:6d:97:8d:62:28:40:b8:04:36:80:3f:9f:
f3:99:83:f2:0e:0d:e3:87:8f:c5:f6:9e:2d:ec:78:
78:cc:d7:7d:d4:cd:04:28:44:24:03:55:8f:78:81:
3f:fd:51:98:ba:1b:77:63:be:25:eb:62:9a:cf:a8:
4b:11:21:c1:a7:6f:73:ed:85:2a:4a:24:03:83:2c:
4c:d7:24:51:75:46:0e:62:c5:85:93:9f:f4:30:d3:
7c:eb:55:b7:cf:e1:31:e5:2c:d2:52:d6:81:dc:6a:
0a:80:67:9f:cd:c7:14:31:f7:1d:da:74:8c:45:b7:
0b:07:55:79:a9:0b:13:5b:2a:17:87:3e:d1:4d:db:
3c:7d:63:a1:2d:f8:4a:58:23:ae:4e:9c:47:d6:b0:
93:0f:ca:c4:0a:52:a2:da:6c:85:57:ac:8a:f5:2b:
4a:fe:ad:39:d9:ad:46:e5:fe:8b:de:a3:04:bd:45:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8C:8D:18:B4:BF:B9:A1:8B:83:83:89:13:5F:23:F5:B9:02:CB:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/poyNGLS_uaGLg4OJE18j9bkCyyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:ab:bd:e0:77:23:ab:dd:77:2b:f4:91:4c:60:d9:2c:b9:c2:
04:92:e8:d7:d5:16:6c:d7:4e:a7:da:df:95:12:2e:ed:64:96:
59:e0:cd:35:f2:e9:b9:ef:c8:de:eb:51:b5:85:cd:9f:73:17:
68:3a:bf:b0:72:90:82:ce:14:54:41:ef:0e:34:e2:b8:c2:27:
bc:c9:11:7c:f1:7d:c0:4f:c5:b6:09:39:bc:7f:e4:5f:16:d7:
5a:70:86:77:0b:6f:e7:db:31:9b:af:49:12:d2:69:7f:b0:7b:
24:2b:3c:52:bc:4f:2e:ea:52:37:06:e9:cd:6b:24:37:8f:2b:
00:1c:f0:11:48:5b:9f:61:b3:b7:09:7c:e3:00:b5:ec:72:b3:
2d:7d:73:40:17:89:3f:47:25:c3:ba:87:d7:f3:0d:2e:eb:38:
17:f7:a0:4a:9c:78:47:18:a9:79:86:d6:49:d3:7d:ab:26:0b:
78:60:50:8f:72:ad:f5:b2:9e:66:d9:19:c2:20:a6:96:c3:54:
1e:5f:9b:df:c3:3f:82:92:ea:86:99:a5:ee:46:4a:23:2b:8e:
4d:10:e9:31:07:92:aa:b7:8a:97:15:02:27:ff:0c:28:85:41:
77:49:c3:52:a5:f3:47:f0:e1:8d:dd:e7:54:16:79:2c:d9:40:
82:6f:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:04:41 2025 by rpki-client