Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pyzZ2iZ2VeqYp400p8hyvVUWAps.roa
File: pyzZ2iZ2VeqYp400p8hyvVUWAps.roa (raw, json)
Hash identifier: GsJhMAVissuo1cvbtCU2lgvb5G8IimHHjtjAOwi3VvU=
Subject key identifier: A7:2C:D9:DA:26:76:55:EA:98:A7:8D:34:A7:C8:72:BD:55:16:02:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186891A6AAD99B16E9B5A445C3A830EE3A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pyzZ2iZ2VeqYp400p8hyvVUWAps.roa
Signing time: Sat 25 Feb 2023 15:04:15 +0000
ROA not before: Sat 25 Feb 2023 15:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:891a:4320/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:1a:6a:ad:99:b1:6e:9b:5a:44:5c:3a:83:0e:e3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 15:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a72cd9da267655ea98a78d34a7c872bd5516029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e1:bd:d6:29:f6:8b:08:57:63:e1:59:65:fe:
77:0d:41:05:ea:59:05:50:06:a3:3a:89:bf:89:f8:
54:59:27:db:65:3a:4d:95:66:41:c9:ea:09:dc:cf:
ac:42:50:1d:3a:49:f4:4d:d1:e0:0c:5d:30:31:bd:
76:30:dd:9d:47:e9:04:72:4b:32:3e:d4:9d:87:92:
d3:3c:4b:a8:cd:8b:d4:d9:41:0e:9a:22:b2:5d:dd:
04:2e:11:88:f0:18:9e:53:33:ae:09:5d:77:6c:b3:
ba:d1:99:cf:c3:b0:7d:e1:12:43:8c:1c:6b:b2:da:
91:4d:b3:e6:0f:4e:fe:f4:08:0e:db:b3:49:be:21:
56:73:cc:51:d3:4e:bc:64:6a:6d:ce:66:f1:db:1a:
65:d9:b3:86:eb:8b:43:14:9e:fa:66:da:74:02:b0:
0d:80:6d:fb:01:7e:d8:1a:ae:7f:38:eb:b9:f0:01:
9b:d7:1d:ee:66:9c:33:16:74:68:76:f6:1b:2c:78:
e1:3c:8c:cb:08:e7:1f:37:af:c6:61:99:1e:62:ca:
b5:93:76:20:fe:af:a8:d8:29:38:47:fc:88:ac:07:
5b:ad:e3:b6:da:42:ed:43:a0:2f:56:3f:f1:84:d5:
03:86:49:ce:fd:b4:4e:0e:f1:09:85:7c:2c:a5:80:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:D9:DA:26:76:55:EA:98:A7:8D:34:A7:C8:72:BD:55:16:02:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pyzZ2iZ2VeqYp400p8hyvVUWAps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:e0:bf:f3:1f:c6:ad:0b:9b:7e:84:bc:00:b2:59:d5:d8:ee:
73:86:ba:51:70:ea:0f:ef:16:d5:dd:04:0c:28:75:ff:ef:2e:
d9:25:69:ca:35:1a:0d:18:4b:84:95:7c:b9:8a:18:66:a2:31:
11:75:c6:d8:19:19:b5:08:e6:06:63:dd:fa:b2:89:fa:ae:7e:
6c:e3:56:26:ec:37:9b:ae:94:81:83:95:48:44:57:3d:6b:90:
f2:4f:bf:5b:39:13:ba:a9:93:e0:06:9b:0f:2e:c6:b9:35:05:
ea:2a:26:0b:68:22:28:45:74:a2:a7:35:21:07:d6:7a:bd:86:
41:30:5a:62:0a:5c:5f:7d:b7:8a:91:a7:1f:71:4e:2d:51:1f:
59:d8:10:19:d3:b7:dd:eb:54:75:f9:3c:95:be:36:06:f3:fa:
be:82:ef:11:7a:0f:69:99:61:7a:00:78:9a:4b:a5:b2:1e:db:
03:2e:15:bd:a4:cc:b3:89:0c:ed:64:78:d3:a0:b9:58:f9:96:
ba:50:8f:be:cc:c6:3e:28:46:fd:a4:4d:9a:7c:68:44:9d:cc:
5e:db:15:a1:c8:f4:1e:32:24:ea:da:14:9a:33:d3:42:8c:00:
1b:83:0d:3b:e9:50:ab:f2:34:1d:8a:2d:65:04:4a:eb:6f:61:
a2:e7:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:40 2025 by rpki-client