Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-YSMtt9x4BSZvuStN1RSYXsdqs.roa
File: r-YSMtt9x4BSZvuStN1RSYXsdqs.roa (raw, json)
Hash identifier: WhMWkxAcmfDaeaMMB0Btc4ICNQ49nweNoBqqxCD8Xwo=
Subject key identifier: AF:E6:12:32:DB:7D:C7:80:52:66:FB:92:B4:DD:51:49:85:EC:76:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C3E7D7A27BE444C9E3BAFE183B429FA4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-YSMtt9x4BSZvuStN1RSYXsdqs.roa
Signing time: Sat 05 Aug 2023 04:14:58 +0000
ROA not before: Sat 05 Aug 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c3:e7:d7:a2:7b:e4:44:c9:e3:ba:fe:18:3b:42:9f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afe61232db7dc7805266fb92b4dd514985ec76ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:fe:44:9b:8a:27:f6:67:2a:88:5c:f2:af:
0d:c7:ca:23:aa:e6:c6:bd:9b:ba:70:ed:b3:5a:b1:
27:cf:89:37:db:12:c9:6d:8f:63:9f:99:58:81:d7:
8a:55:dc:75:9f:4f:0a:99:e7:17:64:06:58:86:8c:
40:99:d5:53:e8:cf:66:60:5f:94:31:80:c0:9d:be:
40:6d:fe:92:90:82:44:29:1c:e1:56:fe:b7:e7:f8:
20:1a:65:30:38:e4:88:86:d4:62:43:61:a6:3c:4b:
dd:5f:09:b9:b7:d9:9b:93:45:14:c7:d7:87:e2:ab:
f1:29:2b:50:ce:a4:aa:8b:d1:cd:8e:c1:44:b4:cc:
dd:11:88:a0:f6:1a:56:2b:7d:74:73:6d:71:35:1d:
a0:87:8f:1b:cb:1f:e4:72:c5:9b:a2:40:40:3f:83:
21:64:2f:bb:9b:22:ce:78:2d:60:8b:50:c2:95:ae:
d7:cd:0c:70:57:93:d8:d5:da:2d:e7:16:f0:1c:a5:
68:10:05:9b:41:52:8b:c8:47:18:6a:86:61:3f:6e:
9d:5d:e5:1e:99:fe:87:0c:58:d0:88:19:d2:d8:57:
b7:ab:28:4a:f5:2f:cc:11:3a:dc:87:cf:ca:67:fd:
16:62:05:4a:cf:17:b0:3a:cc:0e:0c:b1:65:88:c8:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:12:32:DB:7D:C7:80:52:66:FB:92:B4:DD:51:49:85:EC:76:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-YSMtt9x4BSZvuStN1RSYXsdqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:84:41:a9:39:c3:49:03:6b:b9:6b:18:00:a3:fa:97:a2:f3:
b9:1d:af:64:e5:ae:51:f5:44:45:14:75:48:3b:9d:0d:00:c3:
49:32:17:df:3f:91:6d:02:30:a9:06:e3:89:4c:91:f5:a1:a2:
b6:07:78:98:51:e9:ce:ee:e2:94:eb:e8:8f:05:a8:02:ce:64:
3a:f4:0e:35:55:3e:b3:f9:c7:82:e5:10:12:49:35:9b:51:56:
b0:7e:de:37:70:41:97:21:f1:71:6e:dd:46:53:41:ff:5c:a9:
53:65:72:70:7f:3b:ed:80:33:37:67:61:73:63:8d:51:73:05:
23:64:ab:2d:e0:29:77:6e:e4:65:59:a1:7b:0a:d4:07:98:0a:
d6:5a:72:1c:55:30:7e:29:89:93:8c:c7:53:83:e2:86:04:99:
bd:b0:88:e3:1a:ef:ee:5d:5b:75:67:fb:1b:25:82:b9:6c:e6:
47:59:d6:74:70:a5:79:fb:00:4e:d2:63:97:1d:13:83:00:52:
14:6e:6b:21:6e:1d:2c:ea:7f:1b:9f:ea:e0:1a:a5:1d:4d:9f:
46:2c:8a:31:8b:24:2b:1d:03:de:8b:f3:33:b5:b9:5e:a6:ea:
1d:85:2c:e8:25:3e:f5:85:d8:5b:a3:6d:12:95:ce:bd:72:8d:
95:bc:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:42:06 2025 by rpki-client