Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tYYCsA_JtG5Sqtv7C2lXsyfFG5M.roa
File: tYYCsA_JtG5Sqtv7C2lXsyfFG5M.roa (raw, json)
Hash identifier: B1DlrnhKEX9AFUu9fyRBV74lklSNnxRb53OFh/fyIJU=
Subject key identifier: B5:86:02:B0:0F:C9:B4:6E:52:AA:DB:FB:0B:69:57:B3:27:C5:1B:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F9538699B96F9DCA6F53842F160B8321
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tYYCsA_JtG5Sqtv7C2lXsyfFG5M.roa
Signing time: Tue 15 Aug 2023 13:12:28 +0000
ROA not before: Tue 15 Aug 2023 13:12:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:53:86:99:b9:6f:9d:ca:6f:53:84:2f:16:0b:83:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 13:12:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b58602b00fc9b46e52aadbfb0b6957b327c51b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:8e:18:2a:e5:d9:08:09:bf:71:70:9c:3d:
bc:30:2e:21:bc:ae:1c:d6:57:49:d1:20:31:94:b6:
b9:af:2d:57:a7:f4:54:cb:0d:a0:e7:e2:b7:46:d9:
dc:de:61:41:bf:2b:26:b6:f0:4d:2a:35:1c:63:79:
3f:0b:cd:55:61:5d:ab:3b:e8:ea:59:53:63:33:f6:
d0:d7:e9:eb:0f:00:1c:e7:ac:a8:86:6f:94:ce:4c:
24:d7:b5:6d:fa:ca:39:16:65:e2:93:63:10:6f:ad:
34:f0:29:45:5e:90:f5:34:b4:0f:4b:1d:da:5f:38:
aa:30:77:3e:d3:a1:cc:26:7d:2b:09:77:25:6e:19:
91:4c:7d:2a:80:86:15:bf:9f:b3:bb:d7:ba:6d:f5:
d1:93:1f:c1:68:b2:f8:da:a4:cc:96:e9:72:a6:bf:
0e:6a:b7:43:72:55:ff:a0:9d:2f:33:8d:d4:46:26:
e8:fb:82:7c:8d:25:c6:a6:f0:21:40:a0:4c:cf:e8:
fd:4b:6d:ca:85:37:5c:4e:47:76:fe:7a:8f:6e:53:
9f:2c:7e:a3:8f:69:d8:b2:bd:f9:4d:cd:18:f7:cb:
e3:5c:87:ed:05:20:e6:66:c4:b3:1d:6b:ce:49:42:
6f:90:2e:23:a1:9d:0f:6b:c0:25:da:30:f8:12:98:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:86:02:B0:0F:C9:B4:6E:52:AA:DB:FB:0B:69:57:B3:27:C5:1B:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tYYCsA_JtG5Sqtv7C2lXsyfFG5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:df:1c:69:98:48:a9:ff:7e:23:c9:26:2f:f4:ab:84:32:da:
95:5a:fd:6d:b3:82:73:a9:ed:99:ea:b7:a6:be:de:c5:7d:b3:
b9:17:5d:0b:88:91:71:a0:56:33:a9:86:8b:b6:68:49:50:1b:
0c:6c:9f:30:87:6e:58:f7:ec:75:0e:9b:0e:37:2d:95:05:e6:
59:49:e5:89:ae:57:99:c7:56:14:14:46:22:3d:33:5f:c3:85:
47:4c:5e:b1:61:36:00:3f:52:38:2e:8f:c3:06:ba:5e:f5:4f:
d4:e3:9b:9f:c3:66:e8:71:09:ba:4b:ef:43:e3:38:4b:96:d0:
2a:71:e3:ae:5d:52:3a:a3:0d:b8:19:4b:0e:e9:2d:a5:d2:57:
b2:77:2d:78:a1:ac:70:07:26:fa:47:30:5e:0b:03:cd:b2:1c:
5f:d7:76:10:d0:a1:21:33:69:9d:98:4a:3e:c3:19:f2:0b:7c:
b5:5c:d0:6a:4e:a9:45:57:82:53:1c:96:bd:79:5a:58:fc:7d:
6f:e8:73:b9:80:7b:60:6d:69:b1:0b:59:f0:5f:11:c2:d2:04:
91:aa:0f:45:04:24:07:7c:4c:54:24:9d:1d:0b:86:30:24:8e:
66:e3:10:58:dc:b6:d7:8d:bc:f8:e6:9a:8c:da:3a:0a:94:a3:
66:fc:77:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:09:01 2025 by rpki-client