Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u-ykxye44eT5Gq1sZAi0-GbyUZc.roa
File: u-ykxye44eT5Gq1sZAi0-GbyUZc.roa (raw, json)
Hash identifier: n6NqMeD3kQA9oV8aWt68WbLq2Ubko7p7cyZ70jgg2Wg=
Subject key identifier: BB:EC:A4:C7:27:B8:E1:E4:F9:1A:AD:6C:64:08:B4:F8:66:F2:51:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018453BE0787582FF3AB998C67256F6664CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u-ykxye44eT5Gq1sZAi0-GbyUZc.roa
Signing time: Mon 07 Nov 2022 20:17:53 +0000
ROA not before: Mon 07 Nov 2022 20:17:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:53:be:07:87:58:2f:f3:ab:99:8c:67:25:6f:66:64:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 7 20:17:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbeca4c727b8e1e4f91aad6c6408b4f866f25197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:45:dd:65:71:52:53:74:42:ee:cc:ed:ff:
58:93:95:5d:19:01:08:96:c6:ff:ca:de:ff:f4:eb:
19:3b:36:14:fc:06:98:7f:65:1b:89:99:0b:c5:9e:
e9:aa:05:fb:1b:52:c6:50:05:1e:00:89:a2:b9:d7:
68:d0:6b:c2:87:10:3a:95:8e:54:9d:a5:78:e9:96:
9c:66:e5:2e:78:d0:23:55:e4:3d:5b:73:51:94:98:
81:f3:ea:17:cf:24:06:ff:b4:df:b3:a3:53:1c:6a:
d9:e4:21:fa:b5:32:9b:b4:30:df:9e:bd:4f:37:b4:
94:09:c8:7b:ff:81:a5:9c:bb:44:cd:08:f4:70:31:
85:67:a4:74:45:04:69:00:55:d5:d7:0f:09:72:a2:
a5:9e:90:27:f3:9d:94:f6:96:25:fa:b7:73:07:19:
87:49:7c:bd:c8:77:a8:e1:4a:fd:02:ab:ae:51:bd:
bb:80:a9:cb:41:c6:fc:97:9e:0b:f6:cc:f8:23:70:
5a:99:f0:c0:94:c6:a7:9f:64:47:f4:40:b9:d7:ee:
7f:6e:a7:1e:b2:a3:fd:54:e8:05:39:26:41:6f:e2:
01:51:ad:4d:90:5d:8a:9a:5f:13:c6:54:ee:f0:e0:
4c:bc:51:7b:8f:6d:06:cc:ff:ee:7e:31:9a:2a:3d:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:A4:C7:27:B8:E1:E4:F9:1A:AD:6C:64:08:B4:F8:66:F2:51:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u-ykxye44eT5Gq1sZAi0-GbyUZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:c2:70:3e:3d:5a:00:63:2f:ea:2f:a6:0e:11:30:34:6c:ea:
d0:73:bd:82:9d:c0:62:1b:01:a9:e2:a5:9a:a1:95:43:4b:1e:
b2:b7:98:f7:0c:80:c1:7d:6b:2b:00:b3:1e:69:86:64:b1:0d:
e0:ff:2d:2f:40:31:b7:fc:b5:1c:0c:9b:51:ac:d8:91:49:1d:
61:13:d9:89:0a:4f:ca:51:6a:e4:51:d8:b9:2a:c9:88:94:75:
d2:17:43:9c:9c:ca:b0:d1:c9:c7:2c:a3:20:41:52:19:95:56:
55:e9:e7:23:3b:e0:15:29:08:21:b4:84:ce:87:fd:a3:6c:63:
28:1b:7b:ce:38:da:75:fc:ea:26:7f:74:b7:c3:42:45:3a:34:
bc:d8:6e:51:e4:2e:f8:ce:d6:b7:be:55:b7:f4:df:9a:14:91:
f6:c9:79:e4:94:df:a2:a4:f8:ac:da:e2:c8:de:46:0a:a7:d9:
e5:5d:94:1a:02:e0:38:07:ce:09:06:40:b8:9f:1b:7c:af:7f:
fd:38:7e:db:06:8b:d9:2d:fe:52:9d:6c:e1:88:7e:26:7b:6c:
f1:1b:c5:7e:e1:a6:a9:5a:c0:ab:b5:1c:74:c6:c2:af:59:88:
8a:42:80:ff:71:18:fc:28:87:3a:83:fd:00:d9:55:0d:f7:8f:
12:58:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:10:38 2025 by rpki-client