Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y-6vUwCxCrZByRVpDkTW_SC6apE.roa
File: y-6vUwCxCrZByRVpDkTW_SC6apE.roa (raw, json)
Hash identifier: VMMzBt/6Y7ZYGM3lSGJQxMr6N0XdMC/raGOyFmc6y8Q=
Subject key identifier: CB:EE:AF:53:00:B1:0A:B6:41:C9:15:69:0E:44:D6:FD:20:BA:6A:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863AC92C8EA9D2224ED842780AC3348693
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y-6vUwCxCrZByRVpDkTW_SC6apE.roa
Signing time: Fri 10 Feb 2023 10:05:08 +0000
ROA not before: Fri 10 Feb 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:3ac8:4fa4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:c9:2c:8e:a9:d2:22:4e:d8:42:78:0a:c3:34:86:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbeeaf5300b10ab641c915690e44d6fd20ba6a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:34:d0:44:61:3e:f6:d8:89:1e:45:ff:be:3c:
a4:89:3e:56:e5:fa:58:d6:17:98:d3:e7:e1:13:e8:
23:93:f4:cf:8a:6a:26:3a:c5:1a:55:0b:e6:2d:6e:
c2:5c:94:e7:53:50:81:05:19:d9:ed:32:37:2b:eb:
85:3e:32:f2:9a:e2:69:57:6f:73:b8:99:1d:53:89:
2a:e1:14:f4:d1:7b:4c:5d:1b:b2:bb:43:fb:8f:d5:
93:3b:95:15:7d:94:42:c3:54:46:25:95:17:1d:6c:
f3:20:2b:04:7a:75:57:f1:42:94:ce:d5:56:58:43:
4a:31:88:ac:9b:a6:fe:e2:c2:7c:3f:2d:3e:47:1e:
6c:f2:fa:2e:61:62:c7:29:c1:7c:92:74:c3:db:45:
1b:a1:c6:75:e6:ca:ad:98:d1:4e:c9:b8:03:b0:c7:
90:99:0e:3f:2e:bb:47:b0:ce:47:c2:86:97:3c:f6:
3e:3f:27:3d:34:f2:36:7f:ce:5d:72:4f:7e:0b:c8:
b8:b7:68:5b:49:33:5d:1e:ab:69:3d:b0:93:bf:de:
b1:8b:00:c0:7f:53:cc:86:48:d5:bb:9e:72:5f:60:
b7:4a:32:63:77:ad:f4:6b:e3:e0:c3:d3:d9:ed:c1:
25:d0:a5:49:de:34:dc:0a:a2:54:2f:14:94:60:c6:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:AF:53:00:B1:0A:B6:41:C9:15:69:0E:44:D6:FD:20:BA:6A:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y-6vUwCxCrZByRVpDkTW_SC6apE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:eb:9e:52:89:ef:dd:ea:04:53:38:df:6a:3b:00:a7:11:5d:
35:f9:5b:10:7e:a2:1d:d6:a7:96:a9:1f:83:ad:f8:08:68:12:
fc:71:c5:18:95:45:a3:d5:d2:2f:ea:cb:f7:96:a2:0e:6e:01:
f9:65:32:54:6d:ee:93:3a:00:bf:af:51:e7:69:07:f8:b5:a0:
3c:6c:8f:20:75:39:70:97:a2:97:57:d2:ac:30:ab:c0:0d:47:
aa:dc:e6:62:92:7e:dc:b0:00:75:f0:0a:71:fc:af:95:e7:65:
df:aa:a2:54:d9:16:3f:dd:0d:11:0e:07:dc:ab:47:a4:4b:a2:
d6:a5:73:71:fc:89:64:40:49:07:1e:3b:3a:f7:2d:3f:ca:48:
ce:33:fc:3c:1b:4c:ef:0f:7a:2d:6d:90:49:fe:43:04:2e:0c:
54:c7:7c:fc:c6:ba:81:58:1b:22:0a:e5:e0:21:ba:e0:01:14:
1d:7e:0a:b5:65:7d:b5:c6:cf:74:0b:e6:ca:1d:18:58:a4:24:
2e:cd:9d:99:36:fb:78:70:fb:e7:ea:20:dd:8d:1e:62:71:44:
0b:1d:b9:de:18:aa:5d:a3:cf:45:8a:6c:30:bc:72:a4:5c:04:
fe:c0:9c:39:8f:ae:2d:ed:c1:ac:ac:c9:f5:2c:bc:90:b0:9e:
9c:c1:38:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:13:23 2025 by rpki-client