Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y-XSs_5xjs_bxFgYsEkHM1NOmco.roa
File: y-XSs_5xjs_bxFgYsEkHM1NOmco.roa (raw, json)
Hash identifier: 9rSTiec5u88QRRv2AidtYuqjxqGRn5B9KABuHp7/fxg=
Subject key identifier: CB:E5:D2:B3:FE:71:8E:CF:DB:C4:58:18:B0:49:07:33:53:4E:99:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DFC6545EBD11EA49D52BD82C104F94DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y-XSs_5xjs_bxFgYsEkHM1NOmco.roa
Signing time: Wed 21 Jun 2023 21:04:56 +0000
ROA not before: Wed 21 Jun 2023 21:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:dfc5:b2b2/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:c6:54:5e:bd:11:ea:49:d5:2b:d8:2c:10:4f:94:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 21:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbe5d2b3fe718ecfdbc45818b0490733534e99ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:8d:17:39:50:1c:fd:cf:2e:6c:12:89:2d:
0e:d1:17:f5:38:d5:58:1e:5e:de:65:d9:05:86:06:
bd:d5:1e:fa:08:f5:c5:5b:c2:48:8c:7a:98:73:29:
be:73:08:b5:7d:a6:c6:80:0a:fc:86:dd:d7:ef:ea:
2b:ac:aa:0a:72:95:bb:83:ea:eb:4e:25:e5:14:42:
b5:cf:4d:54:6c:6d:00:30:e1:7f:04:b0:5e:a4:d7:
78:e2:e0:62:5e:0d:72:b6:cc:70:56:2a:c9:97:48:
d7:f7:0a:00:35:a3:4c:e5:f9:34:57:69:84:e0:7d:
59:c8:db:d5:26:71:82:97:7c:18:77:1f:84:f9:f4:
2d:2a:6e:1e:ce:51:ac:67:65:dd:4e:b0:3f:e0:e6:
60:ea:c2:9d:f8:0b:11:6d:9e:16:64:51:db:93:b6:
67:5c:99:91:e3:e4:f2:28:f2:e7:63:0a:04:37:dd:
d1:8c:a9:0a:c2:15:91:98:63:f6:5f:8c:ed:ce:a8:
df:1a:90:b1:c5:70:33:37:22:e2:a6:32:7e:22:7a:
ce:34:18:86:b9:f3:37:67:2d:e9:57:47:11:25:b3:
e3:e0:d3:1e:7c:70:dc:0d:64:32:9c:9d:72:ca:8f:
87:ae:bb:27:31:9a:36:d5:57:44:3f:f2:b4:c0:eb:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:D2:B3:FE:71:8E:CF:DB:C4:58:18:B0:49:07:33:53:4E:99:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y-XSs_5xjs_bxFgYsEkHM1NOmco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:b7:fe:8b:39:c1:fc:b5:80:f9:cf:ec:01:a3:3b:8d:a0:05:
90:4c:36:0f:ce:b2:c0:2d:26:6a:e7:63:85:19:29:60:42:2d:
74:38:bc:27:02:d2:e5:43:2e:94:44:00:cf:b1:1b:9d:67:73:
5a:77:20:46:5a:1f:b4:a4:ca:ca:68:65:3f:62:2e:7c:42:9f:
96:8c:83:a6:78:ea:b3:6b:8c:4c:35:b2:b6:4c:1c:34:de:66:
d9:d8:18:8f:88:02:e6:b5:31:83:2f:b4:9b:cc:e2:87:09:ff:
b3:54:7d:ec:0d:9d:68:99:ae:d2:66:dc:c8:b4:f3:9f:a6:72:
41:16:58:b6:05:4d:b7:9a:b3:ec:26:fe:22:dc:01:ee:e5:2c:
51:8a:3f:66:d3:f5:76:d4:dc:08:98:30:e6:c4:ff:9b:09:b4:
cd:1b:49:37:3a:f7:c5:e6:cf:2e:70:67:a2:ae:0e:bd:73:49:
e1:dc:a2:1d:00:63:f9:c3:ac:66:bc:ab:77:bf:9a:3c:04:85:
45:bb:cf:5b:c7:da:f3:a7:92:e5:ca:c4:10:ed:6c:68:2d:be:
9f:53:bb:a2:52:bd:8a:d5:ef:ae:c7:35:ff:df:60:37:b8:64:
06:22:b7:11:53:05:d0:de:1a:3c:95:f9:88:45:c6:3b:11:8c:
4b:0b:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:03:35 2025 by rpki-client