Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y-e1i8CSlkXw4Iaj9QDzEPoW7aw.roa
File: y-e1i8CSlkXw4Iaj9QDzEPoW7aw.roa (raw, json)
Hash identifier: AFZhzeIZ7cwN+xKO5GmjvA0HVSIm6tAP56KwJPISUtU=
Subject key identifier: CB:E7:B5:8B:C0:92:96:45:F0:E0:86:A3:F5:00:F3:10:FA:16:ED:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825A6466C6C9E980C9B14DFCE6717C7970
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y-e1i8CSlkXw4Iaj9QDzEPoW7aw.roa
Signing time: Mon 01 Aug 2022 17:11:45 +0000
ROA not before: Mon 01 Aug 2022 17:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:64:66:c6:c9:e9:80:c9:b1:4d:fc:e6:71:7c:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 17:11:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbe7b58bc0929645f0e086a3f500f310fa16edac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:16:a4:12:03:d6:45:57:29:7e:71:e4:4a:
e0:74:c7:d5:1b:b0:eb:d3:d2:4c:47:63:8d:92:db:
b8:b7:32:66:e2:ce:30:2d:f4:8f:e4:bf:17:c9:8e:
54:fd:1b:dc:be:d2:f9:6b:e9:39:28:34:6d:91:da:
1c:c9:7b:5a:c7:cb:fe:0a:73:0b:57:0b:22:22:32:
94:db:ef:7a:f4:38:86:4f:6b:eb:16:24:8b:47:74:
e2:5a:bf:45:9c:ee:60:34:2f:7c:01:50:07:55:b3:
54:73:f3:59:5d:b7:bb:81:87:28:39:19:a0:f3:75:
f8:5a:c8:fa:d1:4b:83:0a:4a:f4:0d:4f:b8:68:4d:
2e:fb:29:5e:a0:a3:8d:50:e1:67:b3:c1:13:3c:4a:
42:55:da:60:2d:2a:f6:53:b0:b9:a8:01:4e:68:e6:
50:a3:5b:d5:f2:ea:35:38:73:8d:29:d5:a3:38:ce:
e9:38:60:79:df:6c:e5:5a:93:77:80:a1:8d:84:37:
69:d5:9a:96:89:d5:f2:de:2b:09:2c:14:9c:5c:e6:
9d:c5:0b:02:93:74:00:2b:7e:bd:0f:d4:8d:cb:17:
a9:63:23:cd:bf:c8:60:8f:ef:b5:0b:bc:f7:aa:3f:
a7:21:96:67:eb:bb:06:1b:7b:bf:8d:5d:3b:ff:ca:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E7:B5:8B:C0:92:96:45:F0:E0:86:A3:F5:00:F3:10:FA:16:ED:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y-e1i8CSlkXw4Iaj9QDzEPoW7aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:57:26:fe:8c:91:62:1a:f6:2d:69:f4:4c:18:9a:23:c4:d1:
ca:1b:e9:10:5b:f9:4a:46:64:a3:78:b2:44:26:fa:3f:07:68:
a3:a0:dd:f8:55:28:d9:91:03:0c:d8:cf:53:94:94:12:3f:f4:
f1:72:2a:e6:ec:6f:b6:94:85:73:9d:cb:c8:4a:7f:c1:33:56:
fa:55:1d:a3:45:87:92:ef:88:5f:74:1d:a4:32:6b:89:4f:eb:
5c:6c:f7:15:12:f0:c3:44:c5:69:30:7e:b4:9d:ab:77:c7:9d:
eb:33:02:43:69:35:a2:19:d9:6e:d9:8f:de:99:34:1a:31:9b:
ca:6b:75:7a:1b:a1:04:bf:24:15:a3:45:2e:f3:44:2d:c9:e9:
e3:7d:0e:19:93:af:34:a7:d4:17:d3:fd:51:7d:fd:0d:2c:29:
8a:16:ed:49:64:74:0e:18:60:85:0f:6b:71:8e:fc:62:8f:6b:
d9:90:7a:9e:45:6b:c1:45:a1:cc:3c:a3:ca:0a:03:6b:b4:9c:
0c:27:55:0e:a3:5f:e0:2e:7e:d0:1e:68:17:a3:e3:00:01:76:
d2:e0:9c:39:ea:82:11:0c:b5:2f:51:60:dc:22:6b:2f:cd:f0:
b1:80:b8:96:15:85:65:fe:b1:6e:4b:78:63:35:3f:93:12:bd:
41:39:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:37 2025 by rpki-client