Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y0Evs44bLMlsM9LTHxsg54l2jnU.roa
File: y0Evs44bLMlsM9LTHxsg54l2jnU.roa (raw, json)
Hash identifier: OXKrZ3ip37NSreHuCxQg0YrXAPqBtgx8jRmGUYKO0YY=
Subject key identifier: CB:41:2F:B3:8E:1B:2C:C9:6C:33:D2:D3:1F:1B:20:E7:89:76:8E:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888876E0AB8A94F39E89FF3A521400A5E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y0Evs44bLMlsM9LTHxsg54l2jnU.roa
Signing time: Sun 04 Jun 2023 22:11:11 +0000
ROA not before: Sun 04 Jun 2023 22:11:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:88:76:e0:ab:8a:94:f3:9e:89:ff:3a:52:14:00:a5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 22:11:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb412fb38e1b2cc96c33d2d31f1b20e789768e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:79:9c:b4:98:a5:4c:24:58:d9:6a:6e:61:
07:60:88:1a:f4:cd:88:0c:52:12:e4:86:6a:04:9c:
6d:4d:d5:53:e2:f6:41:ad:51:c7:96:bd:92:14:e7:
51:37:94:a8:25:cb:a6:e6:41:da:4c:7e:75:7d:c3:
1b:72:9f:d0:3f:9f:94:38:17:c0:43:95:d1:5c:24:
87:e9:40:dc:d7:07:99:08:41:11:22:95:16:28:7b:
ff:ce:53:35:7b:16:f4:65:a6:03:a1:2e:6a:75:65:
4f:68:9a:71:e1:39:52:07:a3:7b:d5:fd:09:35:5e:
cc:81:6d:ad:6c:f1:c4:68:4c:83:b3:2c:4d:4e:24:
a1:b0:f0:f9:7c:e1:e2:26:09:93:bc:e8:55:30:ae:
0a:66:88:87:8e:16:1b:7e:f8:7c:2c:cc:b5:ba:a8:
db:f8:59:a5:b9:30:4a:14:d7:6f:0d:12:d4:44:c9:
3d:88:2e:a0:ec:fb:9c:b0:21:a6:16:b2:42:49:66:
aa:95:f7:49:33:ff:a2:cc:f0:67:bf:e6:7a:e2:38:
eb:fb:4f:69:67:52:fd:ec:63:84:f2:c9:d6:92:d0:
1a:49:b0:d7:f7:ba:b0:bb:5f:71:fd:91:e5:1b:a1:
14:7f:63:85:57:b5:7d:9a:49:08:30:ed:d0:9c:84:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:2F:B3:8E:1B:2C:C9:6C:33:D2:D3:1F:1B:20:E7:89:76:8E:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y0Evs44bLMlsM9LTHxsg54l2jnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:0d:42:ef:7a:62:53:06:20:48:de:6d:43:60:b8:d2:28:3a:
8e:b4:b1:74:9e:b8:41:93:bd:34:67:72:3e:e1:e0:2f:e0:a5:
06:ee:1b:e9:d3:87:c3:58:97:ff:6b:d1:1f:3b:18:9c:1b:6f:
ea:c5:ef:70:5f:36:f4:93:f0:0d:82:b5:f9:43:3c:08:b5:1f:
d9:40:8d:c3:fb:d3:d3:07:df:cb:d9:17:c5:35:87:46:1e:6e:
e1:49:e4:dd:49:80:61:a6:26:63:eb:e8:c7:d0:18:2f:9d:b5:
58:ee:79:44:56:cb:f6:40:ba:c8:90:36:06:06:22:94:26:1b:
28:8f:6b:d6:3c:6c:5b:6e:02:5c:d3:e3:97:10:10:7e:da:74:
bb:54:ed:ff:b8:b9:c4:d9:cd:2e:5e:d4:48:82:ca:f7:10:d9:
67:15:6b:9f:88:46:1c:b5:7b:6d:a3:16:34:1e:ba:d1:b8:88:
a3:08:ca:b3:ce:2b:22:19:08:77:da:69:57:b1:8c:7b:fe:ad:
27:f2:34:76:5e:14:83:3d:71:92:e9:eb:58:bf:38:de:a3:fe:
33:4e:85:05:b2:49:f1:11:a4:c3:34:7b:a4:1f:2b:78:15:57:
2a:09:a6:1e:ba:28:4e:50:23:ca:50:6f:4d:eb:fe:6a:d8:35:
11:62:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:38:42 2025 by rpki-client