Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y0r4GTNkii2aunsOpBwkZM2bmRM.roa
File: y0r4GTNkii2aunsOpBwkZM2bmRM.roa (raw, json)
Hash identifier: KIg3EoAhAJEN/kxC38hGy17XJx08BRt3yPB/fHWzxmY=
Subject key identifier: CB:4A:F8:19:33:64:8A:2D:9A:BA:7B:0E:A4:1C:24:64:CD:9B:99:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D105A410BE137648EAF83BB6C533CD7A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y0r4GTNkii2aunsOpBwkZM2bmRM.roa
Signing time: Sat 11 Mar 2023 14:14:13 +0000
ROA not before: Sat 11 Mar 2023 14:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d1:05:a4:10:be:13:76:48:ea:f8:3b:b6:c5:33:cd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 14:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb4af81933648a2d9aba7b0ea41c2464cd9b9913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:fb:f0:42:ce:98:be:14:1b:7c:d2:04:6e:
82:fa:d9:81:fc:9e:c2:3f:c4:b0:65:e2:26:3e:e3:
38:11:39:fd:09:e8:51:c4:87:da:a7:fd:84:d0:f8:
c1:60:ca:ae:62:4e:ed:ea:fa:7e:a8:c7:0b:ad:04:
01:cb:26:26:56:cc:ba:25:cd:68:dd:ef:9e:10:f9:
18:1d:f7:d9:99:5d:26:7c:c6:72:d5:ef:52:1f:79:
51:49:5b:3f:95:b6:e5:a6:43:46:bf:a3:c7:a6:86:
ff:d8:2c:ce:bf:7b:5f:ad:72:f4:9b:c4:73:41:ac:
5f:25:45:ad:b0:09:15:be:27:af:71:84:2a:13:f6:
1c:06:87:45:97:05:ee:69:16:e6:e9:50:b1:b9:f6:
15:e2:a1:6a:e0:6b:27:d9:49:95:8f:51:50:2c:14:
8f:34:2d:9e:5b:aa:21:eb:cd:80:9b:a5:53:2e:3e:
81:08:d3:27:0a:b4:fc:40:25:76:58:81:98:0b:62:
8d:bf:33:bd:80:d8:4e:2d:bc:35:1a:ed:39:f2:51:
f0:44:b6:ac:9c:60:c4:9a:f7:3e:92:ff:90:41:3a:
aa:0f:30:9a:31:fc:94:05:3f:94:03:29:2d:c2:c3:
6d:36:4a:dc:a4:69:bf:24:a1:94:8a:63:0f:08:ec:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4A:F8:19:33:64:8A:2D:9A:BA:7B:0E:A4:1C:24:64:CD:9B:99:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y0r4GTNkii2aunsOpBwkZM2bmRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:6f:ec:a7:aa:33:c5:8a:6b:50:ed:9b:86:9c:3b:5e:51:46:
e1:1e:00:03:8f:ca:49:51:e3:58:6b:b1:90:15:8e:2c:80:35:
28:57:f2:44:25:37:38:d9:a5:02:ef:b0:ac:06:bc:62:ec:a3:
86:74:76:b8:e8:8c:4e:2e:19:2d:23:35:eb:e1:8a:26:74:05:
fd:09:3c:9e:74:72:6a:00:1e:5c:71:4b:37:a2:ba:17:8a:1e:
50:78:76:89:87:86:b2:4c:93:c8:58:65:6f:19:c3:ba:a8:d2:
95:2a:31:52:a0:be:f7:f5:a9:5c:19:6d:ec:20:9a:25:3b:47:
c6:96:0b:ec:4f:66:94:00:76:95:f5:19:82:2c:77:75:1a:d1:
98:72:79:54:26:0d:ca:ab:a9:c7:cf:53:b5:5d:29:ec:2d:92:
87:3a:82:52:71:b1:aa:48:b3:c6:19:6a:01:21:33:c5:37:ce:
38:e4:47:61:6c:76:38:f5:7d:c9:94:8e:79:be:3e:2a:37:c8:
4d:f8:10:70:b0:7a:98:f2:05:a0:4a:d6:03:e9:d4:cb:c8:06:
3d:f4:1f:ff:e2:f9:48:7a:7e:3e:cb:23:e7:11:4b:17:0f:36:
c7:e7:bb:d7:db:a2:c7:c7:0d:ed:34:dc:64:9f:05:67:a8:d8:
96:3a:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:29:13 2025 by rpki-client