Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y1lEYdfXRqKFNPy4yUtwkIeOC6Q.roa
File: y1lEYdfXRqKFNPy4yUtwkIeOC6Q.roa (raw, json)
Hash identifier: IaA/EEhCKvWctbWKXmtcRzX1O9x9b698SflBxbk5bIY=
Subject key identifier: CB:59:44:61:D7:D7:46:A2:85:34:FC:B8:C9:4B:70:90:87:8E:0B:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CC4D2527D2ACECD001C499BE31FF05A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y1lEYdfXRqKFNPy4yUtwkIeOC6Q.roa
Signing time: Fri 10 Mar 2023 16:14:13 +0000
ROA not before: Fri 10 Mar 2023 16:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:4d:25:27:d2:ac:ec:d0:01:c4:99:be:31:ff:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 16:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb594461d7d746a28534fcb8c94b7090878e0ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:dd:e1:01:d6:de:5e:2c:c2:b6:a7:13:9f:
92:72:39:c9:b6:ad:80:5a:08:64:67:9c:40:26:66:
e5:65:51:98:6f:19:23:01:03:b8:b9:ca:ec:7e:63:
81:93:c1:76:1f:17:2a:83:17:a9:a6:b7:64:7b:5e:
f3:6f:f6:ea:4d:32:f1:7d:1d:80:35:48:db:bd:f8:
af:29:d1:ce:75:1a:3d:1b:72:53:ad:62:8d:20:b4:
5e:8d:a0:d8:16:ca:14:cc:0f:aa:a2:ba:90:4e:45:
45:57:31:a6:12:de:1d:7f:44:27:ab:e0:fb:e7:1f:
86:de:42:97:b6:48:22:a5:de:2b:fc:57:fc:d9:ed:
3e:eb:57:94:1e:53:21:af:28:db:84:9e:76:13:1c:
cf:19:88:0f:49:06:f0:ec:92:a2:e4:cc:4c:1a:38:
48:02:5f:16:77:8c:dd:99:8d:94:a3:f6:d8:31:38:
35:33:73:9d:45:80:c5:28:f6:2f:53:b8:6e:c4:2a:
33:87:d6:4e:f5:91:78:4d:f4:9d:74:f5:52:e6:c3:
aa:e5:cc:69:9c:a5:cd:56:e8:88:33:77:b8:6c:3d:
8b:9d:8f:11:13:06:c8:b7:e5:56:f4:1b:3f:cf:4b:
d6:ee:2c:6f:9e:c6:58:58:a7:8b:3d:d6:31:06:ab:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:59:44:61:D7:D7:46:A2:85:34:FC:B8:C9:4B:70:90:87:8E:0B:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y1lEYdfXRqKFNPy4yUtwkIeOC6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:6c:80:3c:a9:40:d2:77:b6:e1:50:4d:f5:3f:fe:09:6f:2c:
98:f1:07:e1:a3:eb:c3:48:e2:98:90:f4:ac:42:dc:65:6e:7e:
85:ea:2d:79:03:46:a7:ba:49:93:36:a2:0c:3a:bd:5e:27:75:
27:22:79:00:d3:af:a7:c6:91:d7:e2:27:c9:b2:52:9d:05:78:
0a:f0:27:e1:fd:e4:b2:93:d1:0c:ef:39:ab:99:46:34:a5:5a:
5e:e9:87:3c:68:10:08:ea:b9:31:48:65:1f:6b:5d:7c:a2:d3:
f8:27:fa:f9:3e:65:eb:09:77:9e:17:f2:30:6b:f1:7f:4e:67:
4c:8b:98:bc:a6:67:63:c2:34:7c:c1:d2:25:cb:2e:b7:99:0b:
f9:dc:c6:7d:15:d9:4d:09:6f:57:52:f9:95:ac:89:70:8e:cb:
6d:3f:d5:5b:97:99:c8:94:2f:f1:4c:c3:dd:ce:84:9b:e5:2c:
4c:b0:64:63:0a:d3:3a:5b:7c:fb:5d:1f:be:36:24:0c:95:1e:
9e:4a:e9:b8:50:f4:dc:02:4d:73:6c:12:7e:fe:bc:a8:cc:7d:
95:14:26:9f:bd:6f:34:c6:40:0f:64:29:1d:33:f4:a1:4a:6c:
08:27:a9:ae:5f:ed:d7:56:cc:c9:8d:ae:b9:f1:88:54:6d:ae:
37:d6:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:32 2025 by rpki-client