Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y6pUEnMU5DI8iBRtUNJmoeYW26E.roa
File: y6pUEnMU5DI8iBRtUNJmoeYW26E.roa (raw, json)
Hash identifier: tqHWjCOGOTXkOYXmafU8fFRxecFWsZclY/MX+3SPBP8=
Subject key identifier: CB:AA:54:12:73:14:E4:32:3C:88:14:6D:50:D2:66:A1:E6:16:DB:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018550B2EDE6B58BADCB8B3280FF4F7E0700
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y6pUEnMU5DI8iBRtUNJmoeYW26E.roa
Signing time: Mon 26 Dec 2022 23:09:41 +0000
ROA not before: Mon 26 Dec 2022 23:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:50:b2:ed:e6:b5:8b:ad:cb:8b:32:80:ff:4f:7e:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 23:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbaa54127314e4323c88146d50d266a1e616dba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:55:19:e7:24:80:e7:d2:f5:4d:32:b4:4e:
3f:c4:e5:66:60:68:f9:9e:65:b3:b7:da:a3:c7:26:
9c:3f:04:31:bd:93:39:f8:61:fd:66:56:e8:49:bd:
18:41:0d:4d:55:70:c3:11:e7:56:03:62:f7:fc:1b:
57:f7:0c:bd:b3:91:44:d7:3b:a0:05:71:ef:bf:f2:
0e:f5:11:ed:17:fc:f3:ad:fb:ee:0c:df:8e:67:97:
64:f3:e9:6c:56:02:5e:d4:e1:16:d2:42:0e:d9:35:
bd:af:9a:61:59:c4:fc:ab:c2:0a:02:55:36:ed:6a:
40:14:19:be:28:61:a3:82:c0:f6:48:77:a7:6c:d7:
56:36:54:ea:a5:4f:12:01:a9:35:e3:b0:89:9f:47:
c3:2d:f7:be:5e:32:f1:0c:f4:71:19:b6:4c:55:8e:
e2:a4:0e:92:fe:c4:be:02:54:16:cb:0d:9a:79:65:
61:eb:d4:ab:c7:cb:2f:41:95:7c:22:ea:c4:87:c6:
e2:c0:08:e0:49:e4:93:53:c7:af:f2:df:65:c2:63:
49:24:42:06:0b:7b:50:73:e2:66:f5:2c:12:c4:6a:
de:ef:c3:48:43:f2:91:ef:7e:4d:66:31:b5:d4:16:
88:3d:03:63:d7:6f:7b:26:93:25:11:a5:4e:7b:2a:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AA:54:12:73:14:E4:32:3C:88:14:6D:50:D2:66:A1:E6:16:DB:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y6pUEnMU5DI8iBRtUNJmoeYW26E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:dd:df:04:7d:d9:7e:f0:55:74:f7:32:55:28:ce:25:8f:cb:
f7:6c:14:e9:a4:cf:bf:ab:2b:5a:1a:1b:13:11:a3:68:82:27:
51:d8:a5:d6:e4:7c:83:b3:ff:af:e5:13:59:ab:8a:26:b1:75:
d6:21:c1:67:6f:37:76:09:4e:cb:6a:53:f1:0d:be:27:74:cd:
d1:49:12:8e:49:4c:3f:d6:71:ac:a7:7f:33:1f:cf:4e:ee:29:
6d:ee:25:d6:fb:4f:2c:bf:0b:de:7d:a2:91:70:b1:4e:7a:3c:
1f:b8:d9:8f:24:a0:8c:83:e1:5c:50:a2:1e:93:42:2f:ea:c1:
8f:de:cb:8c:25:db:ee:0c:f7:b1:06:06:f8:9d:0b:cb:01:ff:
55:34:22:f4:a3:f1:2f:f5:ee:a2:48:c7:33:37:f0:82:6d:21:
2a:19:a6:4f:e9:7b:3c:6c:84:e2:a0:3d:29:18:5f:4d:bf:63:
ee:56:4b:56:27:54:90:a9:4e:0f:2f:be:68:2b:be:c5:66:de:
c1:88:2d:76:01:82:b8:4e:c8:d5:cc:6d:a5:99:c1:1d:2f:dd:
91:2a:ae:ec:d4:55:41:d8:fa:d7:f2:68:6e:58:f1:00:d3:f7:
98:88:84:1c:7c:ec:67:a3:bc:f4:c6:ae:f5:fc:83:ed:76:4c:
eb:e6:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:59:15 2025 by rpki-client