Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y6uf4ZGNHo7UHvgYJGDk6Jm4i84.roa
File: y6uf4ZGNHo7UHvgYJGDk6Jm4i84.roa (raw, json)
Hash identifier: hqzKATm4BZc0wBXGb3XwCh9KDTlpfebNszE912Bn9Hc=
Subject key identifier: CB:AB:9F:E1:91:8D:1E:8E:D4:1E:F8:18:24:60:E4:E8:99:B8:8B:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83149A15
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y6uf4ZGNHo7UHvgYJGDk6Jm4i84.roa
Signing time: Wed 11 May 2022 14:09:50 +0000
ROA not before: Wed 11 May 2022 14:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:b36f:7401/128 maxlen: 128
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199165461 (0x83149a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 14:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbab9fe1918d1e8ed41ef8182460e4e899b88bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:7e:e5:46:b4:cf:1b:e3:5d:d6:f9:38:b4:
77:0a:6f:a5:80:45:bc:c2:9c:f6:60:e6:59:33:d4:
77:30:73:93:aa:50:2a:90:2f:d6:6c:6f:4f:bc:37:
9b:0f:7b:e0:af:1f:2e:3e:ef:49:21:b5:14:fa:8c:
e3:4a:e3:aa:11:42:a9:4c:b4:b8:f5:30:13:47:c3:
89:16:d2:23:3b:e5:9e:98:51:a7:5c:39:54:7e:4a:
ee:bf:aa:28:8f:fc:53:fb:97:50:6f:42:12:fb:c0:
76:dc:ab:d2:d1:f6:d3:b6:c7:d7:2e:98:cd:04:ab:
cc:23:fe:64:d3:93:47:19:c3:dc:04:b9:b5:b2:d2:
a3:81:c7:e8:d9:62:91:63:61:6d:4d:42:d6:96:a0:
70:66:df:33:ad:86:bd:53:e8:ad:b9:ad:b7:0d:35:
9d:1f:9d:1a:38:e9:85:d7:14:a3:86:5b:c8:59:40:
f1:22:c4:7c:90:73:4e:29:c5:50:93:80:ba:1f:05:
60:b0:bb:10:84:df:91:94:fd:1b:de:7d:db:01:6a:
ac:51:ae:93:2b:67:c9:ca:55:ab:ed:b2:47:49:1b:
76:5d:1f:8e:a0:40:29:75:d9:ba:e3:38:0b:ed:9d:
6b:2f:02:7b:38:1c:2e:bd:1c:a9:cb:da:e8:4a:f3:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:9F:E1:91:8D:1E:8E:D4:1E:F8:18:24:60:E4:E8:99:B8:8B:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y6uf4ZGNHo7UHvgYJGDk6Jm4i84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:71:11:38:72:b0:1b:3c:f4:88:b0:4c:07:98:ba:47:ed:7b:
15:ea:55:48:46:20:b5:1b:a4:92:8f:59:0b:95:40:51:b3:9d:
15:73:58:e4:1b:7f:63:41:83:a9:a1:fe:17:34:6a:36:12:3f:
5a:42:e7:08:57:85:70:85:c0:fd:b0:df:23:4c:40:47:9f:b2:
8c:1e:88:03:31:20:71:68:92:78:77:a6:2b:b6:1e:74:b9:e1:
cf:32:32:8e:19:f6:42:ac:a6:3a:e2:df:4e:48:52:6a:91:fe:
ca:a1:42:e4:68:34:a6:3d:d0:9f:e0:73:f1:84:74:da:40:cc:
b9:a1:f2:44:38:b2:9e:a4:75:ac:e8:c1:78:f5:7e:13:a4:d1:
a1:b3:1b:f4:72:ab:55:f6:81:20:c8:c7:58:bd:7a:75:63:74:
63:32:86:cd:a6:9a:4b:83:a1:ee:6e:86:cf:5f:af:66:c2:21:
9d:91:f3:0e:35:29:d6:d0:c1:d6:8d:4b:37:4b:01:9b:82:bc:
3c:9e:b6:3b:90:7a:9e:5e:46:f1:6a:c4:e4:c5:c9:39:c7:7c:
1a:d2:7b:29:1a:1c:39:72:73:75:1d:fb:13:80:d2:5f:85:64:
a6:37:ed:9f:e6:57:9e:3e:40:14:48:c4:08:28:47:cf:ab:26:
2a:ed:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:22:37 2025 by rpki-client