Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y8cXNvNWK7ai2ZdWzKjhUvZa2_A.roa
File: y8cXNvNWK7ai2ZdWzKjhUvZa2_A.roa (raw, json)
Hash identifier: hUZI3GFKT/TuccO9CDjUR/TPTiSoTo8y1Xjhm19E3BY=
Subject key identifier: CB:C7:17:36:F3:56:2B:B6:A2:D9:97:56:CC:A8:E1:52:F6:5A:DB:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183723523B0978D147EBF28822BA717C362
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y8cXNvNWK7ai2ZdWzKjhUvZa2_A.roa
Signing time: Sun 25 Sep 2022 01:13:48 +0000
ROA not before: Sun 25 Sep 2022 01:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:72:35:23:b0:97:8d:14:7e:bf:28:82:2b:a7:17:c3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 25 01:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbc71736f3562bb6a2d99756cca8e152f65adbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:d6:b5:67:67:c7:08:c8:b1:d6:2a:0b:ce:
11:d6:31:f0:8a:ac:76:50:5c:f9:db:9f:6f:86:e1:
0a:1b:b2:9d:25:30:5a:a3:2a:7c:73:7c:f7:2e:ac:
08:07:b6:0a:da:21:eb:ef:bf:71:42:0d:6b:f1:5c:
5e:68:91:8f:9a:32:40:6d:af:2c:74:ee:ef:67:fa:
4d:4a:fc:30:3a:12:6b:69:25:c7:3a:2c:c8:ba:75:
c1:26:05:09:6d:c6:08:90:54:ff:88:ce:ab:08:a5:
1d:81:c2:65:78:63:1f:5a:27:b7:37:1f:21:77:7b:
82:d0:90:71:92:b0:91:6a:53:91:e1:70:85:6b:cc:
16:1a:a9:71:ca:96:b1:f5:82:59:56:fd:18:d4:e9:
5c:9d:7c:6c:c4:19:ff:21:0c:bb:d3:b4:e3:c6:e2:
78:84:86:8f:07:a5:bc:9d:1b:64:90:d6:0d:97:7c:
3e:38:5f:81:4d:d8:d1:da:31:0b:c8:c9:c9:cf:00:
84:8d:46:bb:aa:48:9c:be:ea:bd:4d:f1:01:cd:02:
4c:a8:ac:d1:30:92:31:bf:15:a0:be:e7:24:56:2d:
36:f0:82:8b:b6:fd:c8:14:7a:f2:f0:e6:d0:13:ee:
67:0f:80:34:89:31:2a:81:4e:c2:bb:b0:dd:f0:f5:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:17:36:F3:56:2B:B6:A2:D9:97:56:CC:A8:E1:52:F6:5A:DB:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y8cXNvNWK7ai2ZdWzKjhUvZa2_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:79:4c:bc:cf:e0:18:72:74:87:3f:80:31:f5:de:b7:b7:97:
11:7e:88:ec:93:43:69:d1:5b:17:db:75:7c:63:f9:6e:47:b6:
10:96:5b:cc:88:28:6c:13:53:11:b1:4b:bd:5d:19:7a:19:93:
87:45:ff:0a:ba:64:aa:67:38:66:52:e4:4b:28:98:dc:44:75:
3c:a7:32:80:dd:ac:83:ff:f1:dd:c9:1f:74:03:2f:5e:f8:62:
28:fd:fb:61:69:46:d5:35:40:7a:56:2b:12:4f:e7:ff:49:34:
ac:c3:a6:75:83:be:43:ba:14:35:10:2b:5e:7d:44:d7:5c:a0:
e3:d3:fb:dc:3d:3b:0a:86:c7:d1:dd:63:53:86:0c:33:44:e9:
de:16:dd:83:ff:5f:7c:13:a0:db:7c:7d:9d:bf:a6:ee:48:30:
13:f0:e1:aa:f5:51:3b:9f:c9:62:00:2f:ea:ff:16:0f:32:1f:
64:88:c5:5a:bb:a3:af:87:a8:59:bb:43:d8:68:24:c8:5c:cc:
9c:f6:a1:7b:7f:dd:c0:4a:4c:cb:4a:80:35:04:06:96:cb:f2:
ae:21:bd:01:e2:ef:fd:0a:ca:92:73:64:db:9d:a1:fd:6c:8e:
86:a7:5f:76:dd:ec:bd:4f:f3:c7:e8:a6:b8:f0:eb:ba:72:a6:
a3:38:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:45 2025 by rpki-client