Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yAGaTQnm-RK5iywSlWsApEl-bSM.roa
File: yAGaTQnm-RK5iywSlWsApEl-bSM.roa (raw, json)
Hash identifier: LZWsZhiV3VWYGzPc1pAlFfZIgxBPQtFDRpab39bbcPI=
Subject key identifier: C8:01:9A:4D:09:E6:F9:12:B9:8B:2C:12:95:6B:00:A4:49:7E:6D:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69DC9F03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yAGaTQnm-RK5iywSlWsApEl-bSM.roa
Signing time: Sat 12 Feb 2022 02:08:12 +0000
ROA not before: Sat 12 Feb 2022 02:08:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776066307 (0x69dc9f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 02:08:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8019a4d09e6f912b98b2c12956b00a4497e6d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:b1:88:c3:27:81:ae:44:9f:1e:84:00:fe:
3a:5b:d5:e8:c9:67:18:e1:22:de:12:d9:32:35:d9:
69:c0:58:eb:f9:96:32:69:18:cc:01:37:02:00:3a:
91:79:40:1d:ed:7d:6a:08:7e:58:4b:6e:92:76:bd:
c1:41:e4:05:62:f2:25:b4:1c:11:37:15:12:cc:71:
a0:9b:63:50:4a:11:ee:4d:80:0a:c6:30:f4:57:b4:
24:37:d6:ff:12:49:8f:92:46:31:d1:33:76:5a:ba:
74:62:88:ac:8f:ef:f1:06:38:93:59:c4:b2:c8:c7:
98:f9:a9:e6:39:94:6e:01:e7:ca:6b:d7:22:37:ad:
8b:b3:ad:18:75:ff:66:73:67:c8:a0:bb:73:0f:a7:
06:4f:b6:a6:bc:41:69:b0:3a:51:8c:42:8a:37:6c:
9a:cb:ef:16:61:cc:0a:22:75:c3:da:93:b3:5f:97:
a7:9a:6c:f3:40:c7:d3:9e:a4:99:0b:4f:f7:1d:72:
fc:13:78:1a:a8:b8:89:aa:9d:86:c8:21:c2:02:ab:
4f:b3:ae:a3:af:8a:98:03:d8:35:24:bf:ef:cc:22:
78:7f:ff:3e:cf:5d:09:da:36:86:56:fa:0d:89:ab:
59:2e:d3:dd:f0:f6:60:ca:eb:58:cd:de:32:87:56:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:9A:4D:09:E6:F9:12:B9:8B:2C:12:95:6B:00:A4:49:7E:6D:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yAGaTQnm-RK5iywSlWsApEl-bSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:34:8f:e6:c1:f2:b4:c4:41:f5:c2:0e:87:c1:63:c4:28:3c:
0a:3f:2c:17:38:2a:88:12:d3:8e:48:90:df:c5:fe:a4:ee:83:
c0:dd:22:ef:43:9c:42:0d:eb:c7:0d:e8:50:05:9f:5a:2a:14:
4a:92:fa:b2:a9:07:88:9f:c3:39:37:f7:7c:ed:d3:ea:a2:e4:
92:a3:a4:72:f7:0d:25:11:9b:68:0d:03:87:fd:2e:ee:c8:3f:
ae:75:77:61:93:52:aa:98:99:82:78:66:18:07:3b:a6:a5:d5:
83:3f:e8:44:e1:ff:05:86:b2:ee:5f:11:8f:ca:e1:63:d8:96:
d6:d3:e3:90:a0:1b:0f:4e:56:44:c4:9c:7c:82:c7:ba:24:f6:
64:2f:ff:d3:47:37:79:85:c3:28:74:cc:2a:81:9c:56:fa:ad:
dc:f3:d8:f8:54:7e:01:15:92:93:f5:ca:6d:09:18:c3:f2:9e:
ba:fe:17:be:d7:2d:37:6c:7a:59:4c:9d:c9:95:35:5a:57:04:
2e:4f:81:27:a9:97:52:73:db:4c:1c:78:48:8d:f5:a3:f3:4f:
77:37:2b:c7:04:9f:a6:e6:0e:ab:e7:b0:65:72:0b:bd:a9:ea:
7a:03:3a:1f:91:2b:aa:25:06:43:bb:88:b7:44:5b:5e:c7:f5:
f8:9a:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:26 2025 by rpki-client