Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yAjqrlFtaZAlzwzjE0-9MXu6vKQ.roa
File: yAjqrlFtaZAlzwzjE0-9MXu6vKQ.roa (raw, json)
Hash identifier: T80rdj32/zImehudqzF3JbHxGQUrMQyBrMeoGS6YZSY=
Subject key identifier: C8:08:EA:AE:51:6D:69:90:25:CF:0C:E3:13:4F:BD:31:7B:BA:BC:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018612176A58847A1586E14453E512734B5C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yAjqrlFtaZAlzwzjE0-9MXu6vKQ.roa
Signing time: Thu 02 Feb 2023 12:26:09 +0000
ROA not before: Thu 02 Feb 2023 12:26:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:17:6a:58:84:7a:15:86:e1:44:53:e5:12:73:4b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 12:26:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c808eaae516d699025cf0ce3134fbd317bbabca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:bd:7c:17:ec:e6:e6:da:09:a3:83:f2:be:
a8:06:31:bc:3f:9e:0a:30:cc:20:df:0e:89:d7:ac:
f8:aa:2c:c7:b2:34:5e:10:ae:35:66:03:1d:90:af:
c9:4d:00:f6:65:24:1b:9e:5c:12:65:97:35:99:3f:
10:4a:42:7c:44:52:cf:a8:1d:cb:27:e1:93:0c:bc:
c2:03:ee:2c:e9:50:b6:cf:3a:9c:1c:20:94:08:9c:
78:35:b5:60:be:a9:90:4f:71:3e:6b:d1:af:71:49:
ae:a3:29:c6:7f:11:11:66:88:d3:ec:5a:8e:1f:97:
94:20:e1:15:33:f1:ae:1c:cb:ba:ef:18:56:ac:9e:
6d:4e:80:f5:c2:aa:0f:51:12:f9:eb:48:92:4d:19:
e7:88:f0:ca:26:e6:77:b5:2c:b3:ac:a6:42:5c:e2:
c0:83:ae:b3:77:80:a8:bf:f5:c7:df:7f:4d:f6:12:
9f:72:33:39:c5:10:11:21:e9:84:02:a7:07:49:24:
d2:d7:42:96:ef:24:cf:97:11:42:d0:03:10:81:d8:
50:18:99:f2:54:14:1e:69:b8:5f:cf:9f:7b:bd:d3:
dd:ae:4c:98:7e:67:aa:fa:3c:86:6e:4e:ee:56:70:
7b:83:99:58:1d:1d:76:99:31:d5:c6:a7:e5:9f:c6:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:08:EA:AE:51:6D:69:90:25:CF:0C:E3:13:4F:BD:31:7B:BA:BC:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yAjqrlFtaZAlzwzjE0-9MXu6vKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:2b:53:2e:c6:a8:8f:fe:2d:b3:92:50:30:e7:a4:aa:2a:c8:
95:bd:e6:96:5d:41:75:48:f7:c7:1a:72:b0:91:bd:4f:e9:59:
49:8d:5b:28:38:3f:87:3b:08:9f:8e:ef:a7:4b:5e:85:63:96:
2b:f7:21:3e:f7:3c:70:23:ad:f6:a1:fb:e3:f3:d2:74:95:e6:
8a:a8:84:61:ed:4a:18:1f:0f:00:07:49:0b:c8:7f:d7:22:97:
47:71:dc:88:cf:87:3a:4b:74:d0:78:88:0e:b1:2e:c5:18:62:
2e:82:57:5c:73:66:06:67:a2:07:8c:24:bf:5d:7d:97:e4:ec:
36:6a:4d:b0:73:f2:a7:89:82:5f:ca:c8:f2:22:c1:96:90:70:
87:cd:31:de:28:d5:08:27:e2:ec:8e:77:a3:56:a9:81:e1:75:
1b:fb:8a:ea:ee:56:a9:8d:c0:f0:16:3c:b4:5b:fd:7a:02:ad:
54:78:69:0d:69:73:8c:89:f4:96:51:19:59:c5:d6:2a:71:55:
3b:6c:3f:1d:87:36:62:b6:39:14:50:ae:e8:b5:26:d6:b5:f9:
3c:95:84:e5:13:d3:16:ef:7b:b8:63:cf:56:d7:1a:9f:d6:24:
99:72:41:38:82:a2:9c:6f:72:02:5e:60:11:93:eb:91:27:65:
37:8e:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:50:56 2025 by rpki-client