Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yBkoJGt32KUZBEh8sNWMzvgUqBY.roa
File: yBkoJGt32KUZBEh8sNWMzvgUqBY.roa (raw, json)
Hash identifier: CkHzUTDzEm4qPQhEu5BH32c6BqPC415g4lLWlQb3JEM=
Subject key identifier: C8:19:28:24:6B:77:D8:A5:19:04:48:7C:B0:D5:8C:CE:F8:14:A8:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018756AF011FE06F960726F11F3F7D795D30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yBkoJGt32KUZBEh8sNWMzvgUqBY.roa
Signing time: Thu 06 Apr 2023 13:08:42 +0000
ROA not before: Thu 06 Apr 2023 13:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:af:01:1f:e0:6f:96:07:26:f1:1f:3f:7d:79:5d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 13:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c81928246b77d8a51904487cb0d58ccef814a816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:6c:d8:54:a4:43:f0:7a:99:0c:d8:8a:a3:
bf:b6:a7:7a:ed:23:da:2b:c0:0a:65:7f:5e:5f:f6:
ee:dd:87:00:b2:25:64:03:4f:6e:76:46:93:f0:80:
a4:8d:aa:ec:4d:fb:fd:e1:0f:41:7b:14:69:6f:d4:
b1:96:5c:20:16:c2:4d:f7:de:4b:20:2a:f3:e6:5b:
76:4b:5b:42:a0:92:ba:28:3d:d8:62:33:7d:72:13:
d8:80:79:b9:a0:42:6e:28:82:df:ee:4a:fa:fd:e2:
19:10:89:41:29:06:64:9d:b7:2d:39:96:31:b6:2a:
4c:7e:fb:15:a7:d2:e0:6e:24:0f:8e:a6:64:35:21:
7d:33:e5:28:02:53:9d:e7:86:1e:e0:b6:5d:c0:c7:
e4:9a:47:ae:11:d5:5c:8d:36:c2:a1:d5:d7:52:af:
8c:aa:1b:25:f9:aa:f0:82:0e:6e:83:da:00:81:30:
23:6a:40:ce:37:36:dd:b6:c1:da:35:32:34:50:58:
5a:32:d2:01:9e:cd:92:c5:f2:e5:55:d4:17:a9:82:
66:ec:fc:f8:74:4d:ae:a0:f1:cf:9f:e9:45:e1:47:
23:92:c0:21:c7:81:e5:1c:65:9d:07:d3:db:f2:c0:
f8:12:d3:bf:c1:c5:f8:71:53:f5:6d:62:e4:32:ef:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:19:28:24:6B:77:D8:A5:19:04:48:7C:B0:D5:8C:CE:F8:14:A8:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yBkoJGt32KUZBEh8sNWMzvgUqBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:15:a4:fd:99:5e:b2:ef:87:89:b0:a8:64:63:45:e3:4e:55:
b5:00:05:ce:05:0a:81:7e:f2:12:d6:00:16:6a:e5:18:4f:75:
b7:dc:10:61:91:00:bd:50:27:a3:09:fa:8e:ad:3e:1b:5e:c3:
a0:5c:4f:6f:0b:83:21:95:21:d5:82:be:b3:38:8f:3a:f5:10:
81:99:a2:8c:d6:d4:5e:f1:2d:9d:e4:f0:90:f9:63:0e:fc:87:
97:b4:f2:cb:49:60:4e:d1:6a:0d:11:8e:b8:0f:0f:a3:d2:1f:
45:9a:2a:11:08:b0:6f:58:69:2d:05:94:72:ee:eb:12:c9:5e:
03:14:68:71:4c:77:fc:ff:0d:dd:ff:51:70:68:52:1b:3f:2f:
dc:a9:37:9e:99:32:03:b7:f6:50:4b:42:e9:e0:7a:b3:bc:29:
05:ef:67:a8:42:28:8f:f0:4c:0f:76:f3:92:e0:1f:f8:57:36:
d3:01:6c:c5:77:6f:34:f2:71:48:16:20:ec:68:d9:59:63:1f:
18:34:83:5e:20:cf:31:80:5b:3b:62:3f:ef:70:a9:22:ae:99:
56:39:26:77:60:c3:c7:bf:b4:92:22:13:c3:fe:b8:90:2d:00:
37:27:31:de:ca:5e:35:0c:45:c4:55:2e:f7:8d:09:7e:c6:3c:
af:58:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:38 2025 by rpki-client