Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yCzclU4qfBqiRHIB88S39-4O4bA.roa
File: yCzclU4qfBqiRHIB88S39-4O4bA.roa (raw, json)
Hash identifier: 43+OcW7O0qNXJ4KCblKLicIDiMzDNEiL3HvtMjDoIOQ=
Subject key identifier: C8:2C:DC:95:4E:2A:7C:1A:A2:44:72:01:F3:C4:B7:F7:EE:0E:E1:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CAFC971D1F7B9978C5209351A712AA1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yCzclU4qfBqiRHIB88S39-4O4bA.roa
Signing time: Sun 06 Aug 2023 13:14:58 +0000
ROA not before: Sun 06 Aug 2023 13:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:fc:97:1d:1f:7b:99:78:c5:20:93:51:a7:12:aa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 13:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c82cdc954e2a7c1aa2447201f3c4b7f7ee0ee1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:40:df:d6:2d:4a:c1:50:f4:71:67:e6:a3:
a7:eb:a2:a2:f2:55:df:85:ec:ef:19:4e:c0:3d:ce:
1f:00:8b:7b:3b:d5:bc:19:13:15:74:37:b5:3a:40:
c4:c8:eb:a2:53:b7:45:8c:dd:37:fd:dc:92:79:11:
5d:0c:97:ab:98:75:a4:4c:e7:2d:98:08:06:13:5e:
90:6b:23:ca:98:5d:2b:f9:46:dc:70:c0:ae:3c:4e:
7c:bc:77:a8:43:4b:69:d1:04:ba:6c:be:be:4c:2d:
d0:21:b4:86:fb:af:89:b8:f6:1c:ba:e2:e7:8f:e1:
ad:fe:8a:72:06:cc:7c:d2:60:52:80:03:a8:d5:b0:
4d:47:00:73:f5:3a:50:40:82:d4:79:71:dc:fb:1d:
67:18:eb:6b:89:a9:3e:7b:df:0e:2d:4b:9f:0b:c7:
39:96:65:8f:21:03:86:40:91:14:d8:35:27:92:b7:
cd:3e:5a:03:23:62:db:3f:37:bb:3d:b6:de:0b:46:
3b:db:9a:04:73:1e:8d:14:78:b1:bc:c0:25:ac:cc:
80:ba:56:e5:1b:1b:05:57:35:37:a7:36:5a:46:c2:
dc:1e:cc:b2:be:4e:79:fc:7e:7b:2f:7e:7e:26:e4:
d8:5c:5a:f1:53:57:cf:02:a5:71:c2:dc:c3:b8:d8:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:DC:95:4E:2A:7C:1A:A2:44:72:01:F3:C4:B7:F7:EE:0E:E1:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yCzclU4qfBqiRHIB88S39-4O4bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:30:5d:44:d3:c0:35:2e:23:df:f9:90:b6:0d:90:3b:58:c7:
4e:7d:03:70:9c:fe:5a:08:b6:98:f8:7d:dd:e0:b1:61:be:ff:
03:25:f3:36:3d:9f:af:3a:17:e2:13:48:a8:46:65:d0:95:28:
63:c6:d3:1f:f3:3c:c1:25:ef:7f:b6:2a:e1:cf:24:11:8d:dd:
d7:f5:ca:81:ca:34:c5:a1:71:5e:4f:4d:df:a5:b3:d9:e0:f2:
4d:d9:a7:9f:80:f3:f9:9a:8e:32:1d:b4:be:eb:4a:24:70:60:
ec:41:85:a9:1c:49:09:5f:60:f2:2f:64:42:ee:66:16:25:0d:
4c:66:5f:16:b7:42:a4:27:68:f1:3d:6a:6b:2a:9d:18:39:16:
ea:6d:d5:6a:d7:fc:d1:a3:5c:4e:39:67:fe:0e:cc:12:18:08:
32:49:87:44:84:9f:29:8a:85:4b:23:17:91:4c:2b:2b:55:99:
da:d2:24:f2:5f:ca:22:db:60:e6:57:d7:5a:f8:bb:fd:d9:3b:
fa:26:9f:84:3d:65:bf:75:08:15:a9:6a:b8:bb:7e:5e:0e:df:
ff:5f:ea:70:14:81:d2:27:78:6f:97:c3:f3:cd:4b:31:23:5f:
ba:d7:e9:c3:e8:d5:b7:be:8f:39:6d:51:9b:1b:97:bf:0b:11:
73:8d:8d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:36:42 2025 by rpki-client