Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yEZTh_otzQhkZXV1poW4E4sjAJ8.roa
File: yEZTh_otzQhkZXV1poW4E4sjAJ8.roa (raw, json)
Hash identifier: 0NCLZ6HN9Fk+hK1Tp3liGPC/o9jwVoG5TCI+7jZfyag=
Subject key identifier: C8:46:53:87:FA:2D:CD:08:64:65:75:75:A6:85:B8:13:8B:23:00:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D4A033AC18B0444D3CDFFC1646411777
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yEZTh_otzQhkZXV1poW4E4sjAJ8.roa
Signing time: Mon 01 May 2023 00:04:41 +0000
ROA not before: Mon 01 May 2023 00:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:187:d49f:beba/128 maxlen: 128
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d4:a0:33:ac:18:b0:44:4d:3c:df:fc:16:46:41:17:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 00:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8465387fa2dcd0864657575a685b8138b23009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:8e:42:40:61:a1:31:27:bc:7d:7e:7b:06:
4b:a7:38:a6:d3:79:be:19:1c:f9:62:1e:e5:be:a1:
9d:91:3c:2e:e7:46:6a:7f:57:b3:fd:61:0e:5e:16:
82:a7:31:0d:f0:59:42:52:08:b7:b2:5c:f8:28:cd:
64:65:be:e4:33:d9:69:45:b4:09:ac:c5:30:a0:47:
86:00:51:6f:ba:65:7c:11:37:b1:e7:db:a9:51:7a:
e8:07:54:e5:e2:eb:c1:ab:7b:9e:a6:48:66:f0:71:
34:d0:41:1b:42:3d:3c:c7:d4:3e:d0:fd:33:45:c5:
df:b8:6a:04:d5:e5:26:9e:1c:b5:bb:17:9a:07:ea:
41:d5:b1:df:46:f2:c3:f7:ce:69:c2:ce:34:a1:7d:
1c:30:11:4d:4a:7c:13:89:01:a6:30:a2:95:26:4f:
31:7d:df:79:fc:51:e3:a0:b9:61:3b:5e:9b:4b:43:
b2:18:cd:b3:af:36:a2:9c:29:e9:a2:00:54:37:ff:
28:74:24:8c:fb:2c:2d:31:a8:d4:a8:35:20:19:fb:
d5:d4:13:70:f4:c1:49:74:66:8c:49:62:2d:48:c5:
fd:d7:d6:bd:72:bf:e6:dd:f9:da:23:24:e8:32:5b:
fe:d4:18:a8:10:a9:2b:39:d2:59:d9:f8:39:1f:d2:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:53:87:FA:2D:CD:08:64:65:75:75:A6:85:B8:13:8B:23:00:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yEZTh_otzQhkZXV1poW4E4sjAJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:d6:e7:5f:b7:61:c6:43:44:53:8b:c6:ae:4a:ae:dc:fd:93:
d3:8f:c5:8f:48:44:88:94:2b:3f:a6:ee:5b:e5:fa:2f:46:15:
d2:e7:8c:74:14:f0:32:97:34:29:22:4f:83:76:81:7c:90:22:
55:de:df:43:75:6e:0f:67:96:6e:2c:7d:90:69:19:3f:c0:b9:
cc:ee:c3:2d:f7:20:c0:60:c0:60:73:68:ec:df:72:80:61:5d:
74:6e:7c:0a:9b:f8:40:c9:52:29:3b:7e:f5:30:bf:60:59:21:
cb:20:30:dd:17:51:99:45:95:db:fb:33:f3:55:1b:68:47:83:
44:5e:97:9c:da:58:74:28:d5:e3:3f:96:9c:57:5e:a2:4f:73:
71:f0:32:e6:a1:46:0d:21:a7:66:d0:d7:c0:59:de:46:9b:07:
d5:a1:cd:bd:64:c6:a6:34:65:f9:e8:61:4a:77:93:e3:0a:f5:
63:71:8b:47:d9:52:34:5d:05:6d:d9:9e:73:56:71:f8:fa:9a:
15:e4:7c:69:c9:e3:9f:fd:4f:e7:3f:b1:9b:23:93:9b:f6:b4:
92:8c:69:4a:d1:8a:24:7e:46:8b:d2:2a:ac:62:17:05:19:65:
30:a9:11:ab:1c:24:1d:cc:db:d7:b9:f7:56:2d:7a:27:85:be:
2a:bf:ad:db
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfUoDOsGLBETTzf/BZGQRd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTAxMDAwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQ2NTM4N2ZhMmRjZDA4NjQ2NTc1NzVhNjg1YjgxMzhiMjMwMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdWOQkBhoTEnvH1+ewZLpzim03m+
GRz5Yh7lvqGdkTwu50Zqf1ez/WEOXhaCpzEN8FlCUgi3slz4KM1kZb7kM9lpRbQJ
rMUwoEeGAFFvumV8ETex59upUXroB1Tl4uvBq3uepkhm8HE00EEbQj08x9Q+0P0z
RcXfuGoE1eUmnhy1uxeaB+pB1bHfRvLD985pws40oX0cMBFNSnwTiQGmMKKVJk8x
fd95/FHjoLlhO16bS0OyGM2zrzainCnpogBUN/8odCSM+ywtMajUqDUgGfvV1BNw
9MFJdGaMSWItSMX919a9cr/m3fnaIyToMlv+1BioEKkrOdJZ2fg5H9KBKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMhGU4f6Lc0IZGV1daaFuBOLIwCfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveUVaVGhfb3R6UWhrWlhWMXBvVzRFNHNqQUo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAITW51+3YcZDRFOLxq5K
rtz9k9OPxY9IRIiUKz+m7lvl+i9GFdLnjHQU8DKXNCkiT4N2gXyQIlXe30N1bg9n
lm4sfZBpGT/Auczuwy33IMBgwGBzaOzfcoBhXXRufAqb+EDJUik7fvUwv2BZIcsg
MN0XUZlFldv7M/NVG2hHg0Rel5zaWHQo1eM/lpxXXqJPc3HwMuahRg0hp2bQ18BZ
3kabB9Whzb1kxqY0ZfnoYUp3k+MK9WNxi0fZUjRdBW3ZnnNWcfj6mhXkfGnJ45/9
T+c/sZsjk5v2tJKMaUrRiiR+RovSKqxiFwUZZTCpEascJB3M29e591YteieFviq/
rds=
-----END CERTIFICATE-----
Generated at Sat May 3 13:48:38 2025 by rpki-client