Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yGUC5jX7NIjK0GZBG8nc9WftZdU.roa
File: yGUC5jX7NIjK0GZBG8nc9WftZdU.roa (raw, json)
Hash identifier: fWZCui6rUYReZYuTBU6Fq1ij3+MgjtbptETAjNv+d+w=
Subject key identifier: C8:65:02:E6:35:FB:34:88:CA:D0:66:41:1B:C9:DC:F5:67:ED:65:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867831D63CBB8C78069AE9F764A24A3520
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yGUC5jX7NIjK0GZBG8nc9WftZdU.roa
Signing time: Wed 22 Feb 2023 08:16:17 +0000
ROA not before: Wed 22 Feb 2023 08:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:31:d6:3c:bb:8c:78:06:9a:e9:f7:64:a2:4a:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 08:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c86502e635fb3488cad066411bc9dcf567ed65d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:04:95:97:55:c3:37:29:eb:ab:06:5b:34:32:
71:d1:1e:82:4d:55:d6:a7:92:a7:43:28:41:6b:a2:
a6:d3:e6:06:de:1c:e3:f9:59:99:49:ae:a0:55:ea:
d3:6d:6b:2f:e6:9c:0d:20:b1:ba:1b:9f:03:1f:ac:
59:69:87:a0:30:69:90:0e:c3:b6:1a:e3:d9:10:24:
b4:a9:c3:96:76:81:8b:fd:4b:26:12:1a:3b:13:28:
73:1d:de:92:d1:e0:c9:54:1d:9c:6c:e5:ab:6a:45:
54:29:9f:dd:64:1d:68:90:29:11:3e:f4:7a:20:3d:
80:6a:d8:56:b5:e8:d1:eb:c1:1f:6a:cb:37:f8:9a:
81:b0:58:35:72:4a:1d:e1:df:08:e3:79:95:04:42:
dc:e7:97:9b:93:a4:90:fd:5a:ec:4b:05:b0:12:1f:
bb:db:fc:f2:0a:ec:ad:33:b4:4b:8d:99:c8:c7:5e:
dc:68:41:01:5e:57:5b:65:16:ee:0d:14:b2:14:2b:
e6:e5:1b:28:2d:b0:6e:7f:45:22:0d:cf:a1:09:95:
43:a4:04:6b:ba:ec:14:97:7a:6a:6f:86:29:79:80:
1e:3e:4b:6f:57:d0:43:96:e0:59:4c:9a:70:4f:c4:
2f:cc:b1:bd:27:9f:18:ad:72:6e:35:c7:85:53:c4:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:65:02:E6:35:FB:34:88:CA:D0:66:41:1B:C9:DC:F5:67:ED:65:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yGUC5jX7NIjK0GZBG8nc9WftZdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:18:4f:7d:01:a6:d6:ef:df:db:fb:39:cf:1c:3b:db:9a:02:
c0:28:03:de:15:04:8b:5c:6c:ed:f6:b9:82:88:2d:fe:ef:d5:
ed:c0:6f:ad:ed:c3:85:e1:48:cb:aa:f9:19:c1:1e:19:47:53:
f3:ce:0b:0c:20:7f:84:c5:cb:da:02:87:aa:71:49:97:f8:b2:
52:c5:d4:20:c4:3d:c1:2e:14:01:76:55:05:5b:57:35:f0:4d:
86:e1:5e:4b:05:ea:19:68:04:3d:d8:0d:24:6d:53:ac:04:5d:
b0:74:1b:c8:86:b4:fe:69:ed:ab:a7:e2:9d:c8:24:cd:a4:21:
2e:ff:09:3b:46:a4:ea:74:51:5c:39:0e:f8:6e:99:a2:40:38:
62:c3:35:f1:ff:74:42:ff:fd:30:c9:49:d7:4c:71:6c:59:0f:
be:bc:77:5f:03:20:a7:b8:bc:50:5d:5f:66:22:49:75:06:87:
7f:20:07:e3:7b:8d:f3:77:e3:b5:0d:c7:5f:be:af:f8:a4:6c:
d7:11:ad:e6:15:2f:5a:5a:17:ef:f6:bf:37:9f:70:1d:8e:9b:
b6:18:77:21:f8:51:64:5b:0d:76:c5:4c:ec:1e:f3:cb:52:da:
84:a0:73:08:96:5d:46:30:44:01:6a:33:aa:8f:26:8b:5a:2b:
67:65:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:24:31 2025 by rpki-client