Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yGo9iEv5LIDRwG_RXmjorD_a5bc.roa
File: yGo9iEv5LIDRwG_RXmjorD_a5bc.roa (raw, json)
Hash identifier: uGj8DW7/yucDgUUle7Y3CC7inr3n6xlKqnUonPVdcCU=
Subject key identifier: C8:6A:3D:88:4B:F9:2C:80:D1:C0:6F:D1:5E:68:E8:AC:3F:DA:E5:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189729273249D46E0E85A1A9DFB9D448CEA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yGo9iEv5LIDRwG_RXmjorD_a5bc.roa
Signing time: Thu 20 Jul 2023 09:12:27 +0000
ROA not before: Thu 20 Jul 2023 09:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:92:73:24:9d:46:e0:e8:5a:1a:9d:fb:9d:44:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 09:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c86a3d884bf92c80d1c06fd15e68e8ac3fdae5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:2c:0c:78:f9:0d:0a:b5:d5:81:b4:df:4a:
d8:6a:84:78:17:3a:2d:0a:17:0b:51:0e:47:80:03:
45:ca:20:51:c1:cb:6c:62:16:d6:af:a8:68:21:30:
87:b7:a7:d0:13:11:5d:f2:b7:18:03:02:29:52:66:
f0:f5:b2:ab:68:7f:eb:25:89:24:4d:1e:09:af:e5:
cb:72:50:c8:5a:35:61:a3:b5:42:b3:34:18:62:7d:
fe:26:f2:c3:1e:96:13:14:07:a2:14:74:a6:e8:16:
b6:57:23:35:ba:d0:70:68:c9:e1:5f:07:13:ca:9c:
86:9e:c9:a2:1e:d1:16:9d:a8:1f:8e:c9:c9:1d:82:
4c:f7:34:07:24:79:f6:da:98:03:f4:4a:98:3b:64:
c8:82:e3:55:fa:d5:de:93:99:73:b3:e7:d7:cf:bc:
23:07:5a:ca:44:b7:6d:0e:23:d7:69:60:09:d5:91:
0d:6d:35:28:00:62:c8:97:bf:77:ba:ac:68:d1:6d:
bd:37:d1:cf:0a:6a:5a:58:b6:83:5f:4c:3c:de:49:
81:29:18:4b:02:2d:ff:0c:2c:b4:a0:bc:c2:de:1d:
cc:a4:a6:8a:b6:47:7f:55:0f:72:a3:15:ed:56:4c:
8d:f4:e9:c9:51:eb:c4:c3:fe:64:00:09:c1:81:b4:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6A:3D:88:4B:F9:2C:80:D1:C0:6F:D1:5E:68:E8:AC:3F:DA:E5:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yGo9iEv5LIDRwG_RXmjorD_a5bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:f5:2f:da:ab:8c:f0:43:eb:e0:52:29:dd:cc:56:09:4d:62:
05:db:c9:8c:e8:48:47:bc:79:0d:ae:1a:76:2a:78:87:be:14:
2a:06:38:f5:6a:b8:1a:75:99:28:18:fd:38:a4:1a:5a:a6:2c:
34:3c:c0:47:e6:c4:77:09:f7:3e:10:8e:1a:bf:22:a4:79:2c:
cc:6d:ca:3a:9c:3a:6a:60:ba:fe:68:5e:10:95:dc:2b:f8:20:
36:1d:5b:85:18:f7:e8:b9:eb:c3:e7:35:49:ec:9a:52:e7:03:
09:91:2d:88:d9:a0:6e:9a:0a:a6:de:ed:c2:a1:6a:9a:c4:6a:
51:d9:e9:90:e4:5f:e4:86:e2:81:e2:4a:77:80:33:ef:b5:4c:
65:65:bc:75:cb:45:dd:6b:6e:0a:96:d6:53:8d:ad:08:e6:9e:
cc:09:3a:f6:c4:eb:ea:b9:6a:06:27:c8:da:f1:b0:b7:68:d3:
b2:ee:6f:be:17:40:c0:2f:e9:3c:b8:20:c6:b0:13:32:be:d7:
77:6f:0d:57:5b:e7:da:95:2a:26:54:57:22:e4:49:31:c2:1c:
c4:89:50:9e:a4:55:c6:7b:97:52:dd:ce:a7:d1:d4:7b:42:5a:
c4:6b:86:06:19:9a:9a:5a:0f:fe:0a:73:3d:7e:3c:af:06:63:
57:ea:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:26 2025 by rpki-client