Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yI8e1BzTCPZ3bVLITmuYp4AM2bI.roa
File: yI8e1BzTCPZ3bVLITmuYp4AM2bI.roa (raw, json)
Hash identifier: eUVlTj3veu8xrPLeO5YVd0pX3IhDhBYWbbqBh9tCoFM=
Subject key identifier: C8:8F:1E:D4:1C:D3:08:F6:77:6D:52:C8:4E:6B:98:A7:80:0C:D9:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018979377D5E15F7027332D4E392D49EB596
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yI8e1BzTCPZ3bVLITmuYp4AM2bI.roa
Signing time: Fri 21 Jul 2023 16:10:26 +0000
ROA not before: Fri 21 Jul 2023 16:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:37:7d:5e:15:f7:02:73:32:d4:e3:92:d4:9e:b5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 16:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c88f1ed41cd308f6776d52c84e6b98a7800cd9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:7a:43:db:9a:22:70:bd:f7:43:5c:c6:be:
76:d0:46:f5:bc:e8:94:de:fd:c2:23:9e:59:57:42:
fc:b2:f0:76:34:ca:34:85:16:8b:2e:5c:d1:d0:c5:
16:c2:cb:a8:5b:44:f2:4f:e1:44:a6:b6:cd:fe:2b:
5d:c9:e0:ac:18:85:5e:81:d0:f6:2b:4b:33:4b:f5:
50:a6:d1:0d:09:77:63:0a:3e:c9:b8:95:a8:bf:6d:
8f:83:99:a8:fe:72:ab:e3:a6:6b:4e:1b:96:9a:6d:
fa:3b:c4:cb:7a:b9:db:2a:17:11:76:40:af:cf:f8:
3a:3d:5f:99:89:e6:3a:23:6f:9d:3d:43:ab:10:7a:
69:d0:91:16:64:5a:5c:b5:f3:4a:86:28:3f:c0:25:
f0:b6:61:af:30:05:8e:57:3d:8b:8d:f3:77:5b:58:
ad:8d:13:88:0b:9c:e0:15:b4:c9:ad:c2:fb:c6:24:
a1:8a:e2:31:9e:6f:f5:a8:24:26:0a:7e:65:c4:76:
40:d2:be:12:9a:1f:5d:39:aa:ee:ec:ea:9a:b8:e3:
5d:54:5a:cd:9f:5d:98:ff:c9:90:32:34:72:15:02:
c7:19:e9:e0:0e:68:80:e2:f6:c2:4c:62:bc:42:8a:
3f:02:82:d8:f3:93:c9:b6:71:3f:93:70:18:d5:8a:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:1E:D4:1C:D3:08:F6:77:6D:52:C8:4E:6B:98:A7:80:0C:D9:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yI8e1BzTCPZ3bVLITmuYp4AM2bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:13:e0:9e:7c:ea:b5:3b:0c:5f:75:21:cf:a7:77:87:65:db:
24:43:28:74:9c:9e:54:b6:a4:4c:f2:ca:93:15:ef:d5:4c:e3:
b6:c3:ee:9b:83:83:03:cc:d8:e1:5b:75:0d:ae:c0:ee:86:7c:
ec:74:d0:0d:fa:3b:7f:2f:cb:30:83:ab:9d:4e:39:51:c4:e0:
db:22:a1:f6:0e:45:ef:8a:3d:43:93:55:81:b1:4c:af:26:71:
2a:a7:03:0a:fb:7a:87:2c:35:d0:bb:6e:bd:de:28:73:fd:4a:
b3:b5:d7:d2:fd:a0:dc:f2:1c:07:63:ab:3d:33:8f:f3:74:3f:
3b:57:28:0e:d1:32:ff:b3:55:84:4d:dd:c6:be:c4:b3:2d:fd:
6b:52:f0:25:61:aa:05:05:86:45:2e:5e:43:3c:0b:7d:a7:18:
fc:29:71:41:ca:5d:fc:7c:5e:95:ba:d1:ec:7a:ab:8b:69:a3:
a0:38:c8:19:b0:6e:ab:b2:98:ab:b9:64:dd:aa:53:70:c9:4a:
ea:01:db:f3:e8:d7:e3:5c:93:c2:9b:7a:4b:2b:a6:f2:d1:fe:
ec:52:34:c0:3a:6d:d6:37:e4:da:d7:51:d7:30:f8:39:8b:4c:
54:9c:d4:98:cf:84:e2:0c:18:25:23:55:4a:5a:37:0e:7a:2b:
5f:57:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:28 2025 by rpki-client