Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yKKf72i0ztIDRUEU1JCtlIkCchs.roa
File: yKKf72i0ztIDRUEU1JCtlIkCchs.roa (raw, json)
Hash identifier: WRtlnwniDvCtc30burj9aPOY1EtzuI45AA5zkPfB6eg=
Subject key identifier: C8:A2:9F:EF:68:B4:CE:D2:03:45:41:14:D4:90:AD:94:89:02:72:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874AE68808D9D2ACCA8AD8767AC8A34FA2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yKKf72i0ztIDRUEU1JCtlIkCchs.roa
Signing time: Tue 04 Apr 2023 06:13:54 +0000
ROA not before: Tue 04 Apr 2023 06:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:e6:88:08:d9:d2:ac:ca:8a:d8:76:7a:c8:a3:4f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 06:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8a29fef68b4ced203454114d490ad948902721b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:b8:e4:15:ba:00:53:b9:b4:24:54:c7:54:
7a:b8:21:c2:b5:dc:33:de:f5:4a:30:4a:d5:05:1b:
a2:fd:80:ef:81:bf:e5:3b:c4:f8:39:f8:7a:18:d7:
c0:0e:0b:8b:78:be:16:51:50:11:da:2c:b5:0d:ba:
ad:b1:ee:a4:3a:42:e1:84:2c:50:e1:c5:15:99:84:
87:ae:90:a6:21:d7:af:4e:48:0d:fc:62:81:1c:ec:
81:52:cc:6e:b3:b9:48:cb:7f:e6:ea:69:c4:dd:fa:
56:b1:67:1b:8b:68:da:ab:78:2e:41:18:2e:cd:78:
90:2e:d7:c8:06:91:31:68:f7:2f:e2:07:3e:29:39:
65:3e:68:88:66:65:c8:00:98:33:56:2f:7e:b7:0d:
16:8b:02:3e:41:09:c2:32:c6:e7:7d:49:93:5d:a2:
01:ac:b4:5f:7f:21:8b:9b:54:80:e9:3c:4e:3a:f2:
aa:4a:a3:50:ae:26:9c:59:0d:e6:3a:79:44:2b:be:
bd:fc:28:dd:6d:53:b2:33:6a:3b:10:48:ca:6d:47:
37:5d:14:6c:0f:a7:a3:c4:bb:78:a1:87:09:b8:00:
d8:ab:eb:cf:4a:4d:19:3a:fe:0d:78:5d:f3:a3:4e:
ad:5f:c6:c5:c0:dd:9c:fb:a2:2f:4a:b6:b4:15:1c:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A2:9F:EF:68:B4:CE:D2:03:45:41:14:D4:90:AD:94:89:02:72:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yKKf72i0ztIDRUEU1JCtlIkCchs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:ec:1c:ec:5c:d8:b6:26:b7:c2:e4:1d:9a:6e:52:56:ea:b0:
43:90:2f:3f:5a:9e:61:3b:f6:18:c3:5c:62:f7:79:75:10:f0:
6c:1d:3a:6f:86:ee:ef:2f:aa:8f:eb:85:fc:45:52:38:0f:db:
8e:1e:c4:fb:a4:8f:e7:af:2e:4b:f2:f9:7f:64:5d:b6:d1:5f:
51:0f:e0:85:e0:ef:6a:84:95:13:70:2e:7b:9c:cf:94:b0:87:
fc:1b:4e:64:d1:40:95:a8:f3:1a:e2:ad:69:66:ce:39:60:34:
fa:6d:03:8a:b5:f5:c4:58:03:43:71:43:02:5a:4a:4e:65:a0:
f5:6e:d7:86:55:0e:b2:e1:ef:fa:da:fa:06:d9:98:b8:82:12:
69:c0:48:95:47:97:47:83:94:74:b9:91:22:91:81:33:c2:eb:
58:66:51:28:04:34:34:53:28:35:d6:4f:ff:ad:eb:b4:c3:4f:
45:b2:e1:9f:b6:66:d4:40:ea:7b:a8:a6:63:5c:3d:86:5b:0f:
16:74:c4:3a:4c:db:7d:56:a2:43:72:db:b2:d6:d3:7a:7d:0a:
5c:21:19:ed:86:36:28:ce:e9:22:30:4d:89:18:7d:11:42:ae:
2a:75:95:fa:1e:c9:3c:fe:92:c4:60:ba:19:d0:17:f9:00:fe:
6b:2d:03:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:47:48 2025 by rpki-client