Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yMmhI3RitaenskTqddShqZdSufw.roa
File: yMmhI3RitaenskTqddShqZdSufw.roa (raw, json)
Hash identifier: 98k7ktF67QbNF0Qtjb0I/694ya63vH3P+gYBO7dPxso=
Subject key identifier: C8:C9:A1:23:74:62:B5:A7:A7:B2:44:EA:75:D4:A1:A9:97:52:B9:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B21DAEF2D7555DCB895200E585C6E673
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yMmhI3RitaenskTqddShqZdSufw.roa
Signing time: Sat 14 Jan 2023 21:09:27 +0000
ROA not before: Sat 14 Jan 2023 21:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b2:1d:ae:f2:d7:55:5d:cb:89:52:00:e5:85:c6:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 14 21:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8c9a1237462b5a7a7b244ea75d4a1a99752b9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:45:b3:75:74:a0:df:5c:f3:0e:53:83:6a:20:
84:a5:a7:6b:c6:39:2c:e8:a9:6f:bb:24:4b:8a:ca:
34:f6:fb:a6:14:36:8e:56:2f:d5:48:71:c4:86:af:
68:f7:b1:1a:e6:34:22:e1:6c:a3:52:78:ba:13:fc:
50:1d:9b:ba:ce:8f:8a:88:04:e3:a7:76:77:b8:b5:
fa:e8:58:70:c7:ca:50:05:9b:3c:68:36:8c:27:d6:
71:2d:54:e8:d7:f2:1d:85:eb:ad:e9:bd:af:8a:21:
b2:32:81:f7:61:21:db:84:ce:84:c9:ee:07:64:71:
de:63:50:83:bf:7f:74:6c:d7:32:d8:4c:d9:41:c9:
59:df:ac:48:54:95:71:ff:36:6f:9c:39:f4:a0:66:
2c:70:9f:f3:35:a8:90:ef:26:0d:c8:de:c0:3a:01:
69:59:26:42:e3:69:71:9d:67:f1:b4:61:35:1e:d3:
eb:33:af:f8:da:15:ee:49:85:df:b4:1a:f7:99:ce:
5e:ed:85:f3:45:98:16:62:50:79:69:85:03:35:57:
87:f7:06:7f:5d:aa:f9:31:e2:ce:07:f4:50:a1:5b:
30:88:1c:19:da:a7:4b:05:0b:49:00:23:4d:4a:70:
07:99:9e:f1:a7:2d:72:5e:dc:51:b7:10:58:4a:3d:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C9:A1:23:74:62:B5:A7:A7:B2:44:EA:75:D4:A1:A9:97:52:B9:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yMmhI3RitaenskTqddShqZdSufw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:68:93:91:9e:01:06:91:87:38:df:13:81:03:80:f0:bc:d1:
b9:82:75:47:8a:64:ba:fd:74:b8:24:b1:6f:45:bc:4e:51:02:
b5:c4:30:11:f4:fe:89:a8:28:9f:2d:51:da:b6:87:8b:d2:4b:
75:f9:ad:89:72:d2:7d:95:12:6d:d9:79:d4:da:d0:75:4c:8f:
0b:6d:de:e4:34:cb:e1:2f:77:4d:e4:c6:d6:d3:2c:a5:71:94:
c1:6b:09:f0:d1:e6:df:73:ad:53:ee:82:f2:b3:7f:ad:07:f5:
e9:f1:a0:f7:a6:91:d7:87:17:a1:02:5b:f7:07:09:1b:51:e9:
36:12:a9:9c:67:9c:e3:69:31:5b:0d:71:b2:74:47:04:39:5c:
54:4d:32:af:f4:d1:98:23:4f:15:f6:d4:44:98:9d:e8:c4:31:
2a:80:48:26:eb:74:96:f0:41:8c:d9:c6:ce:3b:b6:f1:cd:9a:
28:27:8d:54:31:8d:7e:40:24:14:1d:af:39:4d:7e:b7:af:2d:
28:bf:65:d8:2d:5a:20:14:59:fc:20:7d:de:f1:e9:36:6b:3e:
f4:e7:82:c3:2e:b6:64:9f:4d:cc:9b:47:da:ff:fc:4e:78:80:
23:a1:d1:75:33:e2:f6:c0:e8:c8:85:73:0f:76:25:e6:21:35:
7d:a9:5a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:11:27 2025 by rpki-client