Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yNfxkpBaIVXSrOM8rbUuaK7efSQ.roa
File: yNfxkpBaIVXSrOM8rbUuaK7efSQ.roa (raw, json)
Hash identifier: KWv9KH2wk2zKj15jAXL5FQj3KSGq03KrDuiT7e1rsl4=
Subject key identifier: C8:D7:F1:92:90:5A:21:55:D2:AC:E3:3C:AD:B5:2E:68:AE:DE:7D:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018958CBB53D2C0E26DFA5C15D92B5EECA9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yNfxkpBaIVXSrOM8rbUuaK7efSQ.roa
Signing time: Sat 15 Jul 2023 09:04:52 +0000
ROA not before: Sat 15 Jul 2023 09:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:58cb:307e/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:cb:b5:3d:2c:0e:26:df:a5:c1:5d:92:b5:ee:ca:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 09:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8d7f192905a2155d2ace33cadb52e68aede7d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:58:37:f4:09:d3:fe:08:13:62:c2:2f:1c:
a4:36:2b:be:d5:22:c4:1d:7e:9e:3a:f1:70:27:6d:
e0:b8:cd:bc:15:f5:91:d9:5e:7b:a4:6e:63:88:d4:
f5:cf:ef:8f:b8:19:11:fd:6c:ab:81:4e:31:84:57:
76:5b:c0:57:42:15:df:1d:f8:79:ad:92:a8:a3:e1:
a1:3d:ad:5b:b4:24:be:24:de:f7:66:31:ce:7b:3d:
d9:58:38:2e:12:62:b9:cb:df:0f:a4:45:32:36:fd:
14:16:9e:76:90:4b:0b:ea:ca:f3:1c:63:33:94:03:
1b:e9:98:23:b9:8b:36:3d:e2:a4:a7:e3:c7:e7:b1:
26:1c:af:18:b9:2c:31:5c:40:79:99:29:16:eb:f7:
55:0a:c4:08:5e:aa:cb:2a:7b:7a:77:12:3b:59:b1:
69:76:6a:03:df:1f:67:c5:0f:bb:06:74:a9:7f:bc:
1a:bd:da:ff:b0:85:04:e0:59:0b:a1:c1:06:d6:7b:
0d:24:09:99:60:bf:05:88:04:5f:74:7d:f1:f3:fd:
1e:5d:3c:3b:8b:06:b7:c8:a5:a2:7b:78:87:0a:a0:
60:5d:75:ff:69:54:8c:4e:83:be:ea:f0:db:5a:c6:
b6:59:49:bf:17:94:7c:51:8b:99:c9:a2:47:33:d7:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:F1:92:90:5A:21:55:D2:AC:E3:3C:AD:B5:2E:68:AE:DE:7D:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yNfxkpBaIVXSrOM8rbUuaK7efSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:5d:3c:79:c0:de:e6:c2:7d:dd:16:88:c8:cd:89:9f:05:35:
c5:46:ce:62:52:a1:53:8f:25:19:5b:c6:5e:9d:cf:dd:40:24:
6b:f4:62:f1:8d:6f:77:20:12:c0:e6:ca:aa:6c:11:ce:73:2c:
b6:f3:50:19:c4:4f:dd:47:7a:51:a0:02:45:88:fa:55:7f:ee:
fd:64:98:99:68:2d:05:d6:cd:ca:ef:f3:09:09:3a:90:1d:0c:
5f:74:89:24:41:9d:d9:56:95:4b:c9:51:1e:b8:b6:db:91:e8:
fd:4e:93:05:13:f8:7d:76:05:46:68:dd:c5:9c:ce:6b:0b:d9:
2d:a7:f6:51:46:c3:1d:41:5c:fe:fc:3d:ee:21:5a:7f:48:ae:
0d:f2:02:04:36:cb:4d:10:2c:17:ec:99:d1:7b:41:a5:3f:1b:
4d:a3:79:9a:08:04:f9:b5:03:cb:3b:ed:a3:95:d9:c8:d7:dd:
7c:4e:dc:ea:25:59:51:64:ce:d0:0e:58:52:fb:d3:2a:8d:37:
19:4c:77:5d:99:7b:f3:45:a1:77:08:f8:84:e0:3e:9c:12:04:
a7:3d:0d:a1:ca:b2:13:65:80:02:74:79:05:4c:ca:16:a6:55:
7d:24:33:ce:28:39:ae:7a:54:79:7f:7e:ef:9e:e7:af:f9:75:
2f:aa:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:02:29 2025 by rpki-client