Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yO27o5G6--awP7Vkn09O5Mvjryc.roa
File: yO27o5G6--awP7Vkn09O5Mvjryc.roa (raw, json)
Hash identifier: 5Nbi+metmv+i5dEfCUTsoqo1lf3+cORTUghT6wD+3c4=
Subject key identifier: C8:ED:BB:A3:91:BA:FB:E6:B0:3F:B5:64:9F:4F:4E:E4:CB:E3:AF:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E180D61
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yO27o5G6--awP7Vkn09O5Mvjryc.roa
Signing time: Sun 24 Apr 2022 13:10:13 +0000
ROA not before: Sun 24 Apr 2022 13:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115505505 (0x7e180d61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 13:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8edbba391bafbe6b03fb5649f4f4ee4cbe3af27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:83:c2:3b:c7:67:e7:2c:30:fd:93:03:7e:
03:78:d0:fd:6e:7b:f0:5a:63:1e:29:cf:79:1a:e5:
3c:71:ef:fc:a1:95:dd:cd:62:cf:87:90:60:9a:86:
33:8e:3b:30:f5:55:c0:82:3f:80:3f:3a:58:ae:fe:
9e:f3:3a:d6:99:d5:4b:87:e9:0e:9e:24:f4:6a:9e:
68:4e:8e:cd:a0:b6:1a:82:60:8d:ed:fa:bf:16:7f:
e0:f1:39:d5:8a:8a:88:41:8f:98:fb:1b:5e:b2:81:
01:a3:d7:da:b2:33:47:01:2c:3a:04:04:fd:94:04:
33:f8:77:56:92:95:f7:f2:bc:6f:d2:82:31:75:33:
40:15:48:34:fc:62:cf:0f:fc:0a:5c:08:d5:75:be:
b2:bb:02:99:ae:79:2b:44:19:95:36:4a:0a:58:be:
f7:b8:d6:42:32:59:b1:ee:33:df:7e:eb:f7:42:2a:
a3:18:9a:ef:56:ba:09:16:93:71:a4:c3:b6:99:8e:
69:5f:b0:ac:e9:75:8f:2b:6e:5b:1a:a6:43:ec:ea:
58:4b:74:c6:09:f2:c4:0b:fe:6d:e9:7a:1b:ad:04:
0f:ab:16:9a:10:68:da:2c:4a:8a:fe:ab:2a:33:1f:
bc:d1:38:2d:52:9e:04:27:07:71:5e:0b:a5:fb:cd:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:ED:BB:A3:91:BA:FB:E6:B0:3F:B5:64:9F:4F:4E:E4:CB:E3:AF:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yO27o5G6--awP7Vkn09O5Mvjryc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:f1:0b:5d:a5:c4:d2:1b:aa:4c:a9:d9:c2:14:0c:f7:9a:2f:
c9:13:9e:32:8d:68:8d:15:5f:c9:1b:6e:4c:ce:64:6b:bd:04:
f1:b1:c4:2d:3c:c2:5d:8b:b1:83:32:f2:9a:2f:06:47:c6:95:
c1:20:7e:f2:f4:2a:a7:8d:a6:1f:25:b8:5d:45:40:28:4e:01:
c0:2d:9f:bf:55:fe:06:9e:e3:05:67:2f:f1:48:f0:df:0e:ec:
1a:f9:97:3a:1e:d0:bb:c5:04:8f:ae:37:09:ce:6d:5e:55:96:
87:a1:60:5f:ac:0d:04:45:b0:0b:96:db:82:f9:ac:cf:28:ad:
5d:d9:ab:05:1e:e2:7c:1a:30:ee:a9:95:8a:5c:9f:10:91:80:
8c:15:c3:55:0c:26:e6:2d:6c:03:3e:69:cc:9d:02:d7:dd:78:
16:6e:8c:57:b9:d8:69:ad:e9:a4:9c:c1:70:8b:a4:74:dd:65:
81:ec:8b:86:4b:9b:de:e0:cc:ca:4d:eb:09:f8:c0:50:7e:bd:
3c:93:d3:17:b5:4d:a1:8b:4f:29:67:8d:3d:d3:02:3a:e5:ba:
c0:67:d6:e7:df:89:c0:2c:66:0b:09:52:18:2d:38:c7:c2:93:
83:4a:54:4e:d3:4a:0f:bf:49:83:c8:ef:43:a1:1d:22:26:5f:
5c:6f:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:15 2025 by rpki-client