Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yPEnqcq8VsQKjD2xoKUxA2Fd3MM.roa
File: yPEnqcq8VsQKjD2xoKUxA2Fd3MM.roa (raw, json)
Hash identifier: FetsGAlqn1lWMojkZvXQrb9/HfVlHWToWXEPkgrsfM0=
Subject key identifier: C8:F1:27:A9:CA:BC:56:C4:0A:8C:3D:B1:A0:A5:31:03:61:5D:DC:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D8EC495ABBB9204E17F7C602D8529ADB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yPEnqcq8VsQKjD2xoKUxA2Fd3MM.roa
Signing time: Tue 20 Jun 2023 13:09:03 +0000
ROA not before: Tue 20 Jun 2023 13:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:ec:49:5a:bb:b9:20:4e:17:f7:c6:02:d8:52:9a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 13:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8f127a9cabc56c40a8c3db1a0a53103615ddcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:47:bb:dd:11:21:7a:c0:61:53:cf:e2:6e:
69:39:63:a9:0a:87:f5:bf:5b:0e:d8:d0:09:37:3b:
1d:9b:bc:1c:3c:a4:1b:b7:87:b2:2f:db:c7:16:c0:
c9:a4:71:be:82:0e:91:f2:3c:21:1a:fe:7e:72:24:
f5:10:b6:3b:46:37:24:0f:0c:9f:9d:6e:f4:61:8d:
60:38:e6:99:f5:0e:77:de:5e:6a:92:eb:0d:41:9d:
bf:b0:1c:58:67:9d:bd:d1:6c:91:70:1c:ee:06:db:
8e:ba:55:79:0b:e3:84:ab:48:1f:68:97:e8:48:86:
41:71:b7:3b:41:e4:9d:b4:fc:c5:2c:3d:bb:85:77:
3e:b6:3e:9a:ea:1c:a8:77:9f:84:18:85:43:87:81:
34:67:c7:d7:22:2f:7e:a2:40:c4:14:dc:77:8b:a1:
53:63:f8:f7:d6:e7:d0:d0:b6:51:91:ce:66:78:c3:
68:80:e1:c9:ac:73:64:da:47:df:4d:e0:b0:d6:ab:
1f:6a:fb:6e:ea:f4:2d:7a:23:7f:d4:99:89:3c:f2:
aa:30:23:49:a5:9a:11:af:fc:35:3e:ad:d5:53:5d:
ee:b1:92:9b:b9:8e:63:d0:21:4b:f3:ce:31:6b:af:
96:52:03:1d:22:62:f3:9c:25:2a:1a:43:5e:e3:eb:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:27:A9:CA:BC:56:C4:0A:8C:3D:B1:A0:A5:31:03:61:5D:DC:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yPEnqcq8VsQKjD2xoKUxA2Fd3MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:79:4d:bb:2e:59:31:74:6c:e7:26:6a:ac:3c:90:76:a5:34:
61:74:4b:33:a4:7a:07:e3:ef:6a:4b:cd:c7:72:5d:d3:dd:7a:
dd:01:fc:c8:d3:70:65:4e:ed:e5:e8:76:6b:b0:f1:7b:f5:21:
e9:af:02:1a:3c:7e:f7:fa:5c:60:9b:e7:f8:b1:c4:4f:d0:53:
66:2b:11:74:c7:73:90:7d:92:ab:d5:36:e6:7d:ea:81:2a:55:
90:9f:5a:af:d8:b3:0b:85:e5:e3:99:dc:f6:5f:3e:34:d7:18:
23:81:7b:95:f0:83:9b:ca:d6:19:b0:f2:40:c2:68:9c:da:f4:
04:b8:d7:8d:e4:eb:80:c2:f4:9e:12:de:ce:37:c1:09:ce:04:
67:39:82:97:87:cb:58:ef:ac:36:8e:01:10:e6:1b:61:60:99:
2f:55:cc:99:f4:1c:98:3a:a3:82:b8:0f:ed:97:ad:8c:e6:80:
3a:c4:23:d8:59:6a:0d:b7:bf:84:18:e9:b8:5b:e1:05:7c:32:
0c:05:63:0c:8a:60:cd:33:a8:10:c0:50:b0:49:72:f7:1a:da:
8e:e3:d3:8c:b2:ed:69:7e:fd:63:8e:b4:49:9b:c2:75:6d:4f:
f4:3d:10:cf:32:e4:06:97:a9:ff:34:ac:2a:74:27:04:bc:7c:
c2:60:d8:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjY7Elau7kgThf3xgLYUprbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjIwMTMwOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGYxMjdhOWNhYmM1NmM0MGE4YzNkYjFhMGE1MzEwMzYxNWRkY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtFHu90RIXrAYVPP4m5pOWOpCof1
v1sO2NAJNzsdm7wcPKQbt4eyL9vHFsDJpHG+gg6R8jwhGv5+ciT1ELY7RjckDwyf
nW70YY1gOOaZ9Q533l5qkusNQZ2/sBxYZ5290WyRcBzuBtuOulV5C+OEq0gfaJfo
SIZBcbc7QeSdtPzFLD27hXc+tj6a6hyod5+EGIVDh4E0Z8fXIi9+okDEFNx3i6FT
Y/j31ufQ0LZRkc5meMNogOHJrHNk2kffTeCw1qsfavtu6vQteiN/1JmJPPKqMCNJ
pZoRr/w1Pq3VU13usZKbuY5j0CFL884xa6+WUgMdImLznCUqGkNe4+uiIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMjxJ6nKvFbECow9saClMQNhXdzDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveVBFbnFjcThWc1FLakQyeG9LVXhBMkZkM01NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAJ5TbsuWTF0bOcmaqw8
kHalNGF0SzOkegfj72pLzcdyXdPdet0B/MjTcGVO7eXodmuw8Xv1IemvAho8fvf6
XGCb5/ixxE/QU2YrEXTHc5B9kqvVNuZ96oEqVZCfWq/YswuF5eOZ3PZfPjTXGCOB
e5Xwg5vK1hmw8kDCaJza9AS4143k64DC9J4S3s43wQnOBGc5gpeHy1jvrDaOARDm
G2FgmS9VzJn0HJg6o4K4D+2XrYzmgDrEI9hZag23v4QY6bhb4QV8MgwFYwyKYM0z
qBDAULBJcvca2o7j04yy7Wl+/WOOtEmbwnVtT/Q9EM8y5AaXqf80rCp0JwS8fMJg
2Dg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:32:09 2025 by rpki-client