Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yVJFbCrCSPe2Bmn4Bk1DB481KOc.roa
File: yVJFbCrCSPe2Bmn4Bk1DB481KOc.roa (raw, json)
Hash identifier: CUUZ8JGVdIpsTN9+h7jnvzkDtHT3a3MduFKL00LKYVA=
Subject key identifier: C9:52:45:6C:2A:C2:48:F7:B6:06:69:F8:06:4D:43:07:8F:35:28:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018734608D463D5054A6F2110EEC1E941472
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yVJFbCrCSPe2Bmn4Bk1DB481KOc.roa
Signing time: Thu 30 Mar 2023 21:15:55 +0000
ROA not before: Thu 30 Mar 2023 21:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:60:8d:46:3d:50:54:a6:f2:11:0e:ec:1e:94:14:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 21:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c952456c2ac248f7b60669f8064d43078f3528e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:46:eb:2e:5c:fc:7a:dc:24:4d:9a:72:f1:
ee:d0:6d:5a:e2:c4:c8:e9:3f:76:a9:e6:e1:76:f5:
57:9d:6e:57:db:07:f0:4d:7c:af:2a:8c:47:cb:db:
b7:32:b2:84:5d:e8:fd:c6:32:69:09:44:fb:70:39:
7c:5e:bb:f6:08:6b:d2:19:0b:4e:3f:4a:70:51:13:
8e:c1:69:06:c1:70:2c:b3:68:55:e2:2b:c5:4f:d7:
dc:a7:43:40:b9:f0:76:77:73:9a:6f:73:d0:c1:03:
10:7f:e1:e5:54:b1:36:29:8e:13:36:c7:d6:62:25:
9a:82:9d:df:65:89:a5:3b:f5:ac:3a:7d:47:78:d1:
8d:c7:c8:b0:11:21:15:84:e9:52:87:f1:27:d4:b4:
5f:da:c5:61:64:4e:73:af:25:4b:55:83:49:93:02:
d6:e8:2b:2c:7e:5b:92:d2:84:ca:2f:47:44:46:6c:
9c:01:96:a3:2d:51:da:cd:ae:12:e5:3a:83:3f:44:
f0:01:e4:55:a5:cc:70:cb:5f:f2:93:23:b0:d4:63:
d6:6b:f4:1d:01:83:ae:4f:e9:2f:a4:e2:88:a7:7f:
ab:5d:1c:d5:53:50:20:4d:d7:1e:1f:79:b0:4a:48:
6c:79:7d:78:e6:b3:cc:19:e3:1f:85:50:ff:dd:ed:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:45:6C:2A:C2:48:F7:B6:06:69:F8:06:4D:43:07:8F:35:28:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yVJFbCrCSPe2Bmn4Bk1DB481KOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:8c:42:a7:f3:d2:fb:7b:3f:d4:23:2d:b1:1d:af:60:b2:96:
99:7d:c9:e2:cc:41:2c:0c:b4:a4:90:40:df:a8:b0:54:d0:30:
16:54:ce:43:7f:d3:c8:bc:6c:e9:6f:b0:18:35:e6:be:a0:58:
3b:0c:8b:9a:81:a5:50:ee:a9:a3:ab:70:89:f5:79:55:8a:df:
0c:92:4f:30:b4:0a:66:34:61:92:b0:6e:46:87:9e:77:58:8c:
67:58:7e:e0:81:e5:95:39:a5:11:5c:fc:75:9f:74:71:08:0c:
f1:0f:91:76:65:99:0b:ef:a7:30:5e:02:6f:0a:e5:e0:23:89:
1f:18:18:05:37:c6:91:ee:fe:c2:06:81:0d:11:08:d3:06:07:
6a:9b:10:da:8c:fe:51:30:87:f1:98:28:53:fc:fd:77:c0:4d:
f3:93:e0:28:e2:37:5f:41:36:ff:d6:df:8a:cf:d1:30:82:13:
2e:4e:25:34:31:27:83:0e:f4:35:c2:84:4c:79:bf:c1:62:11:
ca:97:e7:54:c5:aa:2b:f9:0e:80:9f:cc:e2:07:22:7d:48:a4:
8a:2f:67:47:cf:0f:5e:c3:e6:e4:a2:bb:89:90:87:76:65:33:
cc:46:69:8a:0c:cc:8e:c5:98:5b:f1:0f:7b:51:3a:d9:6f:ae:
a3:de:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:20 2025 by rpki-client