Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yX7g8XYnb5id0uPwUPFM6iJiO3k.roa
File: yX7g8XYnb5id0uPwUPFM6iJiO3k.roa (raw, json)
Hash identifier: LLItZXPf87510emw8AiZLIzC2q4iDBv2yAP/EImNueg=
Subject key identifier: C9:7E:E0:F1:76:27:6F:98:9D:D2:E3:F0:50:F1:4C:EA:22:62:3B:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C29C52BCBEC6289C5BD09A9DE3BB4F77
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yX7g8XYnb5id0uPwUPFM6iJiO3k.roa
Signing time: Fri 16 Jun 2023 05:10:04 +0000
ROA not before: Fri 16 Jun 2023 05:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c2:9c:52:bc:be:c6:28:9c:5b:d0:9a:9d:e3:bb:4f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 05:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c97ee0f176276f989dd2e3f050f14cea22623b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:ad:3e:35:31:83:80:48:0c:b4:fd:44:13:
2d:77:40:07:ec:32:fe:6f:0a:14:af:2c:3e:50:8e:
43:ae:91:f2:26:5b:cc:39:53:a5:16:50:d6:ad:b3:
37:7b:dd:ed:23:5d:7a:81:27:33:2c:68:22:fc:33:
c7:11:87:34:87:45:38:f4:7d:79:db:fd:46:3d:09:
3f:10:61:e7:4a:8b:11:2b:5a:15:90:45:31:2c:53:
50:c5:b6:6d:1b:a9:cf:fd:53:77:2b:aa:08:81:41:
34:f5:94:ba:6f:97:aa:e5:4a:52:9a:42:44:f5:ea:
65:88:a8:65:67:72:0d:00:3c:f1:76:a3:f8:95:06:
e3:d2:72:28:f6:4b:61:f5:52:77:33:80:de:b7:1c:
ea:e0:2b:07:1f:30:f2:a9:ee:03:a5:ce:8a:37:d0:
e2:22:95:84:e4:ce:3a:2a:81:74:ee:5b:f9:ff:f5:
4b:9d:23:7e:30:f0:04:46:95:9f:08:d8:43:d0:22:
6a:e5:45:4c:be:89:ce:92:11:63:cb:7c:ad:57:12:
e0:8b:ad:26:e3:d7:9e:03:09:df:d2:65:ec:e9:d8:
27:93:07:83:1d:b4:94:09:dd:5c:74:2e:ff:09:3c:
cb:9e:06:00:48:c2:ac:05:c8:d4:9f:98:ed:05:8a:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7E:E0:F1:76:27:6F:98:9D:D2:E3:F0:50:F1:4C:EA:22:62:3B:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yX7g8XYnb5id0uPwUPFM6iJiO3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:29:d8:7a:52:3c:c3:f7:fe:62:2b:bc:d3:e6:7d:a8:85:7a:
c0:61:c0:df:f9:15:e8:08:f8:50:38:cf:b9:7b:b7:ab:1a:68:
1c:7a:b0:20:8c:80:47:f0:b6:46:e4:f9:ef:a3:d3:2e:3c:ae:
55:b0:50:9c:cd:af:7e:8c:39:ee:1a:45:b4:3c:9b:20:fe:69:
ff:1b:0e:7f:95:84:49:77:c0:92:77:c9:05:88:20:8e:4a:b3:
18:a6:ba:2f:30:9b:74:45:82:33:da:36:37:30:e6:db:30:38:
da:f9:e9:48:73:f1:5d:0f:b5:c1:d0:9a:99:ef:a1:a3:cd:86:
5d:cf:74:e4:10:8f:02:68:53:cb:2c:d4:ad:50:0f:da:6d:35:
df:0d:46:a5:22:02:27:df:0e:f2:f5:27:9a:25:76:2b:db:ff:
31:7f:c0:18:0d:c6:ea:03:e0:10:ef:70:73:7e:45:b3:2f:39:
67:2d:af:59:4b:bb:80:7e:85:4e:e2:db:15:34:21:be:0f:d8:
f5:e1:49:44:6c:97:fc:52:3e:22:9b:ce:68:9e:c5:6b:ed:be:
8f:71:42:bb:8e:97:3d:35:02:c3:1f:a9:e3:55:ec:cd:52:e9:
87:22:b6:aa:8c:43:10:2c:c8:2e:a9:fb:6c:de:96:9f:cd:a2:
e2:a8:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:33:06 2025 by rpki-client