Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yXsfPjvJidPox0Jb4BFhTfuD8bY.roa
File: yXsfPjvJidPox0Jb4BFhTfuD8bY.roa (raw, json)
Hash identifier: LzWedsVT8MHevx3pCjqxKfJf4xo6w7HkOteoNMCGdHQ=
Subject key identifier: C9:7B:1F:3E:3B:C9:89:D3:E8:C7:42:5B:E0:11:61:4D:FB:83:F1:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888799915FF5EB7F2B2021960CB97C3DEB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yXsfPjvJidPox0Jb4BFhTfuD8bY.roa
Signing time: Sun 04 Jun 2023 18:09:28 +0000
ROA not before: Sun 04 Jun 2023 18:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:87:99:91:5f:f5:eb:7f:2b:20:21:96:0c:b9:7c:3d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 18:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c97b1f3e3bc989d3e8c7425be011614dfb83f1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:cf:2d:dd:e1:e2:45:db:6c:e7:3a:0c:35:
5d:ff:df:5a:34:a6:af:a5:b2:6b:43:43:00:7a:26:
93:49:8d:82:30:2a:eb:36:02:da:6c:0d:33:e8:f6:
fc:27:9f:24:be:c7:dd:b8:ef:7f:fb:12:c8:ee:c3:
d0:d6:cd:51:99:bc:c5:a4:82:d9:9f:3a:43:b9:74:
a6:fb:98:b6:ae:ac:27:f7:cd:d8:37:d1:2a:b2:ad:
a5:4c:9f:1c:2e:07:28:19:8f:cd:3b:6d:f1:80:97:
97:c4:52:ff:79:ff:ec:24:a1:20:9b:62:08:4c:71:
37:d8:74:db:78:d9:7b:75:4d:04:37:4b:ef:c3:b2:
ff:08:69:1b:cc:4f:d8:87:11:dc:19:49:e3:d7:ee:
7b:c0:4d:75:9d:70:91:82:36:e3:0f:5c:b3:09:4e:
ab:a0:f5:d6:ee:97:3d:7f:b2:b7:55:a1:31:d3:0b:
db:31:c5:4c:68:0a:19:dc:32:38:40:93:d9:ba:f8:
f8:69:f4:0d:03:95:50:0c:f9:1e:b4:3b:55:70:e9:
42:b6:d1:e1:a4:d9:37:e9:b2:2f:6a:33:f1:e0:16:
3b:57:67:d8:43:6e:1b:15:20:61:1a:f6:ff:f9:e5:
e2:a3:20:2f:27:80:16:d7:ed:2e:a7:f2:92:89:36:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:1F:3E:3B:C9:89:D3:E8:C7:42:5B:E0:11:61:4D:FB:83:F1:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yXsfPjvJidPox0Jb4BFhTfuD8bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:71:75:82:44:6a:53:f9:b7:8f:1a:53:68:f6:c1:3a:58:1f:
d5:94:df:57:aa:92:b3:0b:26:89:d2:02:f8:3c:f2:2d:37:90:
29:f8:d6:45:09:c4:9f:1a:33:1b:73:0d:90:ae:44:50:87:33:
20:85:16:57:ea:bc:32:a0:ac:e7:1a:9d:97:df:19:fb:50:a4:
1b:3e:f8:64:6e:06:82:c1:97:a5:67:29:61:20:f4:2f:4f:5d:
b5:33:25:23:40:e1:e4:8d:38:05:58:1a:8c:7c:38:a5:b7:1f:
5b:4f:ab:df:e5:fa:ee:81:73:eb:e3:1f:b1:1a:f3:b0:18:b3:
49:bd:9c:c6:dc:b3:ea:cd:19:53:28:19:81:83:df:3d:a4:f4:
9d:02:63:22:a5:8b:3e:f7:b7:55:8a:aa:ab:e9:51:aa:3f:29:
b8:fe:37:36:ec:b4:76:b6:d6:c6:ae:00:a3:f4:d7:a1:fc:7e:
e9:c4:5c:70:94:d0:c5:d9:06:eb:1c:a7:2d:10:7c:8d:e2:d4:
84:68:22:79:d0:f2:33:7a:30:a1:1b:49:c2:53:35:ac:37:bb:
13:80:0d:0e:fa:32:8b:89:ed:ab:c9:eb:98:84:42:84:95:23:
ef:9c:5f:4d:91:58:4d:03:e4:ac:ce:51:5b:01:7e:d2:d9:4f:
c0:26:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:24:46 2025 by rpki-client