Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZZGgij7UxgM9RjSsF-Vw9X8UZY.roa
File: yZZGgij7UxgM9RjSsF-Vw9X8UZY.roa (raw, json)
Hash identifier: P8extpnlfHXpVfl6zf7oUDH8FFlVpxIoEqmO4aLWICM=
Subject key identifier: C9:96:46:82:28:FB:53:18:0C:F5:18:D2:B0:5F:95:C3:D5:FC:51:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185470A16764099CB5252A448E18E238D7C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZZGgij7UxgM9RjSsF-Vw9X8UZY.roa
Signing time: Sun 25 Dec 2022 02:08:41 +0000
ROA not before: Sun 25 Dec 2022 02:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:47:0a:16:76:40:99:cb:52:52:a4:48:e1:8e:23:8d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 02:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c996468228fb53180cf518d2b05f95c3d5fc5196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:66:3c:5c:50:5f:4c:e8:7d:5a:f4:0d:b9:
3d:bf:76:58:28:3c:47:00:6a:d8:69:4e:7a:ef:08:
24:64:5a:45:e8:8c:9f:3d:46:78:91:32:b5:16:03:
85:d3:f3:99:28:5c:95:e2:0c:92:77:34:84:13:b9:
32:cf:b9:aa:39:ee:fe:c6:0c:f4:63:fb:8d:e5:29:
64:92:73:42:29:1a:dc:9d:89:e3:51:c6:82:eb:ac:
61:4e:8e:00:69:fa:3f:9c:b9:ab:1f:ef:83:48:54:
09:82:c4:87:ea:d0:f4:e4:6f:7b:90:68:15:70:0c:
71:05:95:bd:9b:f8:2e:88:a7:54:24:14:02:f1:78:
85:9f:94:69:af:e1:bb:0e:e0:0d:0c:97:3b:e8:5b:
1c:f1:9d:85:56:c4:5f:d8:b8:e5:01:9c:17:e0:92:
a5:fc:e1:3f:f4:98:1c:bf:19:ca:b1:d5:f9:87:fc:
96:b0:8c:b3:41:93:f8:4d:14:26:f1:27:38:50:33:
39:7d:5e:87:89:f5:dd:f8:1e:18:99:1f:18:61:fe:
af:01:25:bc:d3:c4:69:e6:35:9f:cf:7a:ca:92:4f:
67:d0:2e:1d:2f:16:0b:2f:61:5d:34:4e:31:7d:aa:
a0:6d:6a:94:e2:24:5f:a7:e9:db:ee:37:35:bc:f1:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:46:82:28:FB:53:18:0C:F5:18:D2:B0:5F:95:C3:D5:FC:51:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZZGgij7UxgM9RjSsF-Vw9X8UZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:fc:7d:96:69:f3:41:54:26:7b:17:58:9b:cf:88:d5:39:99:
58:5f:89:ad:cd:53:13:5b:a0:48:0d:fc:87:a9:84:b0:17:af:
2e:77:c8:b2:ed:73:6c:7c:23:2a:61:cb:58:b5:56:0b:62:08:
f9:d4:60:31:5d:8a:06:6b:53:05:37:16:f9:a0:4a:2b:0b:24:
7e:6d:a0:2b:a8:d4:19:01:24:41:c8:ef:be:3c:0a:78:a2:4b:
3e:20:47:b7:56:1f:80:9b:e6:40:17:02:a3:d6:97:3d:2c:d1:
30:b5:d8:f9:01:98:cd:f5:60:4b:ac:03:55:14:c7:1f:36:3b:
8b:99:c4:85:e2:18:e8:fd:eb:26:4a:7c:db:41:79:bc:20:7a:
c4:2b:23:00:d9:02:f8:55:7d:be:b6:54:6f:04:d5:dc:d5:f2:
06:40:ed:de:01:cf:9f:a6:c8:9f:9e:ce:e3:32:b5:21:98:7a:
f3:08:cd:23:f7:2e:66:48:42:55:d8:4a:cf:b4:7b:51:09:bc:
3b:04:e6:94:fa:53:82:a4:39:a7:a0:d4:42:0e:00:d5:33:d4:
a2:20:85:76:c6:55:c4:f3:16:b7:71:cf:ff:bb:aa:8f:cf:90:
2c:6c:30:40:2c:ca:48:c8:d6:b2:bd:99:65:2d:ad:56:c1:0c:
97:80:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:11:38 2025 by rpki-client