Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZZS-yuTFl7t4SoEshOv89LK43I.roa
File: yZZS-yuTFl7t4SoEshOv89LK43I.roa (raw, json)
Hash identifier: z3QOZWdoUCe3eQQaay0R4CoBOlEPMOSIUfYaQ8sXPHE=
Subject key identifier: C9:96:52:FB:2B:93:16:5E:ED:E1:2A:04:B2:13:AF:F3:D2:CA:E3:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899AE243DABDB3B2D5728C27612312638D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZZS-yuTFl7t4SoEshOv89LK43I.roa
Signing time: Fri 28 Jul 2023 05:04:26 +0000
ROA not before: Fri 28 Jul 2023 05:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:9ae2:30a4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9a:e2:43:da:bd:b3:b2:d5:72:8c:27:61:23:12:63:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 05:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c99652fb2b93165eede12a04b213aff3d2cae372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:e1:1c:47:7b:f0:73:15:73:d5:6e:55:b4:
65:6e:b2:ed:0e:56:ef:9a:d9:c6:8a:c1:10:b9:b5:
a4:57:25:db:ef:93:9b:9c:f9:84:24:70:54:52:54:
92:16:31:0e:7c:3b:e1:b7:dc:72:60:60:4a:1b:73:
d4:b6:55:24:3c:e9:0a:d9:fc:db:be:d7:3a:5c:d3:
08:c9:7b:4c:b8:7c:69:87:a8:0c:2e:3f:77:68:d0:
81:85:27:b3:67:75:36:ec:8e:cb:84:29:5c:fc:d8:
6f:4e:79:0b:63:48:87:28:1f:41:36:e7:07:55:d5:
60:c8:22:6e:75:b1:b7:4e:4f:9f:60:69:a4:fe:63:
3f:71:a6:86:46:a3:10:3b:a5:f4:70:20:c3:4d:05:
0b:3d:e1:54:3e:80:58:a3:28:9e:c0:b6:ab:f8:c8:
d7:46:c4:76:21:16:21:3f:97:22:f8:ea:a8:cb:b7:
c5:9c:34:2d:7a:78:e5:ed:e0:84:0f:90:38:f0:fd:
fd:48:d0:fc:a5:32:50:25:b2:d7:3b:7e:d1:29:53:
5b:63:ec:76:4b:f9:d0:37:de:49:a7:8d:eb:42:5f:
94:86:67:56:53:16:d1:5e:63:d0:01:f9:e2:1b:8a:
37:e5:f3:dd:4a:91:bf:98:57:cf:b8:b1:4d:5c:9c:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:52:FB:2B:93:16:5E:ED:E1:2A:04:B2:13:AF:F3:D2:CA:E3:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZZS-yuTFl7t4SoEshOv89LK43I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:5f:34:90:b4:61:bc:53:b6:c4:1e:de:41:87:2e:81:37:87:
fd:4a:50:5e:f9:99:c4:ea:38:04:36:a4:d7:85:e0:0d:fc:4d:
be:5c:e2:9d:b9:84:b7:8b:5f:fa:51:0f:85:c6:cf:44:82:b6:
55:c9:ab:13:c0:5b:6d:fc:40:76:ec:40:a1:e4:90:e0:4b:90:
02:2f:4e:f0:4b:2d:98:05:e9:6b:e6:3b:29:30:35:2a:49:4b:
b9:9d:9a:1d:bb:5b:f5:f2:83:f2:25:19:14:94:a5:ac:94:ba:
0d:ec:33:92:35:ba:9e:28:b8:bb:d9:a0:ca:7d:2c:cc:7f:53:
e9:65:7a:58:de:86:f3:98:4e:ee:c0:6a:7e:a6:f3:fd:8c:74:
60:de:b0:e4:5a:03:8a:50:e8:c9:22:c3:66:fa:95:2b:ef:97:
f7:c9:c3:3f:a9:78:85:66:db:59:ad:0b:4c:e5:ee:8f:21:f0:
91:1e:40:38:26:ff:74:b8:a6:21:6f:eb:5e:76:c2:24:4d:4f:
c9:b9:88:62:8d:39:27:e3:9b:fc:e0:d8:10:31:49:c9:6a:c0:
df:11:58:c6:99:1b:3c:6e:4f:db:14:f8:b5:a9:b4:32:98:83:
68:13:6d:4e:ba:95:74:1d:98:b4:ff:71:96:bb:a9:aa:c8:b5:
94:35:4d:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYma4kPavbOy1XKMJ2EjEmONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI4MDUwNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTk2NTJmYjJiOTMxNjVlZWRlMTJhMDRiMjEzYWZmM2QyY2FlMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUPhHEd78HMVc9VuVbRlbrLtDlbv
mtnGisEQubWkVyXb75ObnPmEJHBUUlSSFjEOfDvht9xyYGBKG3PUtlUkPOkK2fzb
vtc6XNMIyXtMuHxph6gMLj93aNCBhSezZ3U27I7LhClc/NhvTnkLY0iHKB9BNucH
VdVgyCJudbG3Tk+fYGmk/mM/caaGRqMQO6X0cCDDTQULPeFUPoBYoyiewLar+MjX
RsR2IRYhP5ci+Oqoy7fFnDQtenjl7eCED5A48P39SND8pTJQJbLXO37RKVNbY+x2
S/nQN95Jp43rQl+UhmdWUxbRXmPQAfniG4o35fPdSpG/mFfPuLFNXJwk7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMmWUvsrkxZe7eEqBLITr/PSyuNyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveVpaUy15dVRGbDd0NFNvRXNoT3Y4OUxLNDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJRfNJC0YbxTtsQe3kGH
LoE3h/1KUF75mcTqOAQ2pNeF4A38Tb5c4p25hLeLX/pRD4XGz0SCtlXJqxPAW238
QHbsQKHkkOBLkAIvTvBLLZgF6WvmOykwNSpJS7mdmh27W/Xyg/IlGRSUpayUug3s
M5I1up4ouLvZoMp9LMx/U+lleljehvOYTu7Aan6m8/2MdGDesORaA4pQ6Mkiw2b6
lSvvl/fJwz+peIVm21mtC0zl7o8h8JEeQDgm/3S4piFv6152wiRNT8m5iGKNOSfj
m/zg2BAxSclqwN8RWMaZGzxuT9sU+LWptDKYg2gTbU66lXQdmLT/cZa7qarItZQ1
TfU=
-----END CERTIFICATE-----
Generated at Thu May 1 16:04:59 2025 by rpki-client