Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZcvsf1swpCKy1qCcLY4df4B6lA.roa
File: yZcvsf1swpCKy1qCcLY4df4B6lA.roa (raw, json)
Hash identifier: z5MYREKZgAeTNGDrWrjrqnsyOpj7HSHrDBGbVtshzBE=
Subject key identifier: C9:97:2F:B1:FD:6C:C2:90:8A:CB:5A:82:70:B6:38:75:FE:01:EA:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F9F768A2D7E0283F1A7A7A471EDFAE4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZcvsf1swpCKy1qCcLY4df4B6lA.roa
Signing time: Tue 15 Aug 2023 16:11:28 +0000
ROA not before: Tue 15 Aug 2023 16:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:f7:68:a2:d7:e0:28:3f:1a:7a:7a:47:1e:df:ae:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 16:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9972fb1fd6cc2908acb5a8270b63875fe01ea50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:22:df:4b:ff:fe:87:7d:d9:f7:a3:db:b0:
99:82:69:b5:9d:68:95:36:46:a3:b2:a0:3d:d7:01:
f2:ec:29:27:02:30:21:07:d4:d5:05:4a:93:65:fd:
90:0d:b8:1c:51:19:ff:03:90:aa:a9:7b:a4:00:66:
5f:24:93:d4:d0:8f:1c:9b:47:2a:d5:63:a6:e3:f4:
d5:7f:56:5b:f0:fd:2a:cd:2d:b6:33:b2:38:df:30:
58:e7:9e:e7:b2:99:a7:fd:b3:c6:39:96:92:39:59:
a8:7a:d5:75:20:4f:af:2f:67:0e:4f:3e:7d:c8:14:
11:16:6b:52:0c:28:c1:6d:de:2d:3a:a1:9d:a9:53:
83:d2:06:cf:51:b4:91:6f:3e:a0:c2:a7:fb:b8:03:
32:5b:af:73:7e:57:a1:c2:90:5c:e1:fb:5e:59:96:
a1:70:38:e5:9a:db:4f:48:11:ea:26:5e:11:ba:da:
35:f7:53:b5:cb:5c:43:af:b3:dc:e2:68:57:cc:81:
4c:68:56:70:88:d9:5b:35:38:82:d7:d5:b0:8c:df:
8b:29:08:4c:8f:91:ef:62:94:3f:63:ed:c9:6d:13:
8d:8b:9a:3d:81:5f:1f:15:f4:92:64:e1:bb:30:51:
0c:2d:02:47:bc:24:75:3a:7e:7f:eb:89:ad:0e:cc:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:2F:B1:FD:6C:C2:90:8A:CB:5A:82:70:B6:38:75:FE:01:EA:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZcvsf1swpCKy1qCcLY4df4B6lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:24:d9:b5:5a:1c:59:e5:5a:ce:3e:f1:2e:e8:96:7b:01:cc:
6f:22:10:72:43:e8:92:2f:de:20:12:21:25:79:e5:69:c3:03:
a5:5e:f7:5f:a1:06:8d:f0:2f:6a:c5:49:a4:f2:2f:fc:c0:32:
c4:e4:c2:9d:84:47:ef:a2:72:2b:fa:73:b1:3e:7d:ec:d7:c2:
82:e5:13:2c:99:85:eb:cf:93:92:6c:c1:47:75:19:f9:52:1d:
8f:45:44:2f:16:0c:0d:a6:3d:97:ca:c5:2e:cc:2d:2d:01:df:
76:b8:06:bf:8e:62:3a:15:fe:da:5d:9d:86:6d:68:13:31:fb:
a7:1c:96:6b:02:09:66:56:f5:fc:b8:2f:89:af:f5:f0:1a:2c:
bf:0a:53:3c:da:8b:16:2c:d3:77:02:72:16:77:64:71:3f:3f:
a7:ab:c9:68:9a:7e:8e:08:2e:f0:dc:cb:bd:83:c0:62:81:7f:
e7:22:90:16:72:14:3e:d7:09:38:09:44:24:1b:f8:16:a3:4c:
5a:8a:10:8b:ee:79:99:8d:92:29:a4:a3:0a:bb:42:fc:ce:65:
6d:6e:d1:f5:e9:6d:1c:c3:7f:44:ba:e3:92:6e:96:d9:79:a3:
48:eb:07:03:d8:d0:28:9f:5a:6c:fa:b6:85:70:30:5a:21:1e:
c1:3b:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:13 2025 by rpki-client