Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ya6JiNwRa_w2bkVmXQhSfRi31mc.roa
File: ya6JiNwRa_w2bkVmXQhSfRi31mc.roa (raw, json)
Hash identifier: 27n3En70Am+wuWza2mwvhgVixKiZFBfNx5/CtRKCOUs=
Subject key identifier: C9:AE:89:88:DC:11:6B:FC:36:6E:45:66:5D:08:52:7D:18:B7:D6:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867AFCDD40835414D8FA016F6021E469C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ya6JiNwRa_w2bkVmXQhSfRi31mc.roa
Signing time: Wed 22 Feb 2023 21:17:17 +0000
ROA not before: Wed 22 Feb 2023 21:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:fc:dd:40:83:54:14:d8:fa:01:6f:60:21:e4:69:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 21:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9ae8988dc116bfc366e45665d08527d18b7d667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:d0:ea:7f:61:21:8c:f6:1b:4a:93:4b:f7:
04:ff:6c:f8:51:86:1d:6a:a2:ff:99:7f:52:c2:a4:
7d:e4:e7:ff:99:69:c1:f1:8b:71:0a:2e:11:54:7b:
fa:47:75:cb:71:b8:8f:a7:6a:c9:9c:14:49:df:6f:
78:67:b5:38:cf:ed:92:b0:98:6a:91:a1:3e:b3:c0:
5b:29:53:4c:72:2e:11:72:46:34:75:7d:b2:83:81:
05:94:9e:1d:3c:44:1c:8c:64:64:11:db:ce:c7:82:
4c:86:69:04:54:dc:a7:79:7d:a2:e8:0b:88:4c:6d:
68:3e:55:0a:87:5b:4f:ea:45:72:ce:97:2f:53:19:
b4:dd:97:9c:da:7a:75:a2:53:e9:2f:0b:b5:d8:16:
74:27:99:9c:b1:e8:ef:cb:46:58:8c:e0:d3:a6:1d:
00:55:de:3c:a2:33:24:6b:44:30:a4:d6:a2:10:da:
cc:e2:3a:89:92:00:ff:f7:17:1f:ca:fb:cb:b4:48:
c7:ff:61:c3:12:df:b3:7f:f2:32:d8:0d:aa:ff:0c:
0d:5e:64:77:45:74:df:23:d9:be:30:ae:0b:21:ba:
bf:33:d4:cf:4f:37:6e:6e:32:78:ae:b9:96:c8:f7:
df:e1:f6:31:2f:5d:25:84:fb:f7:a0:e7:23:be:10:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:89:88:DC:11:6B:FC:36:6E:45:66:5D:08:52:7D:18:B7:D6:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ya6JiNwRa_w2bkVmXQhSfRi31mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:be:2b:9f:a5:75:fd:b8:b0:85:d6:4d:f5:87:97:78:77:1a:
5a:fe:b0:b7:63:53:0b:45:5d:3c:0c:e4:b8:e3:db:ae:0e:ef:
3d:9a:4a:3d:53:2b:fb:76:e2:e7:44:fb:d4:ca:a7:e7:d1:c7:
3c:df:75:76:17:f3:6c:8e:f4:fb:13:e1:cc:20:ee:9d:0d:7a:
f8:e4:b2:4f:e7:49:79:48:f3:70:4a:72:90:bd:71:91:c7:53:
11:56:5c:e8:8b:27:17:1f:c0:ed:ca:4c:84:64:13:1a:42:d6:
dd:24:92:5a:43:bf:1c:32:01:eb:ad:da:3c:d9:84:92:93:35:
3c:70:94:c3:ea:76:8b:50:0b:b1:ea:99:b7:fb:bb:ce:95:67:
3e:fb:99:1a:5e:49:0d:ca:64:f7:15:63:fa:64:ec:ea:05:df:
2a:96:2a:f0:b5:91:45:7c:20:8e:98:58:ed:19:ff:c6:68:fa:
da:68:67:32:b2:95:69:da:53:85:cf:07:c0:5a:65:eb:80:fa:
67:34:65:10:43:89:07:77:24:16:15:f1:7a:3c:80:d0:0d:01:
9c:e1:4a:68:31:07:75:7f:d6:39:7d:2a:68:5a:d4:d1:4d:ee:
ce:c0:cd:a0:55:2d:5e:6b:e7:7e:0d:b9:2f:ae:48:0a:af:81:
d9:83:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:31:55 2025 by rpki-client