Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ybhpp7-DdEhLmgimNOnhm1ebCd4.roa
File: ybhpp7-DdEhLmgimNOnhm1ebCd4.roa (raw, json)
Hash identifier: cFFMu6xaYhETXUitw0PBGPrBDCIkTZXFnAv00Hzs1Xk=
Subject key identifier: C9:B8:69:A7:BF:83:74:48:4B:9A:08:A6:34:E9:E1:9B:57:9B:09:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894E882246B4AA9D5983636D6B9474FF46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ybhpp7-DdEhLmgimNOnhm1ebCd4.roa
Signing time: Thu 13 Jul 2023 09:14:51 +0000
ROA not before: Thu 13 Jul 2023 09:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:88:22:46:b4:aa:9d:59:83:63:6d:6b:94:74:ff:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 09:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9b869a7bf8374484b9a08a634e9e19b579b09de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:77:37:b1:c8:8d:b2:6d:29:85:4f:40:48:
17:32:36:dd:28:a0:ed:8f:ec:ef:60:50:15:7a:5c:
9b:5e:1c:43:62:4d:f5:32:1b:7c:db:9d:a6:fe:69:
8e:78:1f:da:94:18:92:83:c4:a1:09:03:9f:ea:14:
1f:e8:44:23:86:8d:20:34:79:6f:5f:b0:1c:eb:2f:
f6:e7:63:cc:79:6f:fa:7c:13:4d:fa:4d:11:3c:ef:
fa:b7:4e:db:6d:c2:5e:6d:56:53:8e:02:51:f7:6c:
e1:2d:26:75:21:8e:fc:76:ee:c0:bd:ed:2c:e9:84:
59:88:d3:1a:64:e3:f6:7b:91:79:2e:84:43:d6:a3:
b1:01:6f:76:58:be:dc:01:c0:3c:6d:e4:52:ef:4e:
14:2c:22:9a:03:11:d6:87:e0:09:eb:fb:61:bb:14:
f7:f7:f3:54:c4:84:1f:f8:62:b8:f8:81:39:27:f8:
b4:22:ce:cd:c9:84:14:2a:d9:3e:12:5b:fb:00:ab:
5a:25:86:80:d9:95:00:3f:49:26:4f:f5:da:cd:17:
4f:cd:5e:b5:bd:ab:c1:7e:81:5a:35:6c:e5:8b:ea:
62:3f:63:be:12:40:5b:c3:d8:8f:b0:f8:e2:9e:ba:
cc:cc:2b:e1:56:20:43:2f:33:ae:03:f3:ec:38:d6:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B8:69:A7:BF:83:74:48:4B:9A:08:A6:34:E9:E1:9B:57:9B:09:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ybhpp7-DdEhLmgimNOnhm1ebCd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:fd:6b:43:e1:66:4f:8e:80:13:cc:51:9a:b4:27:0a:6a:7b:
2a:6b:44:a9:ce:ce:f8:44:e0:34:46:6c:71:a3:7b:03:30:02:
e9:50:c0:6f:82:3f:88:db:4a:19:cf:f4:2c:5e:72:d4:64:15:
6a:c3:f0:ba:27:8c:93:e8:3a:fb:77:c7:6d:8b:45:7b:49:5c:
10:b4:0c:a8:d7:62:d4:f4:6b:de:4b:6a:14:73:02:47:82:63:
de:31:8c:03:d2:c5:e9:a8:c8:8c:25:b3:23:44:52:d7:f4:3d:
4c:2c:42:de:8f:6a:00:26:eb:14:26:57:46:2a:ff:f2:08:6c:
7f:f1:00:f2:06:58:88:f0:9f:a6:87:0c:42:51:64:bc:6e:b8:
55:47:8c:a5:d2:34:e1:c6:ba:6e:5a:c4:b9:25:4a:31:4f:e6:
ec:03:8b:34:ec:1b:e5:3d:e1:a2:f7:4b:76:7f:47:0e:0e:cd:
3f:40:5b:3c:58:65:3d:67:48:fd:ab:b7:4d:7f:dc:77:d7:c7:
ac:e3:ac:f6:94:39:91:e5:a5:a6:12:83:f1:f5:f2:95:6e:63:
e9:cd:51:25:b4:92:eb:29:8f:d2:2f:4a:70:41:31:6a:e0:c6:
09:8b:64:a5:f6:f0:e8:4c:68:72:70:c5:83:92:56:f4:25:3b:
7b:6c:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:59 2025 by rpki-client