Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ycHuhSOaaBLIJcimbvbf6ytXei0.roa
File: ycHuhSOaaBLIJcimbvbf6ytXei0.roa (raw, json)
Hash identifier: znNP9ehiN2ZTuRLIqemEN8FfrITF+LRCY02EoKnfjk4=
Subject key identifier: C9:C1:EE:85:23:9A:68:12:C8:25:C8:A6:6E:F6:DF:EB:2B:57:7A:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7FF7F0E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ycHuhSOaaBLIJcimbvbf6ytXei0.roa
Signing time: Sat 30 Apr 2022 21:09:31 +0000
ROA not before: Sat 30 Apr 2022 21:09:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146955493 (0x7ff7f0e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 21:09:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9c1ee85239a6812c825c8a66ef6dfeb2b577a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:bd:e4:6d:0e:3d:88:79:50:f4:c2:60:de:
16:95:49:2f:b8:f5:70:ae:06:4f:c2:04:76:b9:b6:
90:a9:70:47:fe:1f:bf:44:2b:e9:da:d4:7a:64:28:
d0:72:2c:28:28:25:9c:bc:29:1f:02:d8:60:51:2e:
3e:48:69:cc:8a:17:88:b0:ed:ac:05:63:c6:31:35:
50:bb:32:cf:a1:c4:4b:86:7b:9a:88:de:69:f7:0f:
84:23:e0:fa:5e:38:c2:38:21:05:21:70:a2:fe:9b:
ee:f1:5d:c4:9e:19:3a:0e:fe:6c:e1:5b:fa:de:7c:
83:a3:3d:25:da:10:bb:1e:ed:05:36:5a:53:4f:25:
08:75:67:c1:6b:ad:09:f1:fc:6d:7a:7b:06:b3:86:
56:47:33:73:55:10:69:05:d4:6e:4b:c7:a1:9d:64:
6b:61:72:23:92:a6:35:86:0d:f4:63:52:52:4b:b7:
42:09:31:86:53:3d:e0:41:e3:cb:13:ad:6d:3c:43:
10:cd:4b:42:e0:f0:d1:74:8c:84:f8:72:9a:62:2a:
65:fc:f2:1b:e7:be:7a:2d:e9:e8:43:da:02:f8:d9:
67:29:1e:67:99:86:cd:76:a3:a9:8e:9f:1f:96:07:
d9:7d:bf:85:d5:74:88:57:ee:d0:b8:be:71:6d:de:
f7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:EE:85:23:9A:68:12:C8:25:C8:A6:6E:F6:DF:EB:2B:57:7A:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ycHuhSOaaBLIJcimbvbf6ytXei0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:2b:18:41:b7:8e:cc:91:99:c0:85:9c:85:be:1a:7f:3d:c5:
37:7c:20:3c:03:1b:44:31:d3:47:ba:56:01:02:1f:b4:03:e3:
df:69:56:bf:9a:c6:92:3d:5c:ad:20:68:ab:1d:86:52:55:0d:
82:99:37:5b:0c:68:56:79:4c:b5:57:d3:bf:88:47:44:bb:c4:
d0:c8:cf:56:9f:79:b6:13:70:64:ce:09:2d:9a:4e:6f:57:83:
d3:e2:f4:81:c6:37:87:60:9f:03:ca:19:a0:0c:ec:ac:3a:e5:
b5:b7:47:0d:1a:8c:fd:85:75:09:fe:98:fe:09:e1:be:7a:7c:
fb:8b:58:87:11:55:28:eb:62:28:5b:cc:91:0e:27:50:ca:8f:
5a:a9:89:ac:6d:bb:81:26:64:01:eb:9c:b2:ca:82:b2:7f:d9:
76:f9:2e:06:51:6b:6e:85:d1:6a:04:d8:35:f1:4e:9f:80:74:
40:6c:c3:c6:2f:36:ad:ad:99:2d:26:36:26:cd:a3:3c:c7:ae:
78:34:93:71:84:5e:80:50:0e:ac:d4:dd:2a:70:c1:b7:a4:53:
a1:13:11:d5:0e:cb:1d:de:73:8d:0c:73:82:8d:67:56:2e:60:
c5:18:c4:20:bf:d6:2b:79:15:32:55:74:15:e2:1f:07:29:ee:
d6:98:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:38 2025 by rpki-client