Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ycyg7zwu1ePJ3b4idQkDsvtGlSc.roa
File: ycyg7zwu1ePJ3b4idQkDsvtGlSc.roa (raw, json)
Hash identifier: 1J//Au6DrjT/d6rAeSoH2O96I8cVYi9bVxneFEIAN0g=
Subject key identifier: C9:CC:A0:EF:3C:2E:D5:E3:C9:DD:BE:22:75:09:03:B2:FB:46:95:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186695E0F57B94DC63C868C687BFEFEE97D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ycyg7zwu1ePJ3b4idQkDsvtGlSc.roa
Signing time: Sun 19 Feb 2023 11:10:17 +0000
ROA not before: Sun 19 Feb 2023 11:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:69:5e:0f:57:b9:4d:c6:3c:86:8c:68:7b:fe:fe:e9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 11:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9cca0ef3c2ed5e3c9ddbe22750903b2fb469527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:7b:74:39:53:32:d8:ad:f8:00:52:42:f0:
95:20:79:45:69:19:0f:6d:78:f3:96:07:07:f4:03:
43:08:3d:b5:70:4c:3a:f2:be:e1:b1:31:b2:0f:73:
05:c3:30:7a:07:17:cc:3d:2c:b6:ad:ff:ce:9a:c0:
8e:d4:c3:97:0e:fa:2b:b3:b3:ea:26:12:2f:0c:5c:
0e:24:b6:20:be:b7:70:17:85:0b:10:96:dd:82:6a:
11:a5:ab:4c:ef:3a:da:a9:e7:3d:44:f5:83:b7:f2:
3b:f1:f6:a4:20:06:8a:73:4a:b0:4d:f2:17:d6:ed:
8e:84:08:43:32:15:ed:54:25:e6:cc:eb:f8:e8:82:
3d:12:06:3e:4d:fb:dc:6f:69:ba:67:05:b7:2f:c9:
e2:9f:f9:6a:ca:18:55:03:e7:1f:e3:ef:2f:35:ff:
30:05:e3:14:42:0b:95:0a:71:94:3e:7e:fc:bc:9e:
d5:71:0d:2c:d9:38:72:95:5d:14:67:e1:8d:d8:89:
9a:b4:39:f9:97:ae:cb:7c:50:f8:0b:21:14:e4:36:
4e:d5:e4:f4:3f:97:d0:ab:3e:ff:d1:76:fa:4a:79:
60:f3:b8:cd:25:6d:ba:f4:53:7c:93:86:a7:ee:f7:
74:bd:b4:94:c6:39:08:66:96:63:9d:25:b9:23:88:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CC:A0:EF:3C:2E:D5:E3:C9:DD:BE:22:75:09:03:B2:FB:46:95:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ycyg7zwu1ePJ3b4idQkDsvtGlSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:48:4a:fe:e4:7a:67:e9:08:e0:61:40:3f:55:a2:02:63:b3:
cf:21:66:23:36:a4:0f:ce:7f:4f:02:92:bf:d2:ff:83:44:4e:
cc:c4:c4:10:6e:ac:ca:0e:1a:25:a7:4f:cd:6d:66:49:1f:82:
09:3d:04:c2:1a:3d:2f:e0:44:92:7d:d1:13:81:97:09:86:57:
50:9c:5c:e1:d0:3b:78:d5:ba:01:1b:2c:43:ec:43:80:5e:64:
10:da:76:8f:9d:7f:57:a2:a6:70:dc:c8:52:fa:55:cc:5d:d3:
b6:c5:d4:f3:4d:ed:31:5e:9e:eb:eb:fe:43:f6:2c:5e:93:f2:
23:6e:3e:d8:61:c9:04:33:c6:9a:76:2e:54:5e:ef:18:1b:43:
fc:99:1e:60:b8:45:8b:93:b9:6e:cf:72:ab:14:c0:c0:4a:6c:
e6:f1:a9:ce:3b:83:c3:4f:1e:ac:0c:6c:57:c0:6a:59:06:92:
9b:4c:b2:c7:d9:0b:9d:f7:31:1c:ec:d6:21:25:bf:99:eb:9f:
6d:0e:fa:d1:5e:50:bf:ce:c2:11:6a:79:23:56:ee:24:50:37:
d3:db:83:c3:af:b2:58:47:04:d4:f2:36:9d:28:ce:e7:c6:cd:
8b:a2:f7:70:20:cc:16:a1:b8:a1:fb:4a:a4:c6:bf:cb:90:b2:
73:1a:96:e0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZpXg9XuU3GPIaMaHv+/ul9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE5MTExMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWNjYTBlZjNjMmVkNWUzYzlkZGJlMjI3NTA5MDNiMmZiNDY5NTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/t7dDlTMtit+ABSQvCVIHlFaRkP
bXjzlgcH9ANDCD21cEw68r7hsTGyD3MFwzB6BxfMPSy2rf/OmsCO1MOXDvors7Pq
JhIvDFwOJLYgvrdwF4ULEJbdgmoRpatM7zraqec9RPWDt/I78fakIAaKc0qwTfIX
1u2OhAhDMhXtVCXmzOv46II9EgY+Tfvcb2m6ZwW3L8nin/lqyhhVA+cf4+8vNf8w
BeMUQguVCnGUPn78vJ7VcQ0s2ThylV0UZ+GN2ImatDn5l67LfFD4CyEU5DZO1eT0
P5fQqz7/0Xb6Snlg87jNJW269FN8k4an7vd0vbSUxjkIZpZjnSW5I4hvFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMnMoO88LtXjyd2+InUJA7L7RpUnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveWN5Zzd6d3UxZVBKM2I0aWRRa0RzdnRHbFNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGRISv7kemfpCOBhQD9V
ogJjs88hZiM2pA/Of08Ckr/S/4NETszExBBurMoOGiWnT81tZkkfggk9BMIaPS/g
RJJ90ROBlwmGV1CcXOHQO3jVugEbLEPsQ4BeZBDado+df1eipnDcyFL6Vcxd07bF
1PNN7TFenuvr/kP2LF6T8iNuPthhyQQzxpp2LlRe7xgbQ/yZHmC4RYuTuW7PcqsU
wMBKbObxqc47g8NPHqwMbFfAalkGkptMssfZC533MRzs1iElv5nrn20O+tFeUL/O
whFqeSNW7iRQN9Pbg8OvslhHBNTyNp0ozufGzYui93AgzBahuKH7SqTGv8uQsnMa
luA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:49 2025 by rpki-client