Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yfMwBjwjvPjqd_Vnv_9y-6U6dCE.roa
File: yfMwBjwjvPjqd_Vnv_9y-6U6dCE.roa (raw, json)
Hash identifier: 2q58tUM/4JxuFHJQzDYSaz6QBouFEr5MBECeRjiH3jQ=
Subject key identifier: C9:F3:30:06:3C:23:BC:F8:EA:77:F5:67:BF:FF:72:FB:A5:3A:74:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188021D3924D6DB1C657CD4120FB6083027
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yfMwBjwjvPjqd_Vnv_9y-6U6dCE.roa
Signing time: Tue 09 May 2023 20:04:09 +0000
ROA not before: Tue 09 May 2023 20:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:21d:222d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:02:1d:39:24:d6:db:1c:65:7c:d4:12:0f:b6:08:30:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 20:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9f330063c23bcf8ea77f567bfff72fba53a7421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:1f:e7:5f:5d:bc:77:b5:38:57:ce:db:30:
48:9b:e2:2b:1d:83:ee:1a:f5:3e:89:06:7e:0e:54:
b0:6e:a7:55:b2:29:57:f3:3e:83:73:e7:82:69:ca:
ba:99:45:ba:04:55:d3:99:75:19:b9:0a:4c:d5:74:
4e:bb:45:c5:2b:97:d4:34:60:0c:eb:b3:9b:04:7a:
a2:f5:c7:46:50:4c:8e:5e:4a:8e:b7:f7:38:4c:4d:
71:2f:6f:25:40:bb:58:5b:fe:ee:53:e1:f8:8d:4d:
74:b5:65:e8:f0:00:a9:38:3d:43:a2:95:a8:87:d0:
92:3d:90:42:3f:66:c1:7b:8d:53:cb:7f:ac:ce:64:
e4:5b:86:50:8d:35:c6:f5:43:9e:87:90:89:73:b5:
41:7b:d5:02:8c:27:a2:8f:89:63:44:0c:4f:f6:30:
30:d6:8c:c1:e5:c7:1a:0c:82:bb:39:ac:7c:97:33:
8c:08:95:af:39:11:75:01:dd:3d:be:e2:11:15:f1:
2c:50:9e:26:61:21:7b:61:58:c2:72:59:f3:40:d6:
4f:82:04:1a:57:98:11:fe:40:d4:77:58:4c:fc:bc:
67:07:0c:5a:22:9b:27:f7:94:18:9e:c0:de:2e:d5:
21:45:37:16:22:93:bd:68:d6:f7:d8:c9:77:b8:3e:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F3:30:06:3C:23:BC:F8:EA:77:F5:67:BF:FF:72:FB:A5:3A:74:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yfMwBjwjvPjqd_Vnv_9y-6U6dCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:50:21:99:e8:69:0a:7a:df:5a:0c:79:60:b9:47:e3:0c:d0:
c4:aa:ea:dc:c7:71:49:58:1b:2b:f8:61:ff:39:fe:5c:c5:2d:
55:6a:68:7d:0f:70:7c:fa:0b:86:6e:d9:16:ef:11:48:88:a4:
2c:20:68:14:f8:08:16:0f:0a:90:f3:fb:05:90:60:aa:41:88:
62:fd:02:ae:7d:db:8a:57:88:77:f4:93:b2:da:42:87:cd:b9:
88:39:65:36:40:8c:fe:0a:62:9b:8e:8b:35:a3:72:e3:05:0a:
86:88:cb:e5:b5:28:bb:d2:d7:17:17:46:ab:57:f2:23:aa:dc:
d8:69:13:27:4d:48:60:99:dd:0a:49:70:a7:24:6e:03:74:98:
16:83:7c:2f:ad:f7:4c:ab:cd:63:c2:cb:8c:5a:9a:b1:dc:e3:
87:5d:33:72:a8:c8:1f:62:d7:a1:20:d6:5d:ae:1b:20:2f:7f:
12:51:01:37:50:cf:46:49:cb:13:78:9d:81:1e:87:03:b6:e0:
6b:b7:b0:24:37:87:49:bb:56:93:b8:2a:1d:a0:a0:9b:c0:31:
9e:9c:8b:e0:03:64:f4:35:8a:19:72:fb:e4:27:9f:0b:b0:56:
85:56:f6:4d:80:00:3d:06:0e:e7:76:23:1c:b7:84:d6:e7:71:
63:69:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:32:14 2025 by rpki-client