Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ygDrB3bcFBobVpiugQxu_uAJki8.roa
File: ygDrB3bcFBobVpiugQxu_uAJki8.roa (raw, json)
Hash identifier: 1iObf3vGitoolZM7os0d05Zh0zgrxz+iOHK2fmnY7fY=
Subject key identifier: CA:00:EB:07:76:DC:14:1A:1B:56:98:AE:81:0C:6E:FE:E0:09:92:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018516574216F3CABB46EFEE972F4DE629C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ygDrB3bcFBobVpiugQxu_uAJki8.roa
Signing time: Thu 15 Dec 2022 15:11:35 +0000
ROA not before: Thu 15 Dec 2022 15:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:57:42:16:f3:ca:bb:46:ef:ee:97:2f:4d:e6:29:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 15:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca00eb0776dc141a1b5698ae810c6efee009922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:fc:63:0b:fd:1a:1f:0a:5c:bb:5c:2c:9c:
86:45:8c:01:9c:69:e3:35:e6:68:03:4c:0d:dc:d2:
9a:d8:a5:d1:bb:35:e7:69:27:0f:a5:ba:75:df:12:
ed:9f:9e:ac:a3:7e:0c:e8:4a:24:f4:27:d5:2d:d3:
df:8a:1b:49:80:7a:f5:05:7b:04:ae:ec:09:76:e0:
6e:07:91:5b:81:e6:31:c6:f4:75:f3:98:3e:bb:75:
21:3a:4f:e5:86:b8:f4:d9:32:20:2f:ff:29:9d:f1:
7e:c1:73:72:f8:c3:af:d6:c2:07:c7:3e:1d:64:80:
65:f0:48:d1:c3:17:5e:b3:ad:86:9d:03:fa:47:94:
ec:c8:1d:4b:8d:27:00:31:68:30:39:22:42:3a:70:
6e:29:1c:8c:b3:44:31:12:59:a1:25:f2:30:ed:47:
62:16:45:a1:f2:55:0e:78:02:75:e8:3f:66:e4:5f:
13:a8:42:76:3b:d8:80:2e:9e:ac:ab:47:7e:9e:d6:
68:ae:06:52:82:d0:30:f4:12:dc:47:18:d4:82:7d:
92:b5:ac:e9:36:ee:c3:09:4c:2d:8d:4b:fc:13:9e:
3a:ef:ed:86:b5:3c:a2:fb:4d:1b:64:8b:7a:d8:ca:
6b:07:e8:74:01:8c:b4:37:dd:33:0b:4b:1d:fd:d7:
0c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:EB:07:76:DC:14:1A:1B:56:98:AE:81:0C:6E:FE:E0:09:92:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ygDrB3bcFBobVpiugQxu_uAJki8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:51:c9:35:01:f8:8c:32:a7:e5:62:89:6b:c0:f7:58:fc:54:
fb:94:58:5e:85:a3:95:79:a8:ab:7b:2c:74:97:f0:c6:36:6e:
db:13:ac:22:2d:05:36:61:42:dd:04:20:5f:64:cc:48:55:2d:
6a:d5:3a:80:34:48:f3:5a:0d:47:05:b9:88:c0:31:59:e7:dc:
d2:cc:2d:4b:b7:86:14:1a:19:1d:6b:2e:00:3a:fe:04:f9:17:
74:80:0d:cd:7f:f1:bb:c7:f9:92:f4:b5:6c:71:37:e2:cc:9e:
48:66:8d:2c:d1:52:44:66:06:b2:bf:7d:96:7e:a2:ec:2c:cd:
6a:a3:b9:15:0a:ef:79:b7:9f:62:2b:6d:7d:e3:91:f0:6c:b2:
33:6a:95:16:d4:c6:50:09:73:6b:0d:6f:74:3d:a0:03:92:f4:
8b:1e:70:d7:89:12:d5:03:ce:39:de:48:f2:31:7a:2b:b3:63:
b8:d3:4e:c1:11:8b:cc:62:36:5e:d0:01:ae:d0:06:15:1a:b5:
94:02:64:1f:df:90:65:cf:15:b3:90:03:c8:9f:f5:42:37:d0:
67:aa:4c:43:cd:be:72:6b:9c:35:cc:65:36:e0:f2:bc:b3:12:
84:a7:b3:fc:bd:4d:ec:c1:6b:7b:86:01:e1:63:2a:f7:7a:21:
af:d3:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:44 2025 by rpki-client