Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yiZJSpI5FiNCwdFXEigMlGiFfeg.roa
File: yiZJSpI5FiNCwdFXEigMlGiFfeg.roa (raw, json)
Hash identifier: DeD6Kx0uBmi9F/QsAYAatwC6tD9yODWM5IcsyBHSO2E=
Subject key identifier: CA:26:49:4A:92:39:16:23:42:C1:D1:57:12:28:0C:94:68:85:7D:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67EEA2C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yiZJSpI5FiNCwdFXEigMlGiFfeg.roa
Signing time: Fri 04 Feb 2022 22:04:28 +0000
ROA not before: Fri 04 Feb 2022 22:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:c6c4:69f3/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743692482 (0x67eea2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 22:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca26494a9239162342c1d15712280c9468857de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:13:d3:4b:e1:46:ce:49:2b:45:aa:cf:48:
6e:3b:ac:9a:1a:b4:dc:9a:ae:4f:2f:ee:5e:89:59:
26:11:6f:d8:2c:8c:71:b8:fd:65:8a:80:2e:d6:99:
a7:0a:a7:45:9c:bd:ca:ac:4f:89:15:da:a1:be:3f:
a3:21:fb:08:2a:10:30:6a:d3:6a:f7:f8:d7:f5:0e:
cc:21:36:85:91:5b:78:5a:35:32:a7:7b:28:75:0d:
c5:37:e3:de:2c:38:8f:01:b7:23:1f:91:15:16:5a:
6a:92:d3:97:89:d1:c5:ce:42:b9:e8:46:07:61:e4:
95:b7:f3:22:9d:72:16:f4:e7:02:b4:86:7a:b4:61:
ea:4c:8b:f7:4f:cd:22:81:4e:08:0f:c1:e5:36:83:
b0:6e:5f:c1:9e:0c:fd:72:be:d0:62:40:34:db:fe:
2e:ff:13:e9:08:64:7d:25:ee:1d:38:18:c6:ba:04:
5f:f3:5a:3b:8a:e4:01:2c:2e:a7:1f:68:2f:5e:54:
5c:b1:7a:db:36:3a:3d:b9:17:54:94:7f:a8:db:cf:
08:07:c2:ca:ea:26:a7:b4:1c:11:a5:96:2f:52:9e:
f1:78:98:19:67:21:95:9d:01:7e:ed:87:81:59:1e:
65:76:b2:ed:d7:6a:e0:26:41:42:3e:63:44:8a:00:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:26:49:4A:92:39:16:23:42:C1:D1:57:12:28:0C:94:68:85:7D:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yiZJSpI5FiNCwdFXEigMlGiFfeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:09:c9:83:c8:03:97:62:a1:fa:8f:37:5e:64:2a:b0:31:39:
7b:2f:4d:16:0d:29:17:79:12:04:55:13:cf:04:2d:dd:f9:9d:
c0:10:04:13:f2:a9:21:03:2b:4c:30:10:7e:e7:b0:0d:b5:6e:
f3:5f:7d:39:0e:9f:8b:e9:7e:06:f8:54:b1:af:7c:46:d3:00:
73:fa:e4:a5:ce:b9:cf:e3:9f:da:9d:1d:75:59:a3:f4:10:92:
ce:5b:99:32:6f:7c:59:56:e4:22:1c:3b:26:06:c8:46:88:69:
de:aa:6a:8c:93:85:95:ff:7e:d5:3e:e1:b8:5f:39:4c:5a:3e:
86:42:07:38:9e:19:68:d6:5e:22:69:51:99:91:10:3e:6d:d2:
b9:f8:28:8f:93:1b:19:6a:5b:60:78:bd:18:f5:7f:df:6d:0c:
eb:a2:73:a7:88:eb:28:cc:36:e7:14:22:69:a2:77:f5:da:8f:
bf:6b:e3:79:39:95:f1:65:00:3f:81:98:a8:0c:34:01:fd:4c:
57:57:1c:c8:d8:47:59:bb:7d:9d:98:64:8f:31:40:40:91:21:
05:3c:57:62:d5:99:a8:ab:58:37:0e:be:51:28:91:d8:cc:51:
db:97:10:c8:b7:6e:b8:4d:bb:53:f7:42:51:f5:c7:06:d1:42:
3e:85:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:12:19 2025 by rpki-client