Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ykBZFgtc21px2-GMafII6ut4Sn0.roa
File: ykBZFgtc21px2-GMafII6ut4Sn0.roa (raw, json)
Hash identifier: kxlhGMPBKXkYfDLFZjDChxJ3qLnLud/CuZQ47/b9FBU=
Subject key identifier: CA:40:59:16:0B:5C:DB:5A:71:DB:E1:8C:69:F2:08:EA:EB:78:4A:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A839EEB896392E24F90A1B435EA88DC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ykBZFgtc21px2-GMafII6ut4Sn0.roa
Signing time: Sat 22 Apr 2023 09:09:41 +0000
ROA not before: Sat 22 Apr 2023 09:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:39:ee:b8:96:39:2e:24:f9:0a:1b:43:5e:a8:8d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 09:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca4059160b5cdb5a71dbe18c69f208eaeb784a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:41:98:ae:8e:5b:da:77:36:29:db:e0:df:50:
17:0c:68:9c:e3:bc:e5:d4:7f:5f:f8:4c:b5:eb:d7:
12:4a:68:c8:6c:70:7b:36:e5:3c:6c:e9:46:2a:0f:
9a:ab:e4:7a:ba:11:85:7c:b5:f2:7e:b0:da:b5:54:
2c:b3:f7:e5:fb:9d:7c:0c:dd:74:31:3b:54:fd:77:
53:c3:83:06:2d:e2:9b:d2:c0:02:b2:f4:73:a7:e8:
4c:c4:e0:e4:da:ef:e7:fe:0d:8e:4e:31:72:b4:0c:
de:41:28:64:de:8c:54:c2:e5:f9:27:d0:ec:b1:85:
78:ba:4d:b6:73:c1:c8:4a:02:ac:79:b5:ad:85:a8:
65:49:b3:2c:ab:eb:35:b6:98:ec:1a:ad:a1:72:55:
bc:16:72:7e:3c:31:22:16:6f:4b:aa:22:9f:5f:c4:
ff:ad:5f:2b:5a:c6:40:1e:a3:be:db:c0:fb:74:c7:
2d:a5:db:19:1f:fe:46:64:1d:e4:34:d6:de:06:6d:
c9:a5:82:e8:58:88:8e:17:09:ab:6c:b3:5f:a1:30:
1b:f7:ac:53:1e:97:3b:fe:6b:83:3f:3c:5e:1b:41:
6a:7b:f2:81:9d:d5:d4:30:ab:4d:77:ee:aa:88:51:
2f:34:29:66:42:bd:5f:34:41:07:43:38:78:1c:91:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:59:16:0B:5C:DB:5A:71:DB:E1:8C:69:F2:08:EA:EB:78:4A:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ykBZFgtc21px2-GMafII6ut4Sn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:2d:9b:e3:f7:2c:74:41:7d:66:4a:d8:f0:c6:7e:74:db:5f:
86:c2:86:78:9f:73:b2:e0:3b:ba:25:ee:36:f0:a9:55:de:34:
dc:95:79:af:93:c7:86:eb:04:3a:2a:72:13:f3:23:30:00:e6:
d9:0f:82:1d:8a:b1:53:55:36:5e:ef:ff:78:03:d9:0a:b7:f5:
c2:44:cd:ac:59:48:f1:20:d8:b5:47:73:e3:97:2f:36:6f:72:
5b:1f:bf:0b:53:a3:a9:db:22:4d:d1:b1:62:7b:f8:23:b4:93:
1b:96:3b:92:84:37:a6:83:ed:dd:e0:47:41:68:eb:24:d1:5c:
77:ac:1d:74:db:d3:ec:27:b6:53:fc:cc:da:fe:de:be:19:41:
30:67:79:51:51:cb:83:05:cd:65:60:f6:5d:67:56:a9:81:f9:
c2:7d:18:39:f2:bb:57:6d:66:1f:29:b9:53:05:d1:6c:e2:c9:
f8:1f:2f:19:f7:7e:a5:61:71:c3:c8:0b:5b:eb:dc:9b:d7:ad:
30:50:e1:19:63:3e:16:ef:99:60:50:0e:55:85:53:89:f2:40:
23:3d:b3:37:7f:32:94:01:ae:eb:06:2f:b8:b8:62:5e:79:da:
70:24:6c:f9:ab:65:9b:83:fb:3d:27:bc:d7:1b:43:02:da:59:
33:4f:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:37 2025 by rpki-client