Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yn-DDa6qLDvWBdKzB6lNwhppNig.roa
File: yn-DDa6qLDvWBdKzB6lNwhppNig.roa (raw, json)
Hash identifier: LnxX+7lHCynRRgpu5WY5uJYRi7T72dMnzWB+xkehaxM=
Subject key identifier: CA:7F:83:0D:AE:AA:2C:3B:D6:05:D2:B3:07:A9:4D:C2:1A:69:36:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876D38A83C163E1EC19AA86D056047249C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yn-DDa6qLDvWBdKzB6lNwhppNig.roa
Signing time: Mon 10 Apr 2023 22:10:42 +0000
ROA not before: Mon 10 Apr 2023 22:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6d:38:a8:3c:16:3e:1e:c1:9a:a8:6d:05:60:47:24:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 22:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca7f830daeaa2c3bd605d2b307a94dc21a693628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:51:19:84:25:13:54:82:2c:c0:9b:54:e1:
d6:26:7b:31:3c:77:ac:17:e2:22:30:a1:b9:97:56:
bf:e4:7e:6a:b5:f2:df:5f:cd:e5:10:01:6a:30:fa:
a5:70:6c:9d:b3:eb:c7:18:09:24:3f:6c:c8:65:97:
8f:87:99:69:56:b2:91:96:54:bf:92:0f:c3:51:93:
2f:0d:c9:39:5b:61:4f:5d:ea:0c:e2:f6:d0:e7:17:
3d:4a:d4:ca:84:00:c1:e8:61:04:fa:d6:c8:0e:d3:
73:c7:8d:a4:d3:c1:20:4a:e9:70:10:63:4f:77:8c:
4f:bc:3a:59:9d:55:fd:93:0b:1d:eb:09:e0:72:d4:
a0:a8:ce:46:b2:12:6c:34:29:63:06:52:b8:fe:69:
86:cb:a2:80:f2:c9:41:a8:70:7e:77:ae:fd:5f:04:
fc:5c:a6:38:76:13:18:65:23:7e:1c:fd:74:41:e5:
42:b6:84:7f:98:46:b9:2d:12:bb:1f:44:82:3d:f8:
80:6c:d9:7d:da:bf:49:05:e7:a3:5c:db:5e:a2:1b:
7e:86:cb:c8:b5:8a:ef:26:f4:dc:3a:23:1c:b9:67:
6d:6b:d7:88:82:b1:a2:7f:99:ce:05:20:da:94:7a:
d7:5e:4e:54:ae:46:35:d3:38:89:e1:33:81:17:2c:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7F:83:0D:AE:AA:2C:3B:D6:05:D2:B3:07:A9:4D:C2:1A:69:36:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yn-DDa6qLDvWBdKzB6lNwhppNig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:51:25:0e:46:54:cc:b2:9f:2c:3a:ac:16:0b:67:1d:55:22:
b0:d9:86:0c:e7:68:6c:a6:e0:db:ad:5d:5d:13:9a:8e:89:06:
b7:a5:a3:54:48:8d:87:e4:52:38:af:a1:77:32:c8:25:98:8e:
ca:9a:a6:87:24:38:f7:78:b5:b8:c6:a0:43:30:d1:3f:ed:43:
e3:80:4a:54:53:d9:d1:c3:8d:67:38:ea:d0:77:63:04:11:c9:
c9:d4:28:59:94:d6:9c:ec:eb:16:c3:b5:fb:cc:69:b5:e2:ab:
3a:93:ea:11:d6:5f:81:f2:a2:4a:97:37:4a:86:79:c2:f8:12:
d2:a6:3a:ff:0d:b1:ec:38:a6:d9:ba:6a:c0:78:f6:5f:b5:42:
d4:b3:fc:e1:fa:5b:9a:5d:43:e5:ff:a3:52:35:77:79:0a:53:
33:e0:44:ae:16:0a:8f:70:f4:31:96:79:d6:48:ac:00:52:36:
37:96:81:9e:0d:aa:dd:fc:aa:d0:79:3a:36:a9:66:f5:df:5e:
03:9e:e4:09:aa:88:30:33:ac:fb:3c:03:25:05:49:6c:3e:75:
f1:a3:15:7a:0e:3e:ad:0a:d0:94:9f:7a:e0:83:de:ee:4f:35:
26:99:b0:96:80:58:a1:a8:1b:dc:2d:d7:54:55:15:c9:b4:30:
7a:b9:98:b3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdtOKg8Fj4ewZqobQVgRyScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEwMjIxMDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTdmODMwZGFlYWEyYzNiZDYwNWQyYjMwN2E5NGRjMjFhNjkzNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaFRGYQlE1SCLMCbVOHWJnsxPHes
F+IiMKG5l1a/5H5qtfLfX83lEAFqMPqlcGyds+vHGAkkP2zIZZePh5lpVrKRllS/
kg/DUZMvDck5W2FPXeoM4vbQ5xc9StTKhADB6GEE+tbIDtNzx42k08EgSulwEGNP
d4xPvDpZnVX9kwsd6wngctSgqM5GshJsNCljBlK4/mmGy6KA8slBqHB+d679XwT8
XKY4dhMYZSN+HP10QeVCtoR/mEa5LRK7H0SCPfiAbNl92r9JBeejXNteoht+hsvI
tYrvJvTcOiMcuWdta9eIgrGif5nOBSDalHrXXk5UrkY10ziJ4TOBFyxZZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMp/gw2uqiw71gXSswepTcIaaTYoMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveW4tRERhNnFMRHZXQmRLekI2bE53aHBwTmlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAChRJQ5GVMyynyw6rBYL
Zx1VIrDZhgznaGym4NutXV0Tmo6JBrelo1RIjYfkUjivoXcyyCWYjsqapockOPd4
tbjGoEMw0T/tQ+OASlRT2dHDjWc46tB3YwQRycnUKFmU1pzs6xbDtfvMabXiqzqT
6hHWX4HyokqXN0qGecL4EtKmOv8Nsew4ptm6asB49l+1QtSz/OH6W5pdQ+X/o1I1
d3kKUzPgRK4WCo9w9DGWedZIrABSNjeWgZ4Nqt38qtB5OjapZvXfXgOe5AmqiDAz
rPs8AyUFSWw+dfGjFXoOPq0K0JSfeuCD3u5PNSaZsJaAWKGoG9wt11RVFcm0MHq5
mLM=
-----END CERTIFICATE-----
Generated at Thu May 1 05:00:06 2025 by rpki-client