Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yp1U1K6yDrnUjD8l4AsXiwrJdoM.roa
File: yp1U1K6yDrnUjD8l4AsXiwrJdoM.roa (raw, json)
Hash identifier: /QoVKvGVlWdldqVWsgF3Ty8QYc/ET+EoyXauq4IH1sI=
Subject key identifier: CA:9D:54:D4:AE:B2:0E:B9:D4:8C:3F:25:E0:0B:17:8B:0A:C9:76:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FA9E08BD1C234DF2A0A8F6FD50454AEC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yp1U1K6yDrnUjD8l4AsXiwrJdoM.roa
Signing time: Tue 15 Aug 2023 19:13:28 +0000
ROA not before: Tue 15 Aug 2023 19:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fa:9e:08:bd:1c:23:4d:f2:a0:a8:f6:fd:50:45:4a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 19:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca9d54d4aeb20eb9d48c3f25e00b178b0ac97683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:d3:00:5b:c3:93:27:2c:8e:d5:ec:37:90:
e7:18:d1:61:e6:84:9f:46:1c:ba:fd:eb:1d:3c:a1:
4e:79:0c:a6:09:c1:ff:73:5b:cd:d7:e8:13:a3:26:
db:56:be:b6:9b:9c:31:06:78:da:b3:1a:f8:9f:31:
ff:d2:e1:ad:15:7d:23:90:95:69:19:05:49:05:1c:
61:f1:85:11:1d:09:d0:24:a0:22:6f:28:4a:3e:b0:
51:55:3a:02:26:8a:b7:82:97:1c:3e:b6:e3:a5:1e:
c9:1b:6d:da:66:e9:50:6e:59:5c:63:7c:ee:ec:b5:
db:95:b0:9a:bc:f3:75:01:e8:95:f1:a6:03:3f:da:
f2:c0:d3:90:17:c1:06:22:ee:d5:47:96:5e:1d:9e:
6e:25:7c:67:1a:b6:82:3a:2f:ca:5c:ac:c4:da:df:
76:0d:3e:d6:7e:13:9b:6d:1d:36:71:2a:ec:cc:21:
10:31:fa:28:57:c8:d9:9d:12:87:fb:99:bd:4d:78:
de:2e:e1:92:d0:ed:1a:aa:71:bc:54:40:45:05:23:
88:73:55:be:5a:a9:38:84:e3:b0:4a:30:56:9d:75:
e0:be:04:a5:52:2c:1b:5e:cf:6a:d6:f1:7f:4d:92:
a8:e4:c5:96:04:0c:92:b1:e5:06:55:49:a1:16:2a:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:54:D4:AE:B2:0E:B9:D4:8C:3F:25:E0:0B:17:8B:0A:C9:76:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yp1U1K6yDrnUjD8l4AsXiwrJdoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:10:b6:09:b1:d2:92:e9:e0:5f:fe:bc:55:bf:7c:98:2a:95:
2f:0b:ba:94:5a:88:85:6f:f5:2a:e8:4b:05:4b:9a:b7:40:d1:
ce:ea:bc:6c:c9:68:b1:25:50:96:b9:ca:3e:ec:ab:da:0c:00:
1d:6a:92:c5:b9:cf:33:8f:83:55:1d:33:6f:a7:fb:7f:18:8b:
83:7f:76:30:90:cc:8d:86:d0:e3:d3:c7:58:47:e8:17:d6:f4:
7a:8e:51:e1:20:d3:b1:f3:4d:b0:16:47:61:66:8a:50:e5:6c:
6f:29:e4:fb:c8:96:e1:32:2a:cc:78:22:66:d0:0d:26:0d:18:
1c:1b:d2:1a:99:1f:01:72:1b:40:60:8d:dc:c9:56:63:91:e1:
d1:fd:df:70:8c:2e:79:e7:ed:a0:ac:10:31:85:e0:58:6f:d0:
4e:1d:36:14:ce:17:e8:78:13:9d:b6:43:b0:c8:ab:3a:8e:ed:
bc:93:bb:d3:40:6a:be:70:0d:a3:f1:50:08:8b:8f:89:a6:24:
3a:b4:72:e6:5c:2f:a7:6f:ae:79:7c:db:7b:13:84:05:ce:2d:
1e:2c:c7:92:72:9a:74:d7:fa:45:91:32:e5:2f:ed:62:41:03:
71:13:06:0e:95:bd:b8:22:86:4f:e7:d5:65:09:d3:07:ad:dc:
a0:9e:c7:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYn6ngi9HCNN8qCo9v1QRUrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE1MTkxMzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTlkNTRkNGFlYjIwZWI5ZDQ4YzNmMjVlMDBiMTc4YjBhYzk3NjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM3TAFvDkycsjtXsN5DnGNFh5oSf
Rhy6/esdPKFOeQymCcH/c1vN1+gToybbVr62m5wxBnjasxr4nzH/0uGtFX0jkJVp
GQVJBRxh8YURHQnQJKAibyhKPrBRVToCJoq3gpccPrbjpR7JG23aZulQbllcY3zu
7LXblbCavPN1AeiV8aYDP9rywNOQF8EGIu7VR5ZeHZ5uJXxnGraCOi/KXKzE2t92
DT7WfhObbR02cSrszCEQMfooV8jZnRKH+5m9TXjeLuGS0O0aqnG8VEBFBSOIc1W+
Wqk4hOOwSjBWnXXgvgSlUiwbXs9q1vF/TZKo5MWWBAySseUGVUmhFipsMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMqdVNSusg651Iw/JeALF4sKyXaDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveXAxVTFLNnlEcm5VakQ4bDRBc1hpd3JKZG9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGAQtgmx0pLp4F/+vFW/
fJgqlS8LupRaiIVv9SroSwVLmrdA0c7qvGzJaLElUJa5yj7sq9oMAB1qksW5zzOP
g1UdM2+n+38Yi4N/djCQzI2G0OPTx1hH6BfW9HqOUeEg07HzTbAWR2FmilDlbG8p
5PvIluEyKsx4ImbQDSYNGBwb0hqZHwFyG0BgjdzJVmOR4dH933CMLnnn7aCsEDGF
4Fhv0E4dNhTOF+h4E522Q7DIqzqO7byTu9NAar5wDaPxUAiLj4mmJDq0cuZcL6dv
rnl823sThAXOLR4sx5JymnTX+kWRMuUv7WJBA3ETBg6Vvbgihk/n1WUJ0wet3KCe
x+o=
-----END CERTIFICATE-----
Generated at Sun May 4 00:15:30 2025 by rpki-client