Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yq6XVoh60v7XfcJsgCiTOR9aN4Y.roa
File: yq6XVoh60v7XfcJsgCiTOR9aN4Y.roa (raw, json)
Hash identifier: bL+4nb7TUWePULbFFDeVvIKDWNDE5V5aXQr/FSYYo8w=
Subject key identifier: CA:AE:97:56:88:7A:D2:FE:D7:7D:C2:6C:80:28:93:39:1F:5A:37:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018272A6154E626BE3205803D4587E2FDFD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yq6XVoh60v7XfcJsgCiTOR9aN4Y.roa
Signing time: Sat 06 Aug 2022 10:14:23 +0000
ROA not before: Sat 06 Aug 2022 10:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:72:a6:15:4e:62:6b:e3:20:58:03:d4:58:7e:2f:df:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 10:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=caae9756887ad2fed77dc26c802893391f5a3786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:5e:d2:82:20:33:68:8f:43:61:e9:71:22:
80:e7:c6:1d:c2:1d:44:42:2c:ca:72:5c:01:ea:a2:
cb:5f:1c:32:0b:62:df:c1:de:f9:26:63:80:db:9d:
49:f6:f3:09:a5:e1:97:56:67:79:fb:65:c0:59:16:
e3:1c:1f:5a:c1:54:3f:d8:59:f0:79:a2:a2:32:b7:
8d:b8:71:26:ba:58:c6:75:9f:2d:75:e9:b6:3f:4d:
4c:7e:af:0a:8b:d1:81:ac:47:11:b3:a3:53:60:e0:
39:b7:5f:e0:84:86:4e:fb:c3:65:19:30:3d:b3:a9:
51:69:64:70:d1:72:7e:bb:e8:f4:e7:c0:9e:13:eb:
4a:5b:6d:08:72:96:56:1c:ec:b3:6f:7e:bd:2c:65:
25:ab:04:ba:7d:81:cc:d4:17:01:09:6a:c1:4a:53:
bb:37:c0:15:3b:09:ff:40:33:85:f7:e6:3e:8a:9b:
7a:f7:e6:30:5a:6e:29:dd:19:2f:47:5f:43:a5:12:
c9:69:bf:bb:95:dd:0d:1a:00:58:89:9f:2c:9e:50:
2e:2d:17:87:f1:74:58:6b:11:06:70:1c:fd:10:45:
3e:87:25:1d:7b:54:8e:35:7b:cd:a5:53:7a:a3:97:
78:7a:bb:d3:7e:0f:97:d0:21:53:e4:5f:93:1b:78:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AE:97:56:88:7A:D2:FE:D7:7D:C2:6C:80:28:93:39:1F:5A:37:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yq6XVoh60v7XfcJsgCiTOR9aN4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:73:10:16:a2:32:95:93:fe:4c:a1:50:c5:02:a6:6e:5d:2f:
17:2c:1a:a5:0f:50:2a:53:5e:d3:4a:33:ae:b7:c8:29:4f:e1:
78:30:83:f0:98:18:76:a2:18:83:f9:6a:17:4d:a4:4a:7b:d0:
27:4d:fe:f7:f8:c0:35:3d:d7:b1:c7:5c:cc:0a:b4:f8:4a:7e:
81:98:0a:ff:95:22:39:e9:a3:6e:ee:df:a1:16:8e:78:f2:de:
48:21:00:85:3f:b0:c2:d0:85:4c:66:fe:e6:c1:24:17:1b:85:
43:a0:2e:96:1a:3a:29:6e:bf:32:b8:65:6a:3d:25:1f:ea:66:
fa:5a:ca:ae:28:60:0b:f7:22:16:ab:c4:9b:53:61:62:2c:33:
d9:3d:b6:e9:a2:12:da:63:0b:d8:fb:fd:0e:c3:ab:5e:94:c4:
81:a3:85:4c:be:23:20:5a:02:51:3a:08:f0:87:cf:99:b1:67:
4a:b9:34:7c:c9:d3:19:9d:df:7c:32:a2:16:3c:1b:df:e1:b4:
28:34:9a:61:92:9a:6d:fc:b8:ac:a9:10:f0:50:be:8d:c0:ff:
43:80:63:e4:29:04:ab:a4:df:3e:6b:f6:b9:67:3f:f1:eb:81:
9b:7b:b0:fe:96:1b:e0:12:3b:09:18:a5:64:3d:e4:16:5f:6f:
4b:9a:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:39:37 2025 by rpki-client