Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yqreD2B3SdFamn6EvfmhUSBRLM0.roa
File: yqreD2B3SdFamn6EvfmhUSBRLM0.roa (raw, json)
Hash identifier: 9BjNGvurAQ6J6BLpdTahzEY1nipXtYJJ0yVPS4f1K1c=
Subject key identifier: CA:AA:DE:0F:60:77:49:D1:5A:9A:7E:84:BD:F9:A1:51:20:51:2C:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018944E058BE41A58E8BD0210C8A668A519F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yqreD2B3SdFamn6EvfmhUSBRLM0.roa
Signing time: Tue 11 Jul 2023 12:15:00 +0000
ROA not before: Tue 11 Jul 2023 12:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:e0:58:be:41:a5:8e:8b:d0:21:0c:8a:66:8a:51:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 12:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caaade0f607749d15a9a7e84bdf9a15120512ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b7:4d:eb:48:f3:5a:e6:65:06:4e:ed:4e:39:
84:a7:4a:61:05:bf:46:c0:d1:59:0c:d5:5e:0c:1e:
c8:de:19:e6:a9:d8:0f:3c:b0:f2:df:54:5b:86:f4:
41:51:28:b9:98:80:81:45:df:cc:d9:71:8d:fc:52:
5f:a8:18:06:29:ba:ca:3e:09:23:0d:2b:c1:88:e3:
09:a4:df:49:59:61:10:33:ee:7b:91:0b:88:56:d4:
45:2c:01:26:48:94:a1:dc:1f:25:d6:1d:44:2c:54:
8d:11:04:c1:df:58:82:56:de:33:6c:2e:24:a1:7d:
77:2f:41:13:bc:7d:bb:cc:15:02:53:78:15:41:b8:
a8:03:f2:b7:47:98:ab:30:43:fd:00:9c:df:e0:c0:
98:00:fb:64:22:6e:65:11:98:d8:8a:0a:ac:cf:3f:
4d:68:0b:79:77:73:c5:25:42:ae:75:d7:5a:ed:8d:
3a:94:6c:9e:b6:6e:6d:14:d0:51:f1:97:24:61:81:
51:a0:6b:a8:8d:91:70:15:12:2a:93:90:48:31:02:
2d:38:95:14:88:a6:da:fe:d9:3a:4e:21:c1:e9:d8:
fe:59:58:fc:1d:76:90:b8:f0:c5:24:40:fc:42:4e:
81:71:88:f9:ab:28:a2:e3:c1:28:ad:87:84:87:b3:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AA:DE:0F:60:77:49:D1:5A:9A:7E:84:BD:F9:A1:51:20:51:2C:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yqreD2B3SdFamn6EvfmhUSBRLM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:ed:4f:cc:75:10:2f:8e:01:66:17:33:ac:14:36:2c:25:4c:
06:fd:8f:15:d5:96:e5:c4:22:3b:f4:2f:cf:fe:39:26:51:7e:
5a:26:a8:0f:41:6a:6e:03:94:d0:77:9b:ee:1b:e1:a0:d2:2b:
11:37:fa:92:70:ca:32:0f:76:d1:8a:ea:90:dd:2e:b5:2a:db:
39:d0:47:09:ad:32:99:87:01:bd:5c:b8:d4:00:c1:82:26:14:
05:35:2e:dd:f5:af:f9:e0:b8:d3:90:8e:ed:ac:e3:e1:7c:ae:
5d:2f:a0:bf:e3:29:11:be:f4:8a:50:8e:a2:43:7e:ed:ed:7d:
03:c4:06:bc:cf:59:14:ba:0f:fc:49:be:8a:32:e6:27:69:ad:
ff:9c:ac:e6:16:f0:d2:3b:f7:8b:3f:fc:9a:ab:97:13:bc:4c:
cc:c5:08:47:b3:f6:12:81:3b:04:46:de:fd:ce:28:d6:eb:95:
b2:43:30:a9:d4:7e:d1:4f:cf:77:41:6d:8f:98:dc:67:c6:1d:
f2:c2:07:45:2c:fb:ae:7b:0d:e4:b0:4b:24:10:c6:a2:af:2f:
e9:4d:3b:a5:37:a7:fd:9e:a5:81:e6:9d:53:78:4d:00:eb:ba:
ab:37:9f:f0:12:85:cf:9e:07:d4:2d:e3:18:b9:35:ec:62:1f:
53:1d:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:47:14 2025 by rpki-client