Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yrwDlvGpsXq-KqShCWt42exiX0I.roa
File: yrwDlvGpsXq-KqShCWt42exiX0I.roa (raw, json)
Hash identifier: wAZw8CBDI9EvzeyY5DjkmaPaeGoaf4G9gqxiDjfBWEw=
Subject key identifier: CA:BC:03:96:F1:A9:B1:7A:BE:2A:A4:A1:09:6B:78:D9:EC:62:5F:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F390EF0279EA205F9A3518A5DAFAF5D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yrwDlvGpsXq-KqShCWt42exiX0I.roa
Signing time: Sat 18 Mar 2023 07:13:27 +0000
ROA not before: Sat 18 Mar 2023 07:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:90:ef:02:79:ea:20:5f:9a:35:18:a5:da:fa:f5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 07:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cabc0396f1a9b17abe2aa4a1096b78d9ec625f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:5d:57:33:58:a6:b3:96:ae:0f:79:ec:9c:
71:d3:46:b5:c7:53:b5:0d:3a:0a:4b:c4:a8:f7:de:
2a:7b:62:86:e9:bf:89:ed:db:08:de:43:f3:0b:54:
54:85:c0:3e:fc:66:26:f0:32:cd:b2:3a:8e:55:b8:
a5:55:61:80:59:5f:a9:5e:ed:42:2d:97:a9:89:71:
5c:c3:87:33:98:5c:8d:0f:b4:75:86:40:14:97:72:
20:f3:e9:53:fa:68:80:3c:07:32:55:e1:f9:a8:9b:
ee:ca:0d:b3:44:8c:24:56:94:ac:89:32:14:09:a9:
c5:3b:82:0a:e8:21:56:81:52:c5:38:72:a0:80:bd:
9c:74:45:19:00:53:05:ba:1a:0e:b0:85:2c:c9:ee:
3f:f4:39:56:79:6f:23:8d:cc:06:b0:6b:ed:90:15:
c8:ea:77:59:99:b2:3b:60:e7:33:40:4f:1e:d8:56:
2c:36:6b:6f:05:dc:c4:82:ff:76:17:b9:68:1d:38:
16:5d:2b:50:2d:99:7d:26:19:8d:f5:bc:4b:90:8f:
14:3e:96:1d:2d:35:6a:6e:5a:a6:b4:4c:3e:ef:ec:
5a:47:c6:08:3b:38:14:a9:a5:9d:d1:d4:57:92:64:
62:ea:cf:07:cc:c3:54:23:0d:1b:9e:fd:b6:08:4e:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:03:96:F1:A9:B1:7A:BE:2A:A4:A1:09:6B:78:D9:EC:62:5F:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yrwDlvGpsXq-KqShCWt42exiX0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:45:63:9f:08:36:da:64:5d:77:9c:77:81:b3:82:a0:07:df:
d1:c1:21:ef:62:99:fd:81:9e:b2:f4:e6:2a:6a:f3:ab:18:98:
f6:4e:f1:66:98:55:f3:89:11:93:27:56:7f:fa:80:6f:19:16:
19:f8:07:80:ec:69:46:62:86:c9:61:3c:96:f5:90:ff:db:51:
51:3b:21:0d:7f:67:bc:7e:65:96:59:2c:02:58:1f:75:df:7f:
6b:dc:c6:4c:99:c8:92:23:bc:f3:98:6b:e8:cf:13:a9:22:47:
6b:17:df:ba:77:c1:d1:ca:17:cd:88:48:2b:fc:9d:b4:72:6c:
f1:f9:49:b8:90:9d:b8:ed:39:6f:8c:c9:a9:59:0e:b0:71:09:
2b:26:49:98:fc:1a:7e:c0:a3:6d:70:64:c7:56:f0:a9:a5:17:
28:81:14:93:4a:93:85:df:4e:27:5b:b4:56:36:83:6b:1c:96:
e3:b8:95:fc:a9:87:9e:fc:be:dc:c4:33:b3:00:96:aa:cb:98:
92:6d:4d:0b:30:38:dd:ef:7f:3c:7f:e4:63:26:d0:76:e7:20:
86:7b:dd:f4:dd:2e:8a:d0:cf:76:c1:fe:64:db:fe:aa:23:34:
e9:35:3a:c5:6f:86:c6:03:38:ac:10:25:21:d4:5d:e8:3b:f9:
e3:c6:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:12:26 2025 by rpki-client