Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ysK4qQ_XldVcxa42oKN5lyZOqqc.roa
File: ysK4qQ_XldVcxa42oKN5lyZOqqc.roa (raw, json)
Hash identifier: tyoqRbIHhKmUtq5iBXyUq/9WzDtIkNS3kFDJ7Xip5gg=
Subject key identifier: CA:C2:B8:A9:0F:D7:95:D5:5C:C5:AE:36:A0:A3:79:97:26:4E:AA:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E59F1E18154BD2AA4582AEF5C45E42B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ysK4qQ_XldVcxa42oKN5lyZOqqc.roa
Signing time: Mon 17 Oct 2022 11:05:53 +0000
ROA not before: Mon 17 Oct 2022 11:05:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:e59e:5cd0/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:9f:1e:18:15:4b:d2:aa:45:82:ae:f5:c4:5e:42:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 17 11:05:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cac2b8a90fd795d55cc5ae36a0a37997264eaaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:52:fe:f3:a1:cf:b5:39:18:cf:31:07:79:
49:8b:fa:2a:bb:76:10:13:10:b3:bf:ff:d1:35:d1:
13:03:54:2a:7c:94:4d:d2:54:56:10:4b:d0:e8:15:
9f:61:e9:f5:d2:c8:21:b4:db:c4:0b:7e:38:33:da:
47:10:f9:06:0f:b0:fc:cc:76:88:21:d4:3a:f5:4f:
c5:fa:c1:ad:7e:9b:27:43:e7:68:d5:ea:a4:85:26:
4b:9d:77:bf:31:4d:d6:91:b3:aa:55:e0:9d:04:95:
27:98:cf:a5:9d:7a:39:c6:90:37:9c:6e:70:60:2c:
9e:2b:6e:9e:84:38:4c:c4:39:8f:ab:25:02:67:34:
7f:87:47:5a:32:f9:b8:08:8d:aa:e9:23:25:a5:4b:
d7:dd:48:f0:36:9e:b5:47:a7:83:36:f4:9d:44:94:
4a:2e:e4:c8:fe:7f:25:f8:97:56:78:d3:0d:1d:c0:
36:79:16:72:c9:e0:f2:47:cc:88:2b:8b:9e:0f:83:
ba:8e:ae:2e:85:5c:3a:e0:2e:42:dc:6e:d5:1d:c5:
3f:b6:f9:fc:a3:7c:03:6f:b0:22:ea:0e:0f:13:a0:
c0:47:b5:bf:f1:06:4e:ba:70:1b:9a:1d:cd:2a:ad:
18:0b:df:db:c9:bb:c7:7f:fe:19:6f:c3:d1:75:9c:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C2:B8:A9:0F:D7:95:D5:5C:C5:AE:36:A0:A3:79:97:26:4E:AA:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ysK4qQ_XldVcxa42oKN5lyZOqqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:9c:e3:31:fe:d3:63:ba:a0:7e:44:99:48:35:52:10:c3:de:
9d:85:64:95:34:c4:c5:e1:0f:ca:b1:dc:6e:be:1f:76:30:40:
f5:86:75:21:0b:28:84:80:2c:97:f1:da:be:9e:5f:5a:0c:86:
e0:66:ef:15:bb:67:e9:c4:eb:8b:e0:f5:48:ae:51:ca:44:58:
9f:e0:e7:a2:c6:8f:17:3f:aa:e7:ef:d2:6c:7c:45:3c:bb:2f:
3a:60:ae:a4:90:f2:d3:46:33:d0:8c:6f:98:b8:f0:e3:f4:0e:
3e:b4:be:a6:b4:73:96:b4:da:7a:db:c2:b9:2c:2e:a4:c6:2e:
8a:04:f0:59:16:c4:fe:35:cd:d9:1e:df:5d:14:a6:06:d7:01:
7b:1f:71:f5:7f:33:59:e2:2d:a7:11:69:35:15:4b:0d:c9:34:
2f:02:88:10:4e:0b:fa:d3:5e:31:27:24:6d:e2:c9:6c:a8:83:
3b:52:b8:dd:d7:ef:7a:04:04:bb:e6:1f:7b:c4:5d:b1:35:53:
8d:6b:a4:4f:58:a0:80:57:cb:e6:4a:7c:0b:c2:61:39:dd:50:
39:a2:14:55:ba:6b:dc:8e:1b:1c:e9:9d:d2:5c:6a:8b:6f:e5:
6c:3f:05:c2:39:cf:25:c7:34:be:f4:b1:2b:4b:c6:3d:c0:06:
0c:0e:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:30:59 2025 by rpki-client