Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yua7AfSipQgATvnoymWlWgjA_Gk.roa
File: yua7AfSipQgATvnoymWlWgjA_Gk.roa (raw, json)
Hash identifier: yUUec1pssHcY73TaYx1OjmMlK0Ng3IJh+0yTuxVLe5M=
Subject key identifier: CA:E6:BB:01:F4:A2:A5:08:00:4E:F9:E8:CA:65:A5:5A:08:C0:FC:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852600589E76B88A4CC3B2A492915D4BAF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yua7AfSipQgATvnoymWlWgjA_Gk.roa
Signing time: Sun 18 Dec 2022 16:10:34 +0000
ROA not before: Sun 18 Dec 2022 16:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:26:00:58:9e:76:b8:8a:4c:c3:b2:a4:92:91:5d:4b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 16:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cae6bb01f4a2a508004ef9e8ca65a55a08c0fc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:31:bf:80:1d:dc:0b:c5:45:36:93:d5:01:07:
2d:95:2b:7e:75:d9:af:d5:c5:6b:64:81:bf:ce:b3:
00:e3:ef:68:e5:5f:2d:80:36:33:6f:26:49:36:cb:
7e:03:ff:70:bb:de:67:41:58:56:70:c6:7f:93:9f:
ac:b7:1c:f9:f5:22:23:f8:d4:3e:16:9f:cf:79:fb:
ab:1b:3c:e5:0c:38:30:04:83:87:cf:95:71:8b:b2:
56:87:cd:45:5a:76:7b:ef:0a:df:e0:f3:4f:df:2f:
d6:de:4d:20:ca:71:b9:8b:c6:16:11:61:41:ca:bc:
44:ab:f1:e7:41:1d:62:3c:8f:78:20:a8:d2:b0:c9:
3e:b7:fa:43:36:0f:6a:c9:26:e3:4e:f2:e6:a2:75:
48:22:67:ec:79:d9:ec:d1:4a:28:ba:02:2d:36:96:
56:92:9e:d3:dc:05:2b:35:12:76:5e:5d:91:53:62:
ae:12:c7:d8:12:bb:5c:d2:6c:e1:68:90:63:94:1a:
ab:fb:4d:9e:1a:66:44:01:e1:5c:c3:f8:cb:29:f9:
57:b7:22:b8:27:48:45:72:08:ad:8b:2e:d5:15:cd:
62:df:f4:88:94:b5:b2:d9:0c:2b:97:f9:0e:46:ca:
9c:73:33:4b:94:3a:36:10:a0:b5:62:3a:54:ad:fb:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E6:BB:01:F4:A2:A5:08:00:4E:F9:E8:CA:65:A5:5A:08:C0:FC:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yua7AfSipQgATvnoymWlWgjA_Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:0e:20:d4:db:b1:f6:4d:27:65:d3:45:75:29:0a:bc:55:4d:
f7:ae:07:69:e8:26:4d:49:cb:02:05:ae:40:0f:37:d0:8f:9e:
2b:9b:69:05:30:6d:e9:6a:bc:d7:73:f9:33:ff:e0:af:15:2c:
6c:dd:c2:67:bc:3e:a4:16:d2:d8:60:c6:f3:ea:a5:ca:1a:9f:
37:74:24:57:4f:90:02:bb:cb:b3:14:ed:d5:c9:c6:f7:2f:75:
c8:03:7b:58:d7:d9:f0:9c:8f:ab:37:07:cb:7b:9d:41:71:1c:
46:85:05:85:77:17:d2:d5:22:1c:74:0c:90:e8:76:69:d0:a5:
aa:9c:d8:d1:f6:21:35:48:05:e6:33:46:75:fb:70:9c:ad:23:
10:46:f5:5f:91:49:c1:a9:02:1f:94:2c:b6:c7:46:71:e4:06:
ba:e8:59:62:3a:9f:12:8c:c7:1c:d4:05:ab:6b:59:1d:2a:a0:
ae:0f:ed:60:76:57:db:33:f0:d5:be:84:8d:ca:25:d3:67:ed:
b2:95:fd:cc:c8:e6:a0:d7:03:63:d3:1b:91:99:f3:14:7e:c5:
88:17:f4:eb:8a:54:40:0c:c5:5e:80:ad:bc:cf:3f:56:6e:88:
93:b4:29:f6:9c:89:dd:80:74:da:98:9c:a2:44:82:34:58:8c:
ac:67:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:27:06 2025 by rpki-client