Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yur9gkluwgVZ1kamwD4HA4m7Ing.roa
File: yur9gkluwgVZ1kamwD4HA4m7Ing.roa (raw, json)
Hash identifier: 0v0EoQyNzqUEgxQCgwm5IafcfKAMzBpCtXcns+W35ZU=
Subject key identifier: CA:EA:FD:82:49:6E:C2:05:59:D6:46:A6:C0:3E:07:03:89:BB:22:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018703749EFC21173FEE16ACD927E0FCFB03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yur9gkluwgVZ1kamwD4HA4m7Ing.roa
Signing time: Tue 21 Mar 2023 09:16:27 +0000
ROA not before: Tue 21 Mar 2023 09:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:74:9e:fc:21:17:3f:ee:16:ac:d9:27:e0:fc:fb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 09:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caeafd82496ec20559d646a6c03e070389bb2278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:1d:12:90:e2:22:6d:07:66:77:75:dc:36:
af:81:b1:cc:c5:a1:0c:0c:59:ec:da:db:ba:4b:6b:
48:96:63:4c:92:35:69:23:a1:f7:9c:a3:c7:5a:eb:
c7:83:b9:fe:12:4d:76:b2:e1:6f:76:21:38:1c:22:
77:34:35:c2:f7:90:50:56:b7:c8:f1:86:06:b2:3a:
02:69:ed:c2:9f:b6:b4:c2:d9:fa:33:3f:2f:da:03:
45:52:e8:02:bb:4b:a6:a6:a9:8a:a8:24:6b:1f:cf:
68:87:22:31:e4:33:44:6c:9b:d2:b8:cb:5f:06:f3:
a4:7c:17:23:cd:5a:39:f5:5a:7f:c7:ee:bc:82:fd:
ac:2e:4c:4c:8a:01:d2:00:3c:a5:9b:dd:c8:b1:4d:
01:c6:e1:c6:42:70:62:af:fb:a8:22:01:86:84:6d:
80:52:85:40:01:bb:81:57:1a:99:f3:76:f1:9c:23:
a5:19:d3:4d:db:6f:02:5f:4e:eb:ff:f3:5f:b8:92:
c8:90:7e:64:29:31:07:b3:dc:2d:f1:e7:e1:68:2d:
4e:1c:c1:a4:a5:74:ab:af:cf:59:2f:61:21:a5:90:
4b:3e:4e:34:bf:77:51:fd:cf:82:7b:f6:07:31:5f:
5d:f8:dc:69:ae:61:ef:19:e7:cc:23:90:73:82:08:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EA:FD:82:49:6E:C2:05:59:D6:46:A6:C0:3E:07:03:89:BB:22:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yur9gkluwgVZ1kamwD4HA4m7Ing.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:12:ee:e9:90:c3:0f:c5:6a:f8:f2:70:76:f7:14:b8:f2:b7:
cf:16:cb:7b:f4:91:10:be:ae:f9:4e:05:82:b6:13:69:ac:63:
29:f6:99:12:cf:92:4e:82:63:cd:b0:02:15:f5:a7:13:55:66:
14:ac:4c:f3:f7:87:45:2b:aa:fd:4b:3a:f0:40:10:77:88:11:
e5:cb:d1:23:1e:0e:e3:82:4a:6c:ed:9d:db:e7:b7:ca:44:78:
37:a7:5c:38:1b:0c:69:a8:bf:65:20:68:6c:5d:be:aa:18:1f:
03:ef:79:a4:d5:c4:50:1b:5d:4f:08:6c:8c:c3:13:82:97:11:
42:c9:68:ab:83:83:02:eb:35:75:84:94:11:3e:69:cd:57:31:
5d:3e:31:3c:3d:2a:24:80:78:e7:53:b2:fe:36:fa:8b:2d:1c:
78:33:63:b1:90:69:21:e1:1d:d2:01:75:7c:f3:8a:a3:08:24:
38:b5:86:35:18:13:4a:23:ee:1a:7b:5e:45:43:07:97:92:49:
73:36:22:19:91:e9:d1:25:fe:c3:03:bd:3d:6f:64:44:e3:64:
8b:46:e4:cc:a3:e5:fe:78:23:77:ea:4b:d6:66:3e:ef:66:02:
6a:82:c9:23:a6:d5:8f:bd:8b:5a:1c:27:96:66:93:50:d5:03:
36:0a:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:51:41 2025 by rpki-client