Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yvOCh3PovbzGux0dHsF1A4sL_cI.roa
File: yvOCh3PovbzGux0dHsF1A4sL_cI.roa (raw, json)
Hash identifier: cUOHH7DyojaPqTxmKHmW4Wp/esb+EJ8dOeimg6Fh33c=
Subject key identifier: CA:F3:82:87:73:E8:BD:BC:C6:BB:1D:1D:1E:C1:75:03:8B:0B:FD:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AFC7A31BF051C0B853B651EA173E363F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yvOCh3PovbzGux0dHsF1A4sL_cI.roa
Signing time: Sun 05 Mar 2023 03:19:01 +0000
ROA not before: Sun 05 Mar 2023 03:19:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:af:c7:a3:1b:f0:51:c0:b8:53:b6:51:ea:17:3e:36:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 03:19:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caf3828773e8bdbcc6bb1d1d1ec175038b0bfdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:25:4f:a2:60:ac:ed:8a:f0:4d:e8:39:38:
20:93:6f:43:de:87:d1:a0:49:6d:b2:c4:46:55:b7:
92:85:ee:d3:0a:68:45:24:9c:75:56:60:af:da:b6:
df:0d:6b:24:05:16:59:e0:a2:b2:05:e6:fb:40:ed:
cc:31:28:b2:74:8b:a4:ef:7c:cd:1b:ef:98:18:cf:
3c:b8:90:df:7f:5e:24:8b:be:73:d4:27:c9:67:57:
ef:e8:80:52:82:47:dc:51:60:a8:af:14:b8:27:3a:
6a:35:d9:26:40:35:86:ee:04:69:cb:43:83:c8:b2:
d4:f8:00:d1:e6:2d:dc:ec:06:15:ca:30:05:fa:7f:
82:dc:4d:47:0c:3c:3b:8e:96:c8:43:f2:7b:9d:5e:
d6:cf:4e:8b:bc:4d:83:78:53:e1:d9:f0:9b:db:63:
09:1c:b2:28:f5:c5:bc:1e:6d:cb:e9:7b:df:78:55:
78:ff:bd:49:66:90:6e:f8:da:dc:17:cb:c3:84:c8:
30:bd:76:3c:e6:6d:d3:7c:65:d4:70:50:cd:1c:21:
33:04:cb:12:41:06:6b:8e:60:9d:db:36:d6:4f:6e:
57:7c:94:ac:26:59:4a:f3:ec:15:8e:78:2b:84:ad:
be:dd:47:f7:98:0d:06:12:31:e0:07:40:9a:ab:f8:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F3:82:87:73:E8:BD:BC:C6:BB:1D:1D:1E:C1:75:03:8B:0B:FD:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yvOCh3PovbzGux0dHsF1A4sL_cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:12:cc:d2:c9:b1:ad:eb:a5:7e:92:3e:ae:93:12:6e:4a:61:
9d:72:cf:5f:e6:7b:d2:6f:62:ec:35:d2:03:6e:9f:dc:77:c6:
7c:d6:52:3b:74:45:8d:b6:61:c6:e7:36:6c:52:87:c3:4f:0f:
ba:bc:85:a0:e6:e2:77:1a:a3:15:2d:d4:86:69:fc:76:34:f9:
d4:41:2b:ea:e1:16:6e:78:63:05:f2:86:de:27:5e:a0:28:1e:
f9:0f:bd:5b:ad:a1:ec:f3:c6:90:48:47:1a:87:91:41:5b:5a:
c5:fa:10:bf:2c:26:96:40:53:16:b6:a0:d2:80:04:d9:c6:be:
a5:dc:5d:0f:01:76:06:60:25:88:48:66:29:61:31:fa:cf:bd:
68:2a:66:0c:c0:4b:66:0d:23:9f:c5:4d:d6:06:10:85:bc:9b:
cb:43:ed:14:db:af:b9:c7:d3:65:04:30:7e:f1:48:56:9e:87:
d7:77:12:40:6f:aa:1c:cf:45:76:8e:b0:21:55:fe:7d:1b:2b:
2d:5b:2e:de:4b:43:fe:42:e5:66:c8:32:8a:4d:9f:c4:fd:ff:
b0:69:6b:11:46:a7:a1:9a:71:95:da:9e:dc:42:24:e0:74:04:
df:2a:fd:d4:50:f6:1a:b0:8b:c1:7e:22:a1:4d:e5:dc:2c:03:
83:20:58:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:01:23 2025 by rpki-client