Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ywE8_KnvygQMdwlkGET3w2iZTN8.roa
File: ywE8_KnvygQMdwlkGET3w2iZTN8.roa (raw, json)
Hash identifier: fHFE66IXrDTxfN8w65QYOC3SESev3JZ+SgMskl4s6ZA=
Subject key identifier: CB:01:3C:FC:A9:EF:CA:04:0C:77:09:64:18:44:F7:C3:68:99:4C:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F5131E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ywE8_KnvygQMdwlkGET3w2iZTN8.roa
Signing time: Thu 23 Jun 2022 23:16:58 +0000
ROA not before: Thu 23 Jun 2022 23:16:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2404463079 (0x8f5131e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 23 23:16:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb013cfca9efca040c7709641844f7c368994cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:77:a0:33:85:b1:1b:53:e5:c2:c9:d0:d6:
bd:2a:23:50:f8:3f:3e:db:9c:43:97:d5:1c:72:0e:
94:45:17:2f:92:64:19:01:2c:50:82:2b:7a:45:fb:
2d:63:f1:f6:1d:b1:75:de:dd:60:06:df:f1:81:f7:
82:87:e6:5f:ab:e9:9b:ec:cb:b5:1c:e7:8c:a4:0b:
c2:75:77:09:a8:8c:e8:51:2b:a4:1f:71:b8:00:9f:
90:a9:78:58:b4:46:88:37:af:fd:da:b3:2e:02:c7:
6e:8b:fa:b2:dc:07:00:c3:c3:58:7b:89:b2:be:eb:
d9:49:aa:f6:b6:33:b6:d7:27:e6:ff:13:99:f8:59:
d7:eb:04:f6:f6:77:e0:41:ec:26:07:29:d8:e4:f8:
a9:3c:47:4e:36:f1:7b:43:4e:14:0c:aa:27:24:e3:
a0:8f:e7:14:7c:ac:81:b4:2c:73:56:3a:8c:be:dd:
3e:ce:4b:d6:56:55:0b:e5:94:14:19:17:ff:b0:10:
77:3f:65:1c:92:c9:7f:55:ae:57:0f:e0:af:c5:7a:
35:01:ad:fa:e3:01:ae:e0:42:76:06:14:aa:a3:a1:
3c:2b:11:f7:2b:2c:90:e6:57:27:9e:e8:dc:af:8d:
b3:44:c9:e0:a3:44:2b:d7:65:1a:32:fc:09:ca:9e:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:3C:FC:A9:EF:CA:04:0C:77:09:64:18:44:F7:C3:68:99:4C:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ywE8_KnvygQMdwlkGET3w2iZTN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:30:a7:cb:58:46:27:6b:42:ee:f8:46:d2:81:a4:8e:a8:40:
d8:4f:28:9e:f1:73:63:2f:9b:62:cd:75:88:12:83:40:b2:31:
7d:d2:4f:58:1b:f6:2b:34:f4:f6:03:d6:1f:e8:fe:e4:7a:64:
57:be:b2:40:ee:47:21:3a:6f:2b:7a:d9:de:d6:85:b2:d1:df:
49:4f:39:04:3b:11:29:09:33:b0:78:31:a6:fc:fe:5c:76:e9:
e8:ec:bd:d1:d5:8f:c5:76:71:32:4b:75:4d:13:c9:52:49:c7:
da:ba:5d:95:ee:a8:ce:01:82:e2:58:0b:3b:6a:01:21:59:41:
09:ce:8d:79:77:0f:35:ca:a2:5b:97:15:45:1b:72:77:ab:94:
7c:7f:ad:6b:57:57:43:ac:99:ff:bb:f2:53:0c:aa:e5:38:cc:
b8:be:98:86:b1:f9:99:34:fa:f4:9b:8e:e8:be:16:bd:74:1f:
89:0e:96:a8:fa:a8:8b:33:29:36:2d:ee:b7:41:39:e9:88:cd:
07:26:14:53:76:67:c7:a7:14:9a:b2:ed:a6:59:37:46:4b:e3:
be:63:c1:ad:2c:02:d9:e3:e5:2a:b9:7a:29:e1:d1:96:24:80:
50:56:53:6a:87:34:d5:0f:8a:1d:19:be:ba:21:42:f6:bb:c6:
56:79:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:30:52 2025 by rpki-client