Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ywyBDgNF62UzhG9YmGue_Uu8pSo.roa
File: ywyBDgNF62UzhG9YmGue_Uu8pSo.roa (raw, json)
Hash identifier: 8holZ0m8+P94CNMNrJN4vS4lJZyaBn1Xq8T97OE7DV4=
Subject key identifier: CB:0C:81:0E:03:45:EB:65:33:84:6F:58:98:6B:9E:FD:4B:BC:A5:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018523A5EE9DD90EDD794E6C41894B0D1899
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ywyBDgNF62UzhG9YmGue_Uu8pSo.roa
Signing time: Sun 18 Dec 2022 05:12:34 +0000
ROA not before: Sun 18 Dec 2022 05:12:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:23:a5:ee:9d:d9:0e:dd:79:4e:6c:41:89:4b:0d:18:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 05:12:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb0c810e0345eb6533846f58986b9efd4bbca52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:e9:0b:36:d8:38:4d:b9:12:99:c6:b8:80:
66:8d:03:89:a8:12:08:51:b4:5c:3f:c0:24:8c:14:
57:51:5f:19:79:ff:9a:8b:13:92:79:3c:15:8d:18:
2a:91:6d:a5:5e:74:31:24:77:ef:bb:e7:9d:e5:f6:
ef:4f:6f:ef:49:98:c9:9b:5b:a6:d9:79:39:20:c9:
8e:80:a7:b2:52:93:bf:03:9b:20:31:08:42:c5:d2:
4d:b1:e8:9f:36:ee:3a:82:91:f1:c4:81:1a:f3:e5:
f3:b3:c8:6b:45:f6:de:84:32:23:de:08:47:06:d7:
48:fd:3f:ce:fc:64:6a:54:7d:9e:2f:ca:70:ff:0b:
fa:3e:9e:66:26:53:5a:80:52:ef:90:87:ca:f2:32:
67:3f:e7:f0:d4:f0:3b:cb:da:eb:f3:2e:34:38:66:
48:72:2d:27:ea:ba:2c:c6:50:8b:24:91:6e:91:ea:
6c:1f:fa:30:ea:a1:9e:4e:f6:6b:31:50:0e:1b:6c:
a9:42:f7:ff:31:54:52:c3:d6:7d:f6:1c:68:64:f8:
2f:10:69:16:63:97:c4:89:e2:23:00:25:d1:a4:35:
fb:5f:12:b2:24:da:93:f2:8e:c7:e8:e2:51:f3:f5:
29:56:12:e4:77:95:22:ee:c5:c9:46:34:02:f5:5e:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0C:81:0E:03:45:EB:65:33:84:6F:58:98:6B:9E:FD:4B:BC:A5:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ywyBDgNF62UzhG9YmGue_Uu8pSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:a9:7d:17:5a:2f:b3:68:a3:ab:4e:7f:b4:9b:58:4c:bf:93:
3a:c9:53:3b:51:f9:22:93:0d:8f:fa:24:d1:fe:59:e9:e9:11:
fc:c2:62:10:c1:35:6b:d6:30:0b:5f:b3:4e:af:b8:b1:ce:fb:
26:26:f5:94:0e:27:d0:2a:ec:eb:1f:e4:17:a2:cf:1c:5b:9b:
35:c0:ef:40:ed:77:fa:f3:80:bd:4f:9b:c2:23:a2:78:b5:e5:
fb:1e:cc:bc:b3:c9:49:cf:a9:23:34:d5:3c:62:bd:71:6d:06:
c4:9f:0f:2b:2c:dd:28:72:17:2c:0c:90:4f:72:42:1d:67:27:
80:74:1c:a8:31:b3:1d:f1:ed:f8:df:36:a5:fa:df:3d:c0:95:
d6:ec:14:6b:54:c2:b9:b9:e6:d8:40:50:80:7c:61:e4:35:52:
e8:53:1a:da:50:ab:0c:ed:8a:16:b1:36:7b:21:f5:53:89:28:
82:78:a6:ef:5f:58:5a:fa:30:db:73:e0:f3:29:8e:2d:88:43:
d1:0b:78:bc:62:63:e5:6e:f7:1f:60:67:e0:7b:c7:e5:62:19:
92:62:f3:1c:ef:98:6d:19:d7:3a:da:d3:42:da:b4:e1:9d:eb:
88:55:6d:65:4c:2b:6e:51:6e:c0:10:03:bb:87:50:50:de:97:
43:b8:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:52:24 2025 by rpki-client