Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yxZeqB9xvPw_ODHTqcPreYwwXaM.roa
File: yxZeqB9xvPw_ODHTqcPreYwwXaM.roa (raw, json)
Hash identifier: Zm8Z6laF8pHtbr/4LK6LnpFZ+4LdD9CnGi2t1N7EYvY=
Subject key identifier: CB:16:5E:A8:1F:71:BC:FC:3F:38:31:D3:A9:C3:EB:79:8C:30:5D:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826E5C5E6D195533D742CB46C5798BCD1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yxZeqB9xvPw_ODHTqcPreYwwXaM.roa
Signing time: Fri 05 Aug 2022 14:15:23 +0000
ROA not before: Fri 05 Aug 2022 14:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6e:5c:5e:6d:19:55:33:d7:42:cb:46:c5:79:8b:cd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 14:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb165ea81f71bcfc3f3831d3a9c3eb798c305da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:59:5a:4c:8b:6f:23:51:3b:49:e7:56:3d:73:
39:b6:25:d7:ff:92:e8:30:16:d4:c5:25:90:c6:0f:
9d:18:8b:89:2c:6e:10:50:6a:5f:ba:fc:84:2d:dc:
fd:24:f3:da:65:82:06:b8:57:11:59:60:5f:81:e3:
f2:8f:9d:fe:0b:3b:d4:5b:7a:1e:6f:15:7a:0b:84:
ad:7d:2a:d2:65:9e:03:f5:e5:9e:95:ae:3c:59:4e:
97:8b:aa:6b:91:cc:5f:eb:49:7f:18:26:53:ba:b3:
fc:a7:f7:06:d6:44:c8:d5:29:3b:6d:8d:a2:10:b0:
25:31:31:62:68:ca:49:2b:2f:70:a9:4f:28:9e:d6:
7e:c7:59:a9:d6:8c:58:31:22:dd:ab:b0:49:9b:c8:
51:fb:4b:7e:2b:dd:da:e8:01:ad:e3:a7:d9:5b:d9:
c5:38:37:53:80:f3:ed:ac:da:86:50:4e:fd:95:0a:
47:4d:8d:e1:39:14:0b:de:62:5a:24:3c:72:5d:db:
a1:d2:ee:6b:60:e9:62:57:23:da:d2:37:c4:52:c2:
d1:5f:6c:03:d4:d2:26:b5:35:5c:32:0f:fb:e6:61:
f5:c6:0e:b0:a0:ae:e3:70:94:99:f5:7a:b5:0e:67:
dd:16:f5:48:63:39:9d:8c:4c:5f:3f:c2:a4:93:e5:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:5E:A8:1F:71:BC:FC:3F:38:31:D3:A9:C3:EB:79:8C:30:5D:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yxZeqB9xvPw_ODHTqcPreYwwXaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:7d:75:26:09:f5:5c:c8:f8:1b:3f:61:d5:14:55:45:46:d0:
1b:f3:b8:4d:59:82:3b:d2:9e:28:ed:ce:b9:c1:ca:22:0b:42:
2a:30:73:75:01:12:0e:eb:09:9e:0e:ac:7a:52:d8:a8:1b:61:
49:0e:3c:aa:5b:13:b7:b4:ae:85:dd:6f:27:6e:ba:9e:01:ad:
88:38:cd:e7:e0:5c:01:77:cd:d9:9d:86:e3:89:ea:21:d4:e4:
f6:c3:e8:02:39:08:76:0d:83:93:ef:a0:e1:0c:8e:df:56:7b:
29:cd:5d:50:90:dc:48:52:94:9b:4d:8c:01:28:0c:1d:6a:22:
fd:06:db:8f:d2:30:95:33:3f:78:46:4d:ed:fd:1f:69:3c:20:
bd:ed:7b:ae:82:4d:9d:31:05:fd:48:80:1e:5d:ac:03:c3:bd:
e7:b3:83:c7:ba:38:ec:3e:d1:40:a6:c2:e9:72:d8:00:f5:c1:
fe:9c:85:12:2e:52:ce:05:b6:56:6e:21:dd:cc:da:e2:aa:78:
b0:ee:b1:51:f2:03:91:74:12:2c:07:00:78:e5:70:b2:db:d1:
c0:2b:4c:09:e6:ee:a9:2c:74:e8:02:2c:61:d4:c9:85:34:e7:
33:db:a1:31:16:31:18:1c:8f:f5:d9:fb:e1:e8:73:14:86:df:
a8:8e:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:20:49 2025 by rpki-client