Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yxlGbztQUWzgritqYlBe7kILYNE.roa
File: yxlGbztQUWzgritqYlBe7kILYNE.roa (raw, json)
Hash identifier: 1vOoSmBN4NL61yTL8JpzG2V6b9VMrDrWcYsjxjXM6xw=
Subject key identifier: CB:19:46:6F:3B:50:51:6C:E0:AE:2B:6A:62:50:5E:EE:42:0B:60:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183AE4A11A43998AB176DCB2E3A314B3254
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yxlGbztQUWzgritqYlBe7kILYNE.roa
Signing time: Thu 06 Oct 2022 17:13:53 +0000
ROA not before: Thu 06 Oct 2022 17:13:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:4a:11:a4:39:98:ab:17:6d:cb:2e:3a:31:4b:32:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 6 17:13:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb19466f3b50516ce0ae2b6a62505eee420b60d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:36:ae:cb:02:91:ed:2e:7a:20:cf:49:b8:
1a:99:6c:1d:0f:c7:96:61:e8:6c:e5:40:df:53:2d:
c2:ac:a4:b3:80:c1:90:19:09:79:10:23:c5:56:0b:
91:aa:1e:33:37:ee:1b:d3:0b:ed:1d:57:6a:9c:58:
4c:a4:c9:08:ca:e8:66:ec:be:97:0a:56:d1:62:a2:
63:6d:e8:e0:9e:9c:ae:93:91:a4:3b:f0:bb:fb:fd:
b7:e0:fd:d1:e4:ba:46:40:26:e0:b4:9a:89:f4:39:
ef:79:ee:88:54:d6:7f:f3:42:e8:ba:43:bf:f6:94:
26:36:e4:ab:a1:4b:bd:f8:d6:ed:c9:9a:5c:64:86:
fd:cd:6c:38:5f:62:25:72:d9:f1:dd:1a:37:62:e5:
c3:f3:f0:f6:5a:04:d2:d9:bc:8a:98:09:b3:f3:9d:
bb:2d:aa:91:98:5c:4a:16:c1:1c:46:08:ef:b0:98:
33:7c:95:d0:b7:77:3f:0b:67:ba:22:22:01:8f:79:
ec:4b:ac:76:5d:b9:4c:8c:41:d5:a1:9c:84:9f:0d:
64:09:2e:64:76:dc:75:f9:77:4c:73:da:2d:59:ef:
54:6b:09:5e:cf:a4:d8:e0:37:89:ee:e6:c1:af:89:
b0:eb:56:e2:85:1b:e7:1a:4e:4d:74:bc:d6:3a:11:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:19:46:6F:3B:50:51:6C:E0:AE:2B:6A:62:50:5E:EE:42:0B:60:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yxlGbztQUWzgritqYlBe7kILYNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:8f:46:71:20:f8:21:58:ca:da:47:ef:ca:76:6b:8f:78:02:
c1:a1:29:e4:dd:36:7c:51:ef:43:e7:f1:45:c5:89:a6:9c:7d:
60:37:f2:bd:5e:a4:66:51:d6:5e:b7:05:b5:9d:f8:cb:3c:9f:
a4:db:76:12:ca:d8:4c:fa:57:bd:ea:a3:54:7b:f8:9e:f7:79:
03:2a:97:80:ee:33:62:54:b0:7c:64:37:6e:b9:ab:d8:8e:94:
38:d8:0f:11:5f:3b:f7:82:fc:29:42:44:70:07:52:b3:af:d9:
3d:d4:28:e3:23:27:b9:e3:dd:72:67:62:c2:f2:49:fa:a9:82:
76:02:61:a3:a8:5a:90:8b:70:43:20:c7:fa:29:cc:7c:33:a4:
a3:58:dd:20:d2:55:8e:c0:eb:11:a3:dc:6a:bd:14:b8:ee:cb:
20:b7:26:3f:9f:d9:2a:a2:cb:23:0a:57:85:01:8f:aa:95:06:
e3:a9:48:22:86:25:01:9b:be:88:29:10:65:18:49:4d:2a:e4:
f5:c7:d4:71:92:2e:45:80:1c:0e:87:ba:b3:1c:82:be:3c:be:
05:07:17:3a:3f:05:17:e3:78:0a:5e:c4:95:05:90:f0:9a:54:
ed:52:95:50:a7:2a:83:54:5f:a4:fa:d8:b1:d3:bd:1c:16:e9:
ec:94:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:10:23 2025 by rpki-client