Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RyKOJJY55uRabA9bU14wMXFhMiI.roa
File: RyKOJJY55uRabA9bU14wMXFhMiI.roa (raw, json)
Hash identifier: wDeLV74BIsCpj950/7F3xfe1eTKBG7giKBnI65vtqDU=
Subject key identifier: 47:22:8E:24:96:39:E6:E4:5A:6C:0F:5B:53:5E:30:31:71:61:32:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186820EDC53E7200859C8763F66626575FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RyKOJJY55uRabA9bU14wMXFhMiI.roa
Signing time: Fri 24 Feb 2023 06:14:17 +0000
ROA not before: Fri 24 Feb 2023 06:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:0e:dc:53:e7:20:08:59:c8:76:3f:66:62:65:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 06:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47228e249639e6e45a6c0f5b535e303171613222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:05:2e:06:bc:5c:e3:24:65:5f:1f:68:4f:
bf:b1:32:73:e3:cd:ec:e3:19:47:7a:89:2c:7e:6e:
7d:6a:24:6f:7a:d2:3a:a8:65:bd:44:3c:2a:74:64:
da:06:8b:52:38:4f:77:0d:ae:88:c5:88:23:49:6e:
ef:8e:58:99:f8:f2:d5:28:fa:14:42:fc:31:ca:39:
5b:40:00:27:9c:c5:20:7c:6b:b3:76:7c:39:e5:ac:
3a:09:64:d6:8c:98:98:a4:aa:27:6b:64:dd:ca:fa:
9e:5b:0b:93:c0:cc:1e:60:07:ce:10:f8:9b:ca:0e:
f0:9d:72:0c:a8:10:8e:30:8a:50:5f:a1:ea:b5:35:
dc:0a:ab:65:36:67:a2:c7:6c:10:b1:45:ae:2f:39:
b4:2f:58:8e:28:eb:77:f8:c0:e4:db:45:db:ed:b6:
36:40:50:b8:32:0d:3d:6f:63:18:7c:8c:94:dc:45:
fd:79:f0:1a:21:ca:c6:aa:63:a0:5b:17:78:86:dd:
2a:27:f0:dc:8e:cd:b3:97:08:20:10:99:ef:a0:b2:
83:83:6b:91:74:3f:29:0d:20:f3:72:e8:ae:47:8e:
6a:e6:a4:72:a4:18:e6:80:12:b4:e6:1d:8f:46:47:
10:78:26:f7:d2:1d:3f:c3:fc:2d:a7:c0:2c:43:52:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:22:8E:24:96:39:E6:E4:5A:6C:0F:5B:53:5E:30:31:71:61:32:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RyKOJJY55uRabA9bU14wMXFhMiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:ef:57:86:e4:fb:b7:a7:7d:2a:76:f2:d4:05:ad:99:ec:3d:
ee:66:d7:e7:28:db:7c:4b:3a:cf:d5:b0:01:21:6f:a2:80:81:
25:ac:d7:9a:b9:2e:b4:a3:dc:6d:74:3f:c9:30:51:12:46:1d:
7c:55:80:90:fb:49:b4:64:45:9f:ea:55:bf:bd:82:46:a9:55:
6f:99:2f:06:35:18:eb:20:da:a5:8f:84:1f:5b:72:43:dd:8c:
15:6b:be:0d:70:b4:d1:5d:c6:a7:ab:b0:5e:bd:af:a3:7e:09:
28:3d:f0:10:1d:1b:9e:c6:25:3f:0d:80:a7:a8:87:86:5f:03:
08:23:3e:14:97:5c:c2:ad:bd:39:f2:24:1f:76:c8:31:19:db:
89:cd:b7:de:71:f0:03:99:44:53:f1:00:60:f3:c3:dc:43:00:
ba:fe:b4:b3:1b:5e:74:10:51:40:ff:26:9d:25:24:77:2a:66:
51:ce:37:4e:7c:df:d6:9d:8a:aa:3c:5d:52:a2:a2:56:55:79:
19:12:48:4d:84:93:ab:09:b0:f8:75:ea:56:65:eb:82:68:2e:
43:3b:0c:ae:2b:ea:1d:4b:30:02:65:3b:5a:2c:72:8d:55:49:
d6:61:99:dc:82:63:8c:ea:38:fb:9d:4c:d5:88:a8:3a:88:9b:
8c:5b:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:15:50 2025 by rpki-client