Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y1JIiYvbxhiXeB9haVPddHMgMYg.roa
File: Y1JIiYvbxhiXeB9haVPddHMgMYg.roa (raw, json)
Hash identifier: /LMhss67pRKZmuc1mzVo5OHPu4sErlGrirlsaRPCJnM=
Subject key identifier: 63:52:48:89:8B:DB:C6:18:97:78:1F:61:69:53:DD:74:73:20:31:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187CF42EA1BB6EBCD5C802B3805DAFEAF48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y1JIiYvbxhiXeB9haVPddHMgMYg.roa
Signing time: Sat 29 Apr 2023 23:04:41 +0000
ROA not before: Sat 29 Apr 2023 23:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:cf42:709b/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cf:42:ea:1b:b6:eb:cd:5c:80:2b:38:05:da:fe:af:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 23:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=635248898bdbc61897781f616953dd7473203188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:da:e4:8d:ea:a3:bc:41:8c:c1:ff:9f:84:
78:d3:0e:98:47:7c:1a:4a:2c:ee:91:31:ff:c3:d4:
70:cb:bf:6f:b2:ce:d1:41:02:e3:b1:08:fa:09:dc:
05:e2:75:f1:ec:8b:b4:58:1d:cd:a6:1c:a1:1d:cf:
b8:b2:0b:96:1f:3e:39:10:b4:4f:01:4f:f5:21:a8:
bd:2d:c7:44:68:4b:48:77:99:97:df:3d:01:cf:c6:
a9:d1:05:33:25:53:96:31:36:78:b4:02:68:bb:a2:
4b:7f:5b:6c:6d:56:df:69:ad:87:22:fc:fe:1c:07:
b9:4b:78:53:19:fc:78:dd:70:39:56:22:ad:6d:89:
02:21:33:59:bd:86:7c:0f:c4:aa:60:06:00:a2:89:
45:9e:24:a7:54:24:53:60:34:61:7a:f1:a5:6c:7e:
32:41:34:e2:47:7f:b9:fa:33:7a:75:75:62:06:fa:
c2:2c:ee:60:71:5e:18:31:fc:9e:47:ae:90:1e:01:
a7:7f:d6:3c:cd:a6:7f:53:7c:23:4b:86:db:d0:75:
dd:98:0e:ee:78:70:1a:f7:c5:3a:ce:83:a1:3f:4c:
f2:f7:1d:fd:ac:82:ad:52:18:7b:6a:32:3b:40:fd:
17:b1:a4:15:65:65:75:1d:0a:5f:79:63:5a:bd:41:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:48:89:8B:DB:C6:18:97:78:1F:61:69:53:DD:74:73:20:31:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y1JIiYvbxhiXeB9haVPddHMgMYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:bc:5e:7e:83:e7:30:02:fc:cc:b3:27:03:db:be:29:49:5c:
de:df:8f:c3:6d:d2:11:68:37:16:d5:6d:b3:17:ba:e7:80:89:
32:c3:0d:3b:f9:67:23:9b:c7:05:58:d4:f8:42:5a:3c:a6:23:
31:76:77:71:66:cc:4c:74:30:9c:cc:bd:15:8e:2b:0a:c4:b6:
98:4d:ae:50:10:ce:74:39:f5:d2:81:b4:32:3e:53:d4:59:7e:
0c:27:06:ea:bf:8b:ff:3e:cb:99:76:b3:f8:d7:f4:18:97:ff:
8c:c5:76:91:e0:54:28:c6:08:e5:17:4f:d1:53:06:32:83:6c:
18:86:38:6f:2c:6d:7b:12:ae:f7:ea:8c:d9:71:d2:d2:58:ae:
88:df:f1:48:92:e3:78:d9:9c:66:0b:9b:1d:59:e7:00:98:7c:
26:17:87:20:0f:b6:3d:f7:a8:3b:25:a8:04:13:8d:d7:b3:17:
96:3a:0c:95:f9:00:4b:30:4c:4b:ed:9a:1c:cf:c8:36:ee:27:
5a:a0:cb:99:a0:1d:04:3a:a6:aa:a0:45:f8:0a:81:db:3a:ed:
5e:1e:8f:10:c9:d4:14:73:f2:1e:6e:e0:73:c7:45:db:71:cb:
47:30:7c:b6:ac:9e:85:c4:f0:3b:aa:7e:c9:6a:e7:f7:89:d6:
5c:53:36:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:23:10 2025 by rpki-client