Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2xMFbOEm7SybBT0jZX6m3E1cJo.roa
File: Y2xMFbOEm7SybBT0jZX6m3E1cJo.roa (raw, json)
Hash identifier: 6kByNHqq9yqU+0RpcjDgK37Rsir19PjpcDaPMh/qOSk=
Subject key identifier: 63:6C:4C:15:B3:84:9B:B4:B2:6C:14:F4:8D:95:FA:9B:71:35:70:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018568B6B28A1E1DA90F39251731667A24EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2xMFbOEm7SybBT0jZX6m3E1cJo.roa
Signing time: Sat 31 Dec 2022 15:04:41 +0000
ROA not before: Sat 31 Dec 2022 15:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:68b6:4752/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:68:b6:b2:8a:1e:1d:a9:0f:39:25:17:31:66:7a:24:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 15:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=636c4c15b3849bb4b26c14f48d95fa9b7135709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:47:ad:f7:ce:bf:75:6b:fe:cd:a9:ca:b2:
ee:2d:c1:b7:38:f3:d1:de:c7:46:04:24:ac:ee:12:
80:b7:06:d3:7e:96:b1:b4:e7:c0:5a:0a:a1:71:89:
94:db:97:f1:ec:35:14:ba:fa:64:a3:b2:0f:d6:39:
26:a5:b9:65:14:6f:1e:a3:b5:95:a6:76:b6:10:70:
2d:cd:26:35:07:d0:3a:98:bf:c0:c1:76:47:8d:78:
fd:7a:47:a0:df:ed:21:cf:e0:02:75:ac:2a:a6:5f:
b7:e5:aa:c4:a0:5b:e0:67:f7:66:0a:05:97:6b:11:
f9:24:60:9a:f1:c2:0a:81:7b:b2:0a:2a:e3:e5:e7:
c3:1b:b7:11:ae:47:a1:a2:42:d5:67:73:17:7d:8f:
7f:e1:98:e9:46:a8:1d:3c:3d:5d:7b:a4:07:c9:55:
19:85:3f:a6:09:11:f2:00:95:8c:06:1f:b6:25:c6:
c0:4a:82:20:5b:19:13:b6:75:9e:a8:89:00:f5:f0:
f6:65:d4:7e:e1:4f:ac:64:01:2c:b2:bc:c8:b6:fc:
09:79:2d:83:4c:1e:b1:e5:64:de:29:51:a6:97:bc:
6b:b7:b1:9a:50:d8:03:4b:86:9a:c4:0b:4b:85:2d:
3d:a1:61:a1:33:98:9a:8a:dc:f4:c9:eb:da:a0:cf:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6C:4C:15:B3:84:9B:B4:B2:6C:14:F4:8D:95:FA:9B:71:35:70:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2xMFbOEm7SybBT0jZX6m3E1cJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:de:56:fd:06:8e:57:e2:0b:a4:8d:e3:5d:24:24:e9:ba:0f:
4f:14:49:a4:a3:4f:7b:46:f0:d8:21:aa:ac:19:47:66:27:c4:
0a:ab:c1:1e:4a:31:73:8b:b1:35:24:9d:d0:4e:30:f2:f1:18:
9b:fc:61:36:f7:78:9e:db:f2:d9:04:4c:89:56:f6:14:d4:3a:
2e:8a:fc:c9:ff:4f:f9:15:38:99:aa:c1:3c:87:d3:11:00:4d:
27:e9:d7:f8:ae:61:7d:13:55:38:09:c8:25:0b:40:63:b1:8b:
5c:3e:f3:e9:bb:e6:3e:80:4a:52:9d:f5:c0:87:31:9d:76:83:
73:1d:13:2c:8f:c2:5a:f2:d4:88:88:7e:a8:f6:c1:54:b1:50:
e0:e7:b5:78:4b:93:ab:74:41:3b:0f:e2:7b:6c:e2:df:ea:8a:
af:d3:ba:13:33:f2:a2:68:23:df:f1:ff:c8:8e:0f:63:64:04:
ce:10:99:15:5e:fd:33:5c:44:47:cc:21:a9:9d:eb:08:f7:5b:
1a:85:c2:d1:29:cf:63:c8:93:e9:07:b4:69:8a:0b:a5:ba:d9:
62:8a:ab:f9:5c:e3:13:01:80:fe:0d:47:46:6c:a6:83:cf:1b:
02:01:15:ee:33:1d:20:f4:50:85:37:90:f2:95:3a:2c:3a:a7:
c3:45:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:47 2025 by rpki-client