Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4NvLhHySsjngJPLAixWxmkxxCY.roa
File: Y4NvLhHySsjngJPLAixWxmkxxCY.roa (raw, json)
Hash identifier: vUnh2hOjELiZynudNpxdzcgTFm5fRjw+UlmjAKOkPjw=
Subject key identifier: 63:83:6F:2E:11:F2:4A:C8:E7:80:93:CB:02:2C:56:C6:69:31:C4:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 881BA4D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4NvLhHySsjngJPLAixWxmkxxCY.roa
Signing time: Sun 29 May 2022 06:11:13 +0000
ROA not before: Sun 29 May 2022 06:11:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2283513046 (0x881ba4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 06:11:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63836f2e11f24ac8e78093cb022c56c66931c426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:1f:41:f7:16:9f:4c:f6:59:69:e5:43:fa:
14:48:00:7c:d2:c7:bb:14:83:e5:26:c1:ca:55:84:
36:5d:b1:f7:95:33:b2:d1:6c:fb:79:76:4e:ad:44:
3f:95:b2:db:f2:c0:3f:b2:97:fa:1a:1a:7c:ca:d5:
9c:47:16:8b:38:44:e1:25:ec:39:b6:58:d1:79:f9:
8d:9d:a9:6f:60:16:86:40:b1:1e:96:b3:72:4f:a3:
70:cc:5b:a0:ec:8f:60:63:c1:0f:f5:f0:bf:8b:5f:
d4:8c:85:13:33:a3:3f:d6:52:38:8b:39:51:56:fe:
45:a8:e6:24:e7:ee:23:4b:dc:02:92:7f:e7:7e:73:
64:1c:69:79:f1:71:7b:ae:38:fa:c4:9e:49:67:d6:
45:38:e3:8f:70:56:d7:cd:ef:a2:e0:c0:8d:d7:7d:
ab:e8:e6:9a:0a:92:bf:d6:f7:ce:5b:74:98:de:8a:
37:76:21:a5:2e:4b:e2:29:e8:4d:0f:af:58:07:11:
00:87:5a:bb:42:91:0a:7a:aa:9b:24:d3:8b:dc:ab:
fc:df:21:5e:6b:97:a0:f0:28:f8:53:c1:07:f0:6a:
78:75:7a:11:19:2a:9e:96:6a:a7:d0:d9:64:8c:55:
3a:75:63:10:2e:26:c0:d4:cf:af:66:be:c2:03:87:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:6F:2E:11:F2:4A:C8:E7:80:93:CB:02:2C:56:C6:69:31:C4:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4NvLhHySsjngJPLAixWxmkxxCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:e7:e3:2d:e6:26:82:21:9a:cc:51:0e:43:9a:9f:4e:b6:d7:
2a:30:c5:8e:64:f1:4e:f4:c0:82:84:4d:b6:4b:0f:fe:00:fc:
5e:ed:c2:50:e7:90:77:45:98:02:76:8b:52:39:13:7f:95:0d:
0c:cc:c7:f1:05:3d:f8:71:1d:d1:0f:6b:8b:23:d7:ec:fd:2e:
09:ad:0b:cb:8d:b9:86:b4:17:2c:2b:02:da:7b:31:c8:9e:d0:
84:76:19:c6:77:65:79:03:a5:98:a9:c5:90:8a:04:12:e0:9f:
ea:1d:ca:d2:6b:0e:ec:7b:69:7e:a3:5f:f1:26:12:eb:bc:77:
ad:84:2d:a7:71:78:2d:6e:6f:fa:39:c5:fb:41:d0:b9:6b:ad:
3a:02:f7:66:01:44:61:8a:05:a4:f4:63:20:95:49:30:fc:f9:
da:3e:67:5e:ff:f3:73:70:88:58:1f:5e:41:4c:ee:6b:97:c4:
b7:8e:e0:93:86:b3:31:fe:58:29:40:50:2b:84:a1:af:9a:2f:
d1:fc:d3:a0:53:6a:12:41:63:dd:42:14:1d:ad:60:54:42:49:
60:6a:b7:5a:fc:e3:dc:b6:d2:67:58:75:49:e2:a7:5d:96:aa:
bd:93:2b:db:8d:81:76:13:fd:d0:f2:bc:4a:53:a8:ad:ef:0a:
f7:2c:0b:df
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIgbpNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjkwNjExMTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDYzODM2ZjJlMTFm
MjRhYzhlNzgwOTNjYjAyMmM1NmM2NjkzMWM0MjYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCifR9B9xafTPZZaeVD+hRIAHzSx7sUg+UmwcpVhDZdsfeV
M7LRbPt5dk6tRD+VstvywD+yl/oaGnzK1ZxHFos4ROEl7Dm2WNF5+Y2dqW9gFoZA
sR6Ws3JPo3DMW6Dsj2BjwQ/18L+LX9SMhRMzoz/WUjiLOVFW/kWo5iTn7iNL3AKS
f+d+c2QcaXnxcXuuOPrEnkln1kU4449wVtfN76LgwI3Xfavo5poKkr/W985bdJje
ijd2IaUuS+Ip6E0Pr1gHEQCHWrtCkQp6qpsk04vcq/zfIV5rl6DwKPhTwQfwanh1
ehEZKp6WaqfQ2WSMVTp1YxAuJsDUz69mvsIDh8JjAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUY4NvLhHySsjngJPLAixWxmkxxCYwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9ZNE52TGhIeVNzam5nSlBMQWl4V3hta3h4Q1kucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAKOfjLeYmgiGazFEOQ5qfTrbXKjDFjmTxTvTA
goRNtksP/gD8Xu3CUOeQd0WYAnaLUjkTf5UNDMzH8QU9+HEd0Q9riyPX7P0uCa0L
y425hrQXLCsC2nsxyJ7QhHYZxndleQOlmKnFkIoEEuCf6h3K0msO7HtpfqNf8SYS
67x3rYQtp3F4LW5v+jnF+0HQuWutOgL3ZgFEYYoFpPRjIJVJMPz52j5nXv/zc3CI
WB9eQUzua5fEt47gk4azMf5YKUBQK4Shr5ov0fzToFNqEkFj3UIUHa1gVEJJYGq3
Wvzj3LbSZ1h1SeKnXZaqvZMr242BdhP90PK8SlOore8K9ywL3w==
-----END CERTIFICATE-----
Generated at Thu Jun 12 10:28:04 2025 by rpki-client