Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YHNllTazTrqUZIVkZHsqCPIKNzI.roa
File: YHNllTazTrqUZIVkZHsqCPIKNzI.roa (raw, json)
Hash identifier: /LYIpfnX7PSp0qE2HJxfqBb1PljaGEwtCxVTmJEONTs=
Subject key identifier: 60:73:65:95:36:B3:4E:BA:94:64:85:64:64:7B:2A:08:F2:0A:37:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183DDE819983505C315C715E42EC1FDD364
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YHNllTazTrqUZIVkZHsqCPIKNzI.roa
Signing time: Sat 15 Oct 2022 23:08:39 +0000
ROA not before: Sat 15 Oct 2022 23:08:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:dde4:175d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:dd:e8:19:98:35:05:c3:15:c7:15:e4:2e:c1:fd:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 15 23:08:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6073659536b34eba94648564647b2a08f20a3732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7d:33:fe:74:b1:af:2f:74:fa:f4:38:ce:26:
7b:d2:79:f7:2f:ba:1b:0f:a0:f4:3f:bf:37:73:ac:
88:9b:de:cc:69:bf:1f:83:20:27:47:a0:46:09:b9:
7c:0e:20:99:b0:6e:5d:90:4e:c9:56:b0:65:9a:cd:
81:fe:2a:c6:48:bf:8a:91:ba:1a:4b:45:ad:14:92:
36:62:2f:58:55:0d:9d:23:e6:d5:b2:9d:14:6c:48:
df:be:82:68:45:9d:a0:03:0a:5c:46:6e:8a:de:69:
52:85:c7:e5:00:1c:46:5c:37:13:e7:a2:24:c5:0d:
46:37:69:1c:af:3c:85:c9:9b:c3:9c:6e:dc:6a:ad:
75:0c:59:fc:4f:be:e7:1c:cd:a6:f1:e7:e7:d9:56:
02:70:fa:0d:ea:d8:29:6e:45:a6:2d:cf:70:08:fa:
27:11:49:e0:72:de:ca:fa:0a:cc:bf:64:d6:ca:ef:
47:b5:83:79:cf:9a:e1:bc:15:32:bf:c5:d3:ba:bb:
e4:98:20:aa:3a:81:af:7f:f2:26:ca:65:1b:78:59:
1e:dd:4f:47:27:c4:de:b6:01:3b:d2:34:9b:52:52:
84:94:59:d8:ca:2b:18:a6:cf:cf:9c:11:d1:dd:13:
f9:98:6a:e5:9e:26:cc:fa:03:c5:4f:2f:54:5d:f5:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:65:95:36:B3:4E:BA:94:64:85:64:64:7B:2A:08:F2:0A:37:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YHNllTazTrqUZIVkZHsqCPIKNzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:a5:05:3c:a8:5d:bd:37:1e:d7:4c:bc:35:44:0c:69:39:95:
37:0c:7f:af:c5:90:7e:9a:ca:cd:e9:de:ae:4e:ed:74:4c:9d:
20:d9:46:13:4f:a8:f5:26:a2:6f:a5:4e:bb:9c:85:88:db:ca:
f6:57:2c:c1:49:97:66:86:84:d1:81:4a:4a:24:84:6f:47:4d:
b7:d1:63:fb:04:4d:9f:6f:c7:a2:f6:5d:a4:c0:25:59:73:42:
c7:dc:a0:4a:37:82:cc:31:b7:e1:9c:6c:68:66:24:da:47:32:
fe:b2:09:b3:fb:8a:bb:bd:a5:d5:b7:8a:f6:2e:2c:8b:d4:49:
51:bc:75:c5:d6:97:91:f6:b6:c3:99:7b:e4:1c:2f:33:85:f4:
f1:f1:82:53:cb:71:8f:f0:19:5d:8e:a4:c1:a5:e9:55:b6:36:
95:e6:46:b7:56:cd:ea:42:cc:93:eb:63:a3:fb:d7:10:56:67:
9b:aa:d8:a8:5f:f6:43:1b:40:df:d0:65:73:98:87:58:10:cc:
f2:1f:0a:f9:47:23:f9:1e:d6:4f:7b:9e:18:c8:9f:21:81:ca:
15:95:91:f7:ad:3f:4d:d1:67:9d:69:9b:47:fc:af:e7:53:d9:
77:d2:f8:24:b6:a5:0d:43:a1:65:43:1d:a8:20:9b:60:4f:78:
7d:80:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:28:25 2025 by rpki-client