Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YMkErqX8T3GQ_hQ3g5YdAsOYcek.roa
File: YMkErqX8T3GQ_hQ3g5YdAsOYcek.roa (raw, json)
Hash identifier: Y7IqGadNXlqdMEhiLQOOh7/capPUeUPaEQpKEIOE/OI=
Subject key identifier: 60:C9:04:AE:A5:FC:4F:71:90:FE:14:37:83:96:1D:02:C3:98:71:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A8AA8C7752B5EAF47F87FD665C353474
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YMkErqX8T3GQ_hQ3g5YdAsOYcek.roa
Signing time: Sat 22 Apr 2023 11:12:41 +0000
ROA not before: Sat 22 Apr 2023 11:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:aa:8c:77:52:b5:ea:f4:7f:87:fd:66:5c:35:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 11:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60c904aea5fc4f7190fe143783961d02c39871e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:74:60:6d:48:b0:2b:ce:d9:0c:b2:bc:02:
ec:49:47:a0:2e:5f:46:07:0f:c5:d7:05:27:cd:9c:
64:03:f5:ab:b8:ea:d8:ee:55:25:37:3e:72:83:bc:
ad:32:7b:04:fb:70:8a:d3:f3:14:df:43:0d:db:13:
9c:33:fd:89:aa:ec:2a:4a:51:7c:99:ab:de:10:04:
08:84:ad:14:07:d8:6f:8b:c8:55:21:8e:69:2a:0c:
d1:7d:80:b4:61:12:0e:b6:03:27:3e:84:f2:f4:6e:
3c:0c:47:58:7f:c2:90:79:85:e7:ff:a0:88:01:fb:
76:fc:29:0f:18:4a:a4:c6:65:60:a4:93:c7:41:fc:
40:c0:0d:ae:e8:13:10:12:2a:01:33:da:f8:f7:33:
e6:92:13:68:40:56:f4:a8:5a:b5:34:05:27:33:27:
ea:62:9d:fa:54:64:eb:51:7b:46:8b:39:0c:bf:7c:
a6:9c:73:de:90:ce:e8:ef:fb:90:e3:47:b6:30:57:
e5:29:73:73:a8:d4:b0:46:d6:2a:2b:89:85:f5:61:
ea:cc:22:d8:e5:6b:ad:c6:a1:41:8b:f5:46:7e:2e:
1d:56:73:e9:24:ce:47:4d:1b:58:71:84:15:27:fa:
cd:04:24:20:fb:04:ed:b6:2a:e3:0f:55:9f:e0:f9:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C9:04:AE:A5:FC:4F:71:90:FE:14:37:83:96:1D:02:C3:98:71:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YMkErqX8T3GQ_hQ3g5YdAsOYcek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:ca:21:84:c3:f0:f3:3f:a6:7b:96:7c:cb:35:80:6e:27:12:
8e:c9:e2:44:af:10:e2:fc:22:4c:a5:01:cb:e5:90:fe:06:17:
a7:dd:03:60:6a:9c:d6:a0:56:37:a4:d9:dd:85:9e:d9:2e:b2:
de:d6:fe:ad:f1:9a:7c:e3:a9:4c:37:84:10:44:1e:f3:18:ff:
53:cf:d4:44:c6:41:d9:0b:28:0b:63:8f:d8:48:9c:3f:17:06:
87:96:f4:e9:62:07:c0:72:6a:86:ca:57:31:1d:52:d0:01:eb:
0f:2e:28:34:0d:cf:7e:34:a9:14:8f:9f:a9:fc:55:73:d9:29:
4d:1e:cb:f2:35:d4:ac:2b:13:ac:fb:fb:42:c6:bb:ba:1d:08:
4e:f1:49:a7:4e:7f:4e:1b:a0:44:a9:17:0f:e3:f3:bc:90:8a:
46:b2:03:1a:dd:35:fb:78:a7:1d:8b:05:78:c0:31:67:75:e4:
f1:13:54:dd:ae:e5:d8:bb:d4:68:67:29:30:80:be:e4:3e:4d:
2c:86:80:72:51:34:32:64:83:fe:2f:be:c4:e1:f2:52:1a:af:
b4:46:e4:e7:5e:59:40:74:48:29:2c:d7:d6:b4:db:43:a4:19:
b6:b5:69:28:e2:95:56:7e:e7:57:7c:92:c3:b6:47:7b:e5:59:
08:04:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:37:45 2025 by rpki-client