Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YR12EHrRTTqhy7O5Vmkd7Y7FQtw.roa
File: YR12EHrRTTqhy7O5Vmkd7Y7FQtw.roa (raw, json)
Hash identifier: sAYVEikoIaDwNG2RPoLVxISxkajAABtjmaPoY+zrXPo=
Subject key identifier: 61:1D:76:10:7A:D1:4D:3A:A1:CB:B3:B9:56:69:1D:ED:8E:C5:42:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 668F7028
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YR12EHrRTTqhy7O5Vmkd7Y7FQtw.roa
Signing time: Mon 31 Jan 2022 05:21:56 +0000
ROA not before: Mon 31 Jan 2022 05:21:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720676392 (0x668f7028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 05:21:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=611d76107ad14d3aa1cbb3b956691ded8ec542dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:5a:95:38:c6:f9:78:0a:8d:dc:ac:dc:6a:
95:b7:9f:39:74:f7:4f:53:51:7c:ad:13:57:cb:0d:
24:22:a5:a3:bf:5f:cd:47:85:89:15:53:6a:30:7d:
7e:27:5b:4b:61:f3:79:66:4a:54:1b:0b:7a:df:20:
b7:a1:58:44:44:1b:a3:38:09:f4:d0:40:a7:a2:9d:
50:29:1b:e4:53:ee:fc:a4:d8:7b:c9:e3:a9:f5:e2:
c7:d2:55:92:09:8b:2b:df:6f:fd:58:b5:96:d3:e7:
df:9d:be:ba:d4:62:62:ad:e3:1a:c9:fe:c5:07:f4:
19:df:e0:d5:a0:0d:dc:27:88:f6:80:bf:d6:39:13:
30:ac:94:b4:12:1a:ab:0b:73:25:38:45:b1:00:2d:
9f:b4:06:91:e3:8b:80:54:b0:b4:78:d1:14:5e:76:
b4:2b:d8:34:1b:48:ea:98:4a:30:76:67:0b:3c:d7:
97:3c:3c:6f:84:05:78:54:e2:f6:e6:28:8e:8b:8d:
b2:6c:6d:22:5b:b8:47:54:51:ef:34:13:b0:6d:1c:
64:0c:f8:b8:46:3c:9b:55:9c:36:cd:f4:7c:f6:80:
67:f7:9a:0e:11:a7:40:48:a4:1f:56:76:0f:a6:e8:
5c:ae:74:b5:b3:fc:f9:79:df:d4:91:0b:de:cc:66:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:76:10:7A:D1:4D:3A:A1:CB:B3:B9:56:69:1D:ED:8E:C5:42:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YR12EHrRTTqhy7O5Vmkd7Y7FQtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:5f:af:e0:f5:7d:ed:a5:a1:59:7d:86:06:01:e0:e1:ea:52:
87:88:95:9f:eb:58:f7:f5:65:24:6d:22:6f:f2:f1:0b:f2:67:
54:ea:0f:89:2c:dd:37:c2:0a:3b:f4:9a:d6:f8:ea:9e:e9:d0:
df:fc:85:57:c9:2a:81:5d:ee:e9:4f:f8:2e:9a:9c:c7:a9:45:
55:c3:23:44:f0:10:6f:b8:5e:17:98:9b:16:c3:18:9c:a8:ba:
b6:7e:04:55:96:31:27:df:aa:d4:29:0b:ee:4a:41:02:03:a5:
a9:18:6d:1f:23:51:68:f6:6b:e5:0a:a6:e0:50:3d:94:51:9f:
65:48:39:dd:b5:ff:1b:e9:50:40:ff:9a:ce:54:fd:ba:35:e9:
c3:d1:85:6d:5e:cb:00:06:71:4f:eb:49:8d:ef:6d:56:0b:23:
eb:b5:c2:6a:bd:3a:13:81:15:52:a5:1c:a7:8a:f7:ed:6c:28:
94:f5:69:1d:78:62:7e:70:17:f0:5e:08:45:98:3e:65:41:6b:
23:37:7f:7a:df:53:4a:da:29:9a:a2:e9:a9:cb:61:13:18:51:
f2:68:10:25:2f:75:bd:d9:fb:25:20:1f:e9:b7:df:87:45:75:
90:e3:c4:0e:8b:5b:af:07:93:b2:a1:85:ab:61:ba:31:e6:83:
30:2f:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:18:08 2025 by rpki-client