Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YSLJ-MK3EnjljwCXdlpVWBRLCrg.roa
File: YSLJ-MK3EnjljwCXdlpVWBRLCrg.roa (raw, json)
Hash identifier: WUmZ5t4XOEbqmMK5YRV0JkpxwOJXiCf+kMMJ/R0OQcA=
Subject key identifier: 61:22:C9:F8:C2:B7:12:78:E5:8F:00:97:76:5A:55:58:14:4B:0A:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89EA03D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YSLJ-MK3EnjljwCXdlpVWBRLCrg.roa
Signing time: Sat 04 Jun 2022 19:08:21 +0000
ROA not before: Sat 04 Jun 2022 19:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313814999 (0x89ea03d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 19:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6122c9f8c2b71278e58f0097765a5558144b0ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:04:bb:6e:d8:25:0b:c7:27:d7:7a:9c:c5:
72:c5:d3:aa:1c:70:d8:ef:2f:5a:6c:ad:6d:16:d6:
46:12:a8:3a:67:44:d6:f0:66:cf:8f:0c:4e:24:1f:
83:83:a2:6a:79:76:fd:f5:72:67:cc:80:3e:7f:17:
80:40:c1:90:48:de:da:1a:41:88:f6:16:82:64:73:
77:d2:9a:f5:82:b9:6c:0e:c8:37:dd:f4:94:9f:99:
f7:8f:eb:65:d5:a3:5b:a5:e8:a0:0a:f5:41:32:bd:
72:06:15:4d:b4:d8:23:ca:cc:e3:94:40:fb:a0:2a:
65:d8:d6:a8:3f:fc:80:1d:34:ab:11:b0:65:c8:4d:
7c:30:b0:ed:e7:d3:0b:48:01:81:9f:0f:00:a5:ef:
3e:4e:f7:d7:75:a5:54:e3:15:f8:96:8f:87:fc:ee:
01:13:99:e5:a6:13:ac:99:c2:ab:18:86:39:57:ab:
ce:65:06:1e:cf:6e:76:69:dd:fc:ce:6d:67:af:0e:
2d:f7:30:1c:8a:3a:cc:c3:6d:fb:2a:9a:88:6e:a8:
42:30:18:dd:da:e8:8c:61:69:a9:ec:38:0b:fb:8d:
3b:f2:24:5b:d8:95:29:f8:c4:1b:69:1b:b5:e8:5a:
aa:ad:61:a8:93:8f:90:db:25:26:15:99:52:8d:02:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:22:C9:F8:C2:B7:12:78:E5:8F:00:97:76:5A:55:58:14:4B:0A:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YSLJ-MK3EnjljwCXdlpVWBRLCrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:bf:62:53:87:8a:93:0f:bd:04:13:2c:1e:1c:41:41:9f:a8:
44:57:b4:e9:9c:95:ba:c6:70:32:42:45:12:6c:43:78:18:b2:
cd:a8:29:79:3f:6b:c1:6c:86:c9:d8:e3:d8:a6:66:73:0b:e3:
b4:1f:77:5a:f1:8b:78:79:b1:98:a1:b6:a8:25:5a:d5:d1:7f:
1d:8a:8c:87:37:75:d2:9c:2e:71:02:d6:80:b2:77:86:98:24:
f8:fa:a8:1e:e3:75:04:4c:6e:f0:f8:39:8a:1e:fc:f7:11:a5:
78:56:44:0c:4d:df:48:14:08:21:58:cf:32:e0:37:4a:17:0c:
f0:d0:7c:af:71:a9:57:f3:24:ac:75:c4:de:ee:c8:ba:bb:54:
10:fc:fb:df:22:1c:ee:dc:79:d9:aa:6c:b3:ca:fc:6a:4f:bc:
f8:16:bd:2a:55:ff:11:c2:8d:b9:b0:d2:5a:a8:aa:87:ca:aa:
e2:e3:4d:a0:91:bf:e8:6f:5a:59:5a:7d:e7:4b:b9:2b:27:cb:
e3:7e:7f:ee:78:c7:14:5b:cb:7f:e2:de:53:77:68:b8:ed:72:
5e:ba:52:37:4e:b0:88:d9:82:aa:3a:e0:7d:a2:37:f9:3d:ab:
b0:23:65:2e:3d:c0:97:66:ce:e7:c1:41:c7:cf:38:61:9f:78:
1a:b7:72:87
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAInqA9cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDQxOTA4MjFaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDYxMjJjOWY4YzJi
NzEyNzhlNThmMDA5Nzc2NWE1NTU4MTQ0YjBhYjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZKwS7btglC8cn13qcxXLF06occNjvL1psrW0W1kYSqDpn
RNbwZs+PDE4kH4ODomp5dv31cmfMgD5/F4BAwZBI3toaQYj2FoJkc3fSmvWCuWwO
yDfd9JSfmfeP62XVo1ul6KAK9UEyvXIGFU202CPKzOOUQPugKmXY1qg//IAdNKsR
sGXITXwwsO3n0wtIAYGfDwCl7z5O99d1pVTjFfiWj4f87gETmeWmE6yZwqsYhjlX
q85lBh7PbnZp3fzObWevDi33MByKOszDbfsqmohuqEIwGN3a6IxhaansOAv7jTvy
JFvYlSn4xBtpG7XoWqqtYaiTj5DbJSYVmVKNAp2pAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUYSLJ+MK3EnjljwCXdlpVWBRLCrgwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9ZU0xKLU1LM0Vuamxqd0NYZGxwVldCUkxDcmcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAmL9iU4eKkw+9BBMsHhxBQZ+oRFe06ZyVusZw
MkJFEmxDeBiyzagpeT9rwWyGydjj2KZmcwvjtB93WvGLeHmxmKG2qCVa1dF/HYqM
hzd10pwucQLWgLJ3hpgk+PqoHuN1BExu8Pg5ih789xGleFZEDE3fSBQIIVjPMuA3
ShcM8NB8r3GpV/MkrHXE3u7IurtUEPz73yIc7tx52apss8r8ak+8+Ba9KlX/EcKN
ubDSWqiqh8qq4uNNoJG/6G9aWVp950u5KyfL435/7njHFFvLf+LeU3douO1yXrpS
N06wiNmCqjrgfaI3+T2rsCNlLj3Al2bO58FBx884YZ94Grdyhw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:09:59 2025 by rpki-client