Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YUB9jRnVdOt_AeQA5KLY0uILOoo.roa
File: YUB9jRnVdOt_AeQA5KLY0uILOoo.roa (raw, json)
Hash identifier: fH8nUh0896dkl1xrpye09fxD/E9hJY2LSmhyGGErSJs=
Subject key identifier: 61:40:7D:8D:19:D5:74:EB:7F:01:E4:00:E4:A2:D8:D2:E2:0B:3A:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BCDBB4F7395B3E0FFC4CC9DD0BEDCE90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YUB9jRnVdOt_AeQA5KLY0uILOoo.roa
Signing time: Tue 07 Mar 2023 16:16:00 +0000
ROA not before: Tue 07 Mar 2023 16:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:db:b4:f7:39:5b:3e:0f:fc:4c:c9:dd:0b:ed:ce:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 16:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61407d8d19d574eb7f01e400e4a2d8d2e20b3a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:51:c9:cc:0e:e5:f0:2f:ab:e9:d7:e0:de:
9f:80:6a:27:95:d1:d3:64:3a:d0:5a:8a:90:44:d5:
62:28:a3:dd:ad:46:7f:b2:3e:cc:e7:5b:34:36:55:
a0:77:65:f7:0c:68:4f:42:95:6b:e8:d9:87:9d:cb:
e8:38:19:4f:7c:36:3c:58:0f:03:1f:e3:55:e5:18:
3b:42:76:33:42:1f:17:f0:e2:df:cb:d0:b1:ca:98:
bb:e0:0e:8c:e4:3a:e5:91:9f:24:20:40:f4:58:9c:
cd:2a:51:b8:87:cb:87:df:28:d7:05:eb:04:59:61:
fd:b0:85:1d:45:3d:09:5d:2a:30:7c:b1:c1:5f:63:
fd:af:c7:63:0a:d7:cd:db:08:fc:92:a4:6f:26:d1:
e0:42:fd:61:aa:a3:84:1b:9f:42:4f:f5:80:b7:c0:
21:f3:d2:85:50:c0:8f:47:3f:d3:fe:ed:f3:f3:07:
82:fd:24:e4:28:41:da:22:86:71:8a:7e:e5:cc:32:
3e:55:68:aa:a2:61:97:bd:21:1e:02:d5:62:e8:c1:
b3:a9:12:65:ab:df:a1:19:15:15:cb:94:72:3d:14:
17:02:f2:98:50:3f:52:12:94:3a:77:b7:12:41:f9:
cc:e4:08:5b:3c:47:05:55:dd:1a:1b:20:72:ca:9b:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:40:7D:8D:19:D5:74:EB:7F:01:E4:00:E4:A2:D8:D2:E2:0B:3A:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YUB9jRnVdOt_AeQA5KLY0uILOoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:6f:15:d7:35:06:9a:25:cc:13:ec:7c:86:e5:7e:9a:7f:2d:
29:01:55:02:42:57:31:76:4c:24:07:a0:36:ca:d5:16:9b:92:
f6:ef:1c:38:7f:bd:c7:da:87:a1:fe:57:1c:b1:8b:c8:75:c0:
de:17:bc:2b:d9:b6:e3:26:32:cc:cf:15:c6:55:a8:e4:5b:25:
f0:0a:33:01:90:92:09:d6:a0:91:54:7f:8e:b0:53:dc:34:ed:
cc:06:77:50:be:7a:ad:21:cd:ff:3d:c7:bd:12:65:56:53:9c:
7b:db:13:7f:5a:ce:fb:f5:7b:63:af:98:4b:a8:fa:7b:6d:fd:
43:fd:36:95:18:c8:9b:7f:3e:9a:65:2c:b4:d9:81:9e:dd:20:
54:1b:a9:c8:7c:1e:36:47:3b:9c:36:fc:16:37:62:0b:26:9f:
39:35:b2:d3:6d:9b:13:2a:18:98:cf:0a:36:9b:4c:62:ba:0d:
22:03:ae:10:1a:a0:cd:01:42:4e:cb:2d:83:af:46:25:8c:f0:
1f:67:e0:94:e6:03:af:67:2b:f1:32:36:3f:a6:98:69:05:a1:
f8:f1:fe:65:fc:f7:c0:74:15:b2:15:15:c0:9e:ed:13:21:bd:
ed:7d:f1:d5:5b:98:7f:4a:a8:1f:13:3a:62:ce:96:aa:a3:4f:
4e:2b:91:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa827T3OVs+D/xMyd0L7c6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA3MTYxNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTQwN2Q4ZDE5ZDU3NGViN2YwMWU0MDBlNGEyZDhkMmUyMGIzYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWxRycwO5fAvq+nX4N6fgGonldHT
ZDrQWoqQRNViKKPdrUZ/sj7M51s0NlWgd2X3DGhPQpVr6NmHncvoOBlPfDY8WA8D
H+NV5Rg7QnYzQh8X8OLfy9Cxypi74A6M5DrlkZ8kIED0WJzNKlG4h8uH3yjXBesE
WWH9sIUdRT0JXSowfLHBX2P9r8djCtfN2wj8kqRvJtHgQv1hqqOEG59CT/WAt8Ah
89KFUMCPRz/T/u3z8weC/STkKEHaIoZxin7lzDI+VWiqomGXvSEeAtVi6MGzqRJl
q9+hGRUVy5RyPRQXAvKYUD9SEpQ6d7cSQfnM5AhbPEcFVd0aGyByyptUdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGFAfY0Z1XTrfwHkAOSi2NLiCzqKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWVVCOWpSblZkT3RfQWVRQTVLTFkwdUlMT29vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJdvFdc1BpolzBPsfIbl
fpp/LSkBVQJCVzF2TCQHoDbK1RabkvbvHDh/vcfah6H+Vxyxi8h1wN4XvCvZtuMm
MszPFcZVqORbJfAKMwGQkgnWoJFUf46wU9w07cwGd1C+eq0hzf89x70SZVZTnHvb
E39azvv1e2OvmEuo+ntt/UP9NpUYyJt/PpplLLTZgZ7dIFQbqch8HjZHO5w2/BY3
Ygsmnzk1stNtmxMqGJjPCjabTGK6DSIDrhAaoM0BQk7LLYOvRiWM8B9n4JTmA69n
K/EyNj+mmGkFofjx/mX898B0FbIVFcCe7RMhve198dVbmH9KqB8TOmLOlqqjT04r
kQU=
-----END CERTIFICATE-----
Generated at Mon Jun 9 18:58:25 2025 by rpki-client