Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YoLWgWfOtL_mgUjbFFGCDkd8RlA.roa
File: YoLWgWfOtL_mgUjbFFGCDkd8RlA.roa (raw, json)
Hash identifier: kqbLUf+dIKlO8uEWJR4bo8Nb+Hzs9v8dsOuhALdSjyk=
Subject key identifier: 62:82:D6:81:67:CE:B4:BF:E6:81:48:DB:14:51:82:0E:47:7C:46:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887D4E6E2A4B6DB8B63E75FE9E215514D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YoLWgWfOtL_mgUjbFFGCDkd8RlA.roa
Signing time: Fri 02 Jun 2023 18:11:11 +0000
ROA not before: Fri 02 Jun 2023 18:11:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:4e:6e:2a:4b:6d:b8:b6:3e:75:fe:9e:21:55:14:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 18:11:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6282d68167ceb4bfe68148db1451820e477c4650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:27:c1:c6:4e:44:c8:4f:53:0d:62:4f:e4:
95:9a:57:12:c6:4e:9b:97:d0:c2:ca:6b:cb:dd:81:
4c:99:22:bf:74:1c:bb:bb:80:61:51:28:cc:2f:fa:
cc:9d:2a:b2:66:58:6e:59:01:b5:a8:f7:61:3f:d7:
de:ac:da:77:31:3b:93:b1:4a:0a:de:0f:da:5c:bd:
1a:69:68:2a:04:f6:e5:81:b3:4d:56:66:4f:b5:f4:
10:aa:95:9f:7d:a9:23:6e:67:33:3d:a4:38:4b:1d:
a8:04:fc:0f:81:ba:62:ee:c2:19:26:7f:5c:55:f9:
c3:52:d5:ea:bd:0b:af:df:73:14:fd:08:7a:63:9e:
50:80:b7:ee:74:62:4e:37:c5:3d:7a:70:68:2f:63:
12:ad:1a:ce:cd:2d:02:d3:65:02:6c:0b:d1:28:53:
00:f3:59:c8:e3:a4:b5:67:9c:2d:c8:de:f3:40:e2:
b1:23:63:64:72:73:49:d9:0c:7b:bf:5e:a4:92:bd:
a1:c6:ac:1e:4b:49:8c:10:bd:35:22:2f:ea:03:26:
3f:e8:e3:db:49:7a:a7:16:8c:24:59:be:ee:8d:b5:
ba:df:28:84:4b:e3:bc:e1:2d:d7:39:6b:4a:53:17:
66:66:42:dd:3c:17:91:b4:37:a6:2b:49:da:41:9f:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:D6:81:67:CE:B4:BF:E6:81:48:DB:14:51:82:0E:47:7C:46:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YoLWgWfOtL_mgUjbFFGCDkd8RlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:ce:47:54:03:8b:ea:5d:d1:41:ad:aa:6c:86:9f:69:06:18:
8a:8e:61:f9:33:26:f0:93:7a:4a:01:2a:7a:f9:f5:2c:4b:0f:
0b:cd:00:a9:9c:69:49:39:be:ca:40:5d:8c:8a:80:74:bc:12:
49:3e:07:9f:23:07:93:09:ac:77:d0:89:c5:4d:34:41:2c:06:
63:7d:0a:d4:51:ed:ec:03:21:77:a2:cf:55:1b:2e:19:93:82:
bf:18:37:ec:b1:51:39:84:35:50:a6:aa:96:e4:a8:c2:37:fb:
44:c0:15:05:06:1e:ca:de:55:27:65:a5:18:e9:c8:ac:95:60:
87:aa:b1:2b:8a:12:c7:ec:e6:84:e4:b2:7d:5f:d7:b0:eb:75:
47:7c:db:e5:ff:0d:1e:b7:3c:14:18:cf:e1:6b:22:3b:f3:84:
a8:8f:d0:6c:58:aa:e5:cb:f4:a2:6a:c2:4d:18:73:39:a6:4f:
26:b4:3e:80:c1:46:14:24:ea:de:e0:3a:04:d0:9d:2d:1b:11:
f4:8c:5e:11:b6:07:3a:c6:5b:9f:a6:08:83:a3:8c:18:d5:54:
d4:39:87:16:c8:f3:d9:cc:07:c5:5c:b0:3b:b8:a5:e9:92:4a:
5b:b1:d9:54:cb:0c:40:a0:84:cb:5d:fd:90:ac:52:b8:3d:aa:
e8:b1:ff:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYh9Tm4qS224tj51/p4hVRTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjAyMTgxMTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjgyZDY4MTY3Y2ViNGJmZTY4MTQ4ZGIxNDUxODIwZTQ3N2M0NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUUnwcZORMhPUw1iT+SVmlcSxk6b
l9DCymvL3YFMmSK/dBy7u4BhUSjML/rMnSqyZlhuWQG1qPdhP9ferNp3MTuTsUoK
3g/aXL0aaWgqBPblgbNNVmZPtfQQqpWffakjbmczPaQ4Sx2oBPwPgbpi7sIZJn9c
VfnDUtXqvQuv33MU/Qh6Y55QgLfudGJON8U9enBoL2MSrRrOzS0C02UCbAvRKFMA
81nI46S1Z5wtyN7zQOKxI2NkcnNJ2Qx7v16kkr2hxqweS0mMEL01Ii/qAyY/6OPb
SXqnFowkWb7ujbW63yiES+O84S3XOWtKUxdmZkLdPBeRtDemK0naQZ+ZjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGKC1oFnzrS/5oFI2xRRgg5HfEZQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWW9MV2dXZk90TF9tZ1VqYkZGR0NEa2Q4UmxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJXOR1QDi+pd0UGtqmyG
n2kGGIqOYfkzJvCTekoBKnr59SxLDwvNAKmcaUk5vspAXYyKgHS8Ekk+B58jB5MJ
rHfQicVNNEEsBmN9CtRR7ewDIXeiz1UbLhmTgr8YN+yxUTmENVCmqpbkqMI3+0TA
FQUGHsreVSdlpRjpyKyVYIeqsSuKEsfs5oTksn1f17DrdUd82+X/DR63PBQYz+Fr
IjvzhKiP0GxYquXL9KJqwk0YczmmTya0PoDBRhQk6t7gOgTQnS0bEfSMXhG2BzrG
W5+mCIOjjBjVVNQ5hxbI89nMB8VcsDu4pemSSlux2VTLDECghMtd/ZCsUrg9quix
/5k=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:55 2025 by rpki-client