Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YqOMQSk6CfiW5hRbp48YHAqjOX8.roa
File: YqOMQSk6CfiW5hRbp48YHAqjOX8.roa (raw, json)
Hash identifier: hoaR+yFbZ+C3h8qh4iudT/VKUKrKG1abISb9q7GX7m0=
Subject key identifier: 62:A3:8C:41:29:3A:09:F8:96:E6:14:5B:A7:8F:18:1C:0A:A3:39:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E48AD0061B804AC2CC6523A9B8234B58
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YqOMQSk6CfiW5hRbp48YHAqjOX8.roa
Signing time: Wed 15 Mar 2023 09:12:27 +0000
ROA not before: Wed 15 Mar 2023 09:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:8a:d0:06:1b:80:4a:c2:cc:65:23:a9:b8:23:4b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 09:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62a38c41293a09f896e6145ba78f181c0aa3397f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:c9:c4:81:39:02:ef:3c:cf:b0:75:a0:16:
e1:62:4d:14:0d:0e:d7:9f:2e:eb:dd:fc:b4:65:54:
65:55:f1:fd:c6:7b:cf:1b:2e:9d:78:04:9d:2e:cd:
ea:18:61:c1:d7:9d:f0:ef:e0:6c:d9:92:0a:68:97:
44:fc:73:83:c0:44:b0:a6:73:47:13:65:61:06:71:
74:34:de:71:46:34:85:b9:db:14:fd:f2:bf:9c:39:
2b:1d:2f:d4:8f:49:eb:db:24:11:35:ae:fe:66:22:
7d:fb:f2:2c:1e:51:51:b8:6a:be:22:04:c8:01:d8:
b6:5c:c7:bf:65:cd:56:77:02:d8:bd:e9:43:f6:3d:
dd:39:bf:18:36:1f:62:d8:54:ed:71:c9:92:2a:7e:
52:91:49:9c:28:2e:14:f6:a8:30:98:2c:54:b6:07:
5a:f8:b1:d6:d8:7c:37:ce:15:51:bf:d0:0f:f7:98:
fc:62:90:19:d4:49:66:2f:62:ee:37:4a:33:f3:13:
1c:38:dc:33:88:72:fb:e6:e7:9c:5c:b6:ce:8b:ed:
26:85:66:a2:59:74:aa:4b:2b:74:3f:86:6b:8f:72:
e7:fc:88:10:9f:b4:f3:00:ee:e2:0c:5c:a2:8a:e4:
30:d3:8c:34:0b:00:8c:26:ca:b8:2d:21:bf:01:15:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A3:8C:41:29:3A:09:F8:96:E6:14:5B:A7:8F:18:1C:0A:A3:39:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YqOMQSk6CfiW5hRbp48YHAqjOX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:47:4f:a9:8d:d1:ab:bb:9b:8b:9b:91:62:13:f2:a0:ec:14:
81:c7:62:d6:bc:34:c7:9b:8b:9c:c9:06:b2:11:22:1c:93:7b:
14:27:81:1a:26:7f:8a:c2:7a:69:48:e8:63:49:fa:8d:f9:2c:
e6:0d:73:4b:b2:6e:6d:41:26:58:ab:0a:be:c2:ce:f2:72:fe:
61:2d:9f:73:e9:ee:e1:ec:a7:85:69:a8:69:99:3b:8e:7f:16:
74:16:1e:19:70:bd:31:12:cd:6d:0e:42:33:75:ed:c8:02:71:
0f:f2:0d:49:a9:b5:5e:5f:95:cf:a8:76:63:b7:4f:1a:b4:71:
91:34:58:c3:d2:69:0b:a3:f5:5a:90:f5:e9:bf:c2:a0:20:0e:
d1:1d:8a:04:92:87:2a:e1:05:0e:e6:d8:d4:dd:19:14:32:39:
30:cb:dd:df:d4:ab:1a:0b:f6:11:b9:86:a1:76:8e:3d:8e:37:
fe:ef:10:23:37:95:ac:e9:24:15:28:3c:59:64:9a:5a:f3:66:
49:63:ef:9b:ec:cc:94:54:96:4d:12:cf:a2:bd:65:f7:64:e6:
0b:c9:35:18:3d:df:f7:c8:ef:34:aa:7b:dd:01:7d:c7:aa:18:
f3:73:99:af:36:7c:c8:51:33:02:ff:b8:1f:28:40:82:de:06:
3f:f0:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:33:13 2025 by rpki-client