Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YsLJ4JajUDLxTN7iEZ4vFMwSQ_Q.roa
File: YsLJ4JajUDLxTN7iEZ4vFMwSQ_Q.roa (raw, json)
Hash identifier: Ie8DWW6C/q/u2cQiJdS2W4IUjEk7wt3G0URd2+9POyk=
Subject key identifier: 62:C2:C9:E0:96:A3:50:32:F1:4C:DE:E2:11:9E:2F:14:CC:12:43:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188104FDD53DAE00E239B745AD4E54D51C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YsLJ4JajUDLxTN7iEZ4vFMwSQ_Q.roa
Signing time: Fri 12 May 2023 14:14:09 +0000
ROA not before: Fri 12 May 2023 14:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:4f:dd:53:da:e0:0e:23:9b:74:5a:d4:e5:4d:51:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 14:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62c2c9e096a35032f14cdee2119e2f14cc1243f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:a7:a4:78:84:51:1c:68:bf:f2:47:dc:85:
6d:d2:c9:fa:a7:83:ce:47:5a:9b:0b:0e:28:a6:48:
39:8a:61:70:cf:7e:0b:28:12:60:8c:c8:b5:33:a3:
fd:3c:00:a9:8b:77:bc:8a:89:fe:62:ef:46:d6:20:
ed:b4:70:b1:41:7c:e6:91:3a:f0:14:04:2a:9b:ca:
2d:83:96:a2:19:15:25:60:6c:b6:96:89:8c:2c:c0:
3c:08:2a:0c:37:18:b0:bd:e8:23:1e:a2:36:fd:6f:
80:41:45:91:c7:67:6c:17:95:61:4b:8d:e2:39:06:
01:05:f8:f9:fd:0b:13:e4:27:06:51:d3:d8:1f:54:
a3:1c:03:75:d3:c6:75:53:c7:a6:89:28:b4:dd:8d:
ff:ae:bc:88:5b:b0:d1:96:e1:75:67:ff:7c:07:b6:
04:9b:44:ad:a1:a9:d0:01:80:af:e1:5f:1d:2d:3d:
6e:f1:a3:61:c3:ce:bc:01:b8:2d:f5:64:d8:23:03:
36:50:2e:1d:bc:b1:7e:c7:20:46:e3:d8:51:71:df:
d1:84:50:90:d4:27:3c:b7:32:19:aa:e3:d3:bf:ff:
07:7f:e8:ff:5c:24:45:67:4e:f4:ab:e0:1a:d2:e5:
e3:91:f1:47:bf:76:0b:b8:64:c6:9e:03:79:9d:cb:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C2:C9:E0:96:A3:50:32:F1:4C:DE:E2:11:9E:2F:14:CC:12:43:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YsLJ4JajUDLxTN7iEZ4vFMwSQ_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:bd:83:db:de:c7:f1:bb:d7:39:35:c6:23:1c:53:00:d3:d7:
e1:83:5d:24:b2:72:ce:7f:4c:b7:02:49:73:62:c4:6b:9d:17:
21:53:37:cb:b6:0c:90:6a:ea:20:25:a2:4f:19:95:6b:09:6e:
da:af:cb:24:dd:da:bb:99:a6:5d:d9:de:d5:60:f4:60:6e:d0:
5c:5e:cc:99:b2:22:d8:83:7c:cd:97:ff:d5:0a:f8:a2:83:06:
0b:17:ec:ad:80:03:f9:dd:13:c9:3a:53:62:2e:30:b4:da:89:
34:a3:4c:c0:0d:05:94:e0:f2:d0:5d:d4:8f:c4:2e:1a:22:f5:
30:d4:90:e8:a3:39:9e:5b:52:e8:7a:6c:9d:b6:15:a8:bd:f0:
6a:9c:3f:65:ff:d3:09:4b:a8:45:03:fb:d3:99:b0:9b:7c:67:
41:18:97:b4:21:c6:2b:c1:83:35:2e:24:a3:ea:1c:c1:10:37:
49:0b:c1:f6:35:9b:d9:e8:bd:a7:f5:31:72:36:ef:3d:7a:9c:
c4:57:db:8c:c3:95:19:a0:b0:5a:ca:db:ef:dd:f9:d0:3d:b9:
08:45:13:26:57:28:ca:a8:89:d9:de:b5:cd:d5:ea:73:a4:72:
f6:b3:0c:11:37:69:81:98:33:1b:fc:ce:6d:16:33:0a:e8:13:
2c:51:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:33:21 2025 by rpki-client