Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yv6JILG0VHoy03xRCoIvN8jNyEU.roa
File: Yv6JILG0VHoy03xRCoIvN8jNyEU.roa (raw, json)
Hash identifier: DJr3PU3Aj279wXAvBJyjzVRjEIMupLwc7Nch5C86W9U=
Subject key identifier: 62:FE:89:20:B1:B4:54:7A:32:D3:7C:51:0A:82:2F:37:C8:CD:C8:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188299ED2979B69212F50F3AD552DB82C32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yv6JILG0VHoy03xRCoIvN8jNyEU.roa
Signing time: Wed 17 May 2023 12:10:54 +0000
ROA not before: Wed 17 May 2023 12:10:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:9e:d2:97:9b:69:21:2f:50:f3:ad:55:2d:b8:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 12:10:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62fe8920b1b4547a32d37c510a822f37c8cdc845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:06:36:62:61:02:78:9d:5b:07:f1:0a:a3:
f2:95:e0:1e:81:91:5d:c5:a3:74:ed:a5:70:16:83:
e2:db:13:d6:a5:7f:e8:f7:d0:26:23:ff:b1:cc:78:
08:bd:69:6a:8a:f7:b7:3f:4f:58:97:cd:ec:06:ef:
4d:79:d9:b6:c2:c7:f8:a0:e6:b1:71:79:73:ad:82:
89:e7:1e:45:17:49:ea:9c:8d:da:f1:7b:d5:33:a0:
92:04:73:45:f6:8f:f3:3f:9a:5c:7b:9e:74:0d:1c:
98:39:5f:85:b0:5c:21:ca:85:d8:37:7d:2e:8c:5b:
70:49:80:03:ba:83:83:49:cd:bc:5b:41:62:c9:4e:
36:66:85:0b:b0:81:be:56:38:05:3c:b0:51:03:e2:
98:a9:88:be:0a:e6:15:3e:84:e5:f0:88:28:cf:81:
db:e3:17:b5:54:70:ad:54:90:7b:91:6d:2f:2e:5e:
04:a3:08:6f:1d:fd:67:09:24:d8:ec:50:39:3c:dc:
13:70:5b:bc:72:00:0b:bf:6a:cd:11:1e:90:fb:23:
6d:9b:3c:18:53:b8:c3:16:75:e9:ea:16:01:b9:c8:
82:ae:4d:0d:1d:8e:ef:04:85:40:16:c2:ae:c7:28:
58:84:89:5f:2c:6b:38:60:df:10:e6:15:fa:a0:d5:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:89:20:B1:B4:54:7A:32:D3:7C:51:0A:82:2F:37:C8:CD:C8:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yv6JILG0VHoy03xRCoIvN8jNyEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:30:13:08:96:6c:f0:b6:e3:2a:9f:0f:4d:f7:7c:7b:67:19:
54:21:cf:f4:06:f0:f2:f8:a9:5e:79:fa:18:65:db:b8:47:ee:
ed:13:8e:c4:0a:9d:3a:28:82:fc:bf:63:ff:0a:a8:df:34:e1:
5b:32:65:fb:c0:ce:07:ff:8f:5a:74:ea:e6:f9:da:e8:64:e2:
3a:3a:f1:1c:91:18:56:7b:7c:f7:d2:b0:68:87:2e:41:f3:ef:
bd:d7:ed:ad:6e:96:f3:28:b2:74:33:24:da:d3:5e:cf:85:88:
3b:33:98:cb:a9:c4:a3:63:03:99:80:0a:71:a1:b7:e4:2a:85:
da:24:ac:59:b8:9b:2e:cc:28:64:dc:e0:ba:83:24:55:3b:83:
11:cc:12:b0:15:93:aa:af:7d:3e:fb:0c:26:95:33:ff:ac:05:
14:ca:9e:f9:7c:37:f0:42:52:32:ee:29:47:a7:78:ae:ad:d0:
67:0b:ed:91:77:0c:c0:09:79:bf:53:68:83:64:8c:16:7f:c6:
1d:1b:b1:01:f9:30:cb:70:43:30:5b:0d:b8:64:78:86:df:cb:
73:a5:84:8a:15:5e:18:b1:bb:93:2d:a9:55:64:86:b9:3e:95:
90:89:a8:5c:e8:98:51:36:0a:2f:4a:28:31:1a:e2:4f:5a:8d:
05:af:69:fc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgpntKXm2khL1DzrVUtuCwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE3MTIxMDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmZlODkyMGIxYjQ1NDdhMzJkMzdjNTEwYTgyMmYzN2M4Y2RjODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub0GNmJhAnidWwfxCqPyleAegZFd
xaN07aVwFoPi2xPWpX/o99AmI/+xzHgIvWlqive3P09Yl83sBu9Nedm2wsf4oOax
cXlzrYKJ5x5FF0nqnI3a8XvVM6CSBHNF9o/zP5pce550DRyYOV+FsFwhyoXYN30u
jFtwSYADuoODSc28W0FiyU42ZoULsIG+VjgFPLBRA+KYqYi+CuYVPoTl8Igoz4Hb
4xe1VHCtVJB7kW0vLl4EowhvHf1nCSTY7FA5PNwTcFu8cgALv2rNER6Q+yNtmzwY
U7jDFnXp6hYBuciCrk0NHY7vBIVAFsKuxyhYhIlfLGs4YN8Q5hX6oNWRawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGL+iSCxtFR6MtN8UQqCLzfIzchFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWXY2SklMRzBWSG95MDN4UkNvSXZOOGpOeUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKMwEwiWbPC24yqfD033
fHtnGVQhz/QG8PL4qV55+hhl27hH7u0TjsQKnToogvy/Y/8KqN804VsyZfvAzgf/
j1p06ub52uhk4jo68RyRGFZ7fPfSsGiHLkHz773X7a1ulvMosnQzJNrTXs+FiDsz
mMupxKNjA5mACnGht+QqhdokrFm4my7MKGTc4LqDJFU7gxHMErAVk6qvfT77DCaV
M/+sBRTKnvl8N/BCUjLuKUeneK6t0GcL7ZF3DMAJeb9TaINkjBZ/xh0bsQH5MMtw
QzBbDbhkeIbfy3OlhIoVXhixu5MtqVVkhrk+lZCJqFzomFE2Ci9KKDEa4k9ajQWv
afw=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:31 2025 by rpki-client