Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yBHlcUcdnO2Vt7iS63PfBp-Pq7M.roa
File: yBHlcUcdnO2Vt7iS63PfBp-Pq7M.roa (raw, json)
Hash identifier: pdjnDmNvNu/BINm9j55drUISkFFhEi9TmzrRAZJX5pA=
Subject key identifier: C8:11:E5:71:47:1D:9C:ED:95:B7:B8:92:EB:73:DF:06:9F:8F:AB:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DB1476F750AFE583E28A5E29148D4974
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yBHlcUcdnO2Vt7iS63PfBp-Pq7M.roa
Signing time: Wed 09 Aug 2023 16:14:58 +0000
ROA not before: Wed 09 Aug 2023 16:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:14:76:f7:50:af:e5:83:e2:8a:5e:29:14:8d:49:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 16:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c811e571471d9ced95b7b892eb73df069f8fabb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:21:17:bf:c8:18:de:73:c2:8c:05:62:bd:
72:32:d0:cf:ab:fc:32:fb:80:6c:cd:31:4e:41:94:
60:01:3c:af:7c:87:91:96:30:1d:38:41:a4:25:88:
d5:32:54:15:76:82:4c:31:85:6d:c5:3f:e0:10:1b:
f4:4a:9d:a2:60:30:10:39:56:2e:d6:84:81:e6:c2:
e0:57:94:36:07:a4:c1:d7:97:94:60:4a:30:97:92:
b8:91:82:cc:43:d7:9d:a3:b7:14:fe:1d:6b:1d:84:
b6:4b:65:c3:3e:a2:98:00:5d:c4:1e:31:a4:1d:4b:
c1:c3:91:8e:98:df:65:b1:ba:8c:84:5b:5a:46:0c:
79:14:19:7a:5f:f7:0d:2f:3b:e6:d5:09:98:72:f1:
6a:47:eb:83:da:26:09:97:fe:c9:e4:0b:a0:6e:48:
37:60:e0:87:86:71:b1:49:2b:07:89:0c:81:1d:25:
32:a5:83:2f:c8:b2:79:e0:cc:90:5d:d0:87:34:e4:
f6:a7:a4:2d:53:f0:26:eb:94:99:6e:d7:43:6d:94:
48:52:9e:3b:ed:3d:78:6e:cd:15:5f:13:6b:20:49:
ed:6e:17:a0:5b:63:5f:19:6f:22:0a:ba:e3:5d:f6:
d2:b8:c1:e9:c4:bc:d7:2e:c6:1c:cf:3e:1f:3e:b2:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:E5:71:47:1D:9C:ED:95:B7:B8:92:EB:73:DF:06:9F:8F:AB:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yBHlcUcdnO2Vt7iS63PfBp-Pq7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:b2:aa:13:93:d3:c3:90:b9:f0:66:44:76:60:de:82:2e:ff:
b2:a2:31:27:e7:07:53:5e:85:2b:a3:46:b7:c2:ee:7b:dd:7a:
1a:8e:26:6f:40:44:0c:cd:51:2d:db:71:48:67:7f:12:6d:6a:
4c:e0:47:05:49:a8:3c:23:d4:18:37:9c:c5:89:7c:eb:08:cc:
a0:4a:f0:a4:b1:2b:e0:33:8d:96:58:7c:58:6c:68:25:16:0c:
7d:89:29:21:76:78:c6:df:a6:cd:1f:7c:da:5d:64:07:12:f8:
94:d4:ed:f7:2a:ba:2a:0e:27:1c:9a:ce:57:fe:d9:31:e9:a8:
c2:09:f7:2f:28:28:ff:b1:79:cd:98:1e:84:b2:18:74:9e:aa:
f4:b4:5d:72:2b:ce:76:56:60:75:8c:81:7e:72:08:a1:1b:dc:
dc:cf:ba:5c:31:92:74:af:af:c8:19:05:84:09:a3:10:f7:99:
19:5d:64:23:f7:4e:a0:e6:9c:a1:f4:8e:00:6e:f1:5b:f4:ac:
e8:e0:b4:cc:ce:12:22:94:0c:c8:4e:e3:62:db:d0:1a:c8:41:
37:e7:bd:26:8e:77:2f:5e:1b:77:fd:20:3e:8f:ac:d1:03:37:
d4:5e:38:cf:be:79:b9:8b:5b:62:0d:9c:ac:8a:68:f7:2b:71:
d9:db:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:34:09 2025 by rpki-client