Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yOd_3DquVIlS_L6PnXuv1nBTVv4.roa
File: yOd_3DquVIlS_L6PnXuv1nBTVv4.roa (raw, json)
Hash identifier: lunG0+GtnuESZmdBOl/U6ImE4m7q9zwF8KAuzOEDtrk=
Subject key identifier: C8:E7:7F:DC:3A:AE:54:89:52:FC:BE:8F:9D:7B:AF:D6:70:53:56:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A047DC11836314CC1B79411CA42ADA914
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yOd_3DquVIlS_L6PnXuv1nBTVv4.roa
Signing time: Thu 17 Aug 2023 17:14:24 +0000
ROA not before: Thu 17 Aug 2023 17:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:7d:c1:18:36:31:4c:c1:b7:94:11:ca:42:ad:a9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 17:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e77fdc3aae548952fcbe8f9d7bafd6705356fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:be:79:24:d1:47:04:ca:71:b3:6f:71:1d:
b5:05:33:41:8b:b1:1d:ce:fd:04:38:4c:c1:9b:60:
35:31:d8:dc:fb:f9:8b:86:b3:78:cb:62:f7:e2:17:
6c:0c:93:f3:d0:59:5f:6f:be:8e:0a:9d:b6:5b:8d:
fc:0a:e7:a3:63:05:ad:fb:16:6c:b4:f7:cf:4c:bb:
79:8a:1c:25:39:e5:c1:ec:c6:ae:dd:aa:18:35:f7:
8c:4e:5a:a4:ab:62:18:ee:bc:e5:84:a3:73:f5:1e:
6b:81:23:f1:40:b2:64:5c:c3:2d:3a:cb:f4:78:76:
7a:77:9f:df:2c:ef:52:a0:4e:2d:28:4e:25:8c:dd:
d3:1d:1b:ec:4e:b6:76:e5:72:df:6c:8d:97:06:b4:
3d:3a:ea:91:e5:63:30:d3:73:f6:6a:dc:63:c2:74:
65:2a:de:c9:45:2c:7d:d0:75:75:ae:c3:20:f0:bc:
e7:bd:95:2c:15:01:f4:e9:de:19:9b:bb:12:bb:c6:
c7:15:cc:6a:d5:80:a8:b8:55:9a:ba:cb:15:7c:1a:
f7:0f:79:bc:63:13:d9:13:9a:61:83:00:3f:66:26:
b3:ed:0f:af:89:17:f3:b2:26:8c:46:ef:ad:60:f9:
cc:bb:4e:3f:a9:74:82:32:d8:fb:d9:62:b7:9f:1f:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:7F:DC:3A:AE:54:89:52:FC:BE:8F:9D:7B:AF:D6:70:53:56:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yOd_3DquVIlS_L6PnXuv1nBTVv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:24:71:2e:f0:9a:14:92:77:ea:cc:e3:c2:72:7f:e0:c0:65:
90:d2:b3:3e:18:f2:67:59:54:cb:a1:25:97:b4:92:54:23:b0:
d3:31:0a:7e:54:c1:e8:67:3d:f4:8c:fd:ca:0e:9b:2f:26:36:
30:d4:e1:c7:84:46:19:b3:fb:72:f2:5a:8c:e8:a1:e6:f3:91:
43:d0:77:16:58:92:07:a8:ba:84:80:58:04:29:95:a8:e2:77:
e4:fd:7b:b2:73:e1:dc:fe:32:97:48:76:b3:93:1c:67:53:c0:
34:d1:44:b4:78:36:50:e4:43:5b:9e:25:fe:83:17:f1:77:5a:
64:6c:ea:7b:9c:f4:b9:f0:e5:f4:0b:99:f5:0b:83:2a:df:af:
8e:2f:89:8d:2c:89:03:4e:95:b9:6a:cf:3f:41:4a:60:d4:24:
07:19:19:87:5b:f6:39:36:25:fc:a9:20:be:b8:11:79:db:e1:
55:68:7e:09:c4:43:d4:7c:97:75:96:df:d3:8e:cd:c7:f4:dd:
b7:31:db:32:da:03:bc:52:a4:6b:cb:d7:e6:3a:cd:d1:f8:1c:
17:f0:45:2b:51:ca:9f:09:e4:c6:f8:f9:6e:cb:eb:87:da:86:
22:01:33:2e:66:b7:3d:b9:cd:65:3b:03:9b:89:ee:44:11:5b:
dd:f0:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:47 2025 by rpki-client