Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yPYunrKfWqmfYR_VsCWrlKKjA48.roa
File: yPYunrKfWqmfYR_VsCWrlKKjA48.roa (raw, json)
Hash identifier: I1sCn+RRg/OPxmfL4Tpg8LJYZMTZzsCkdnlBGJBkz4c=
Subject key identifier: C8:F6:2E:9E:B2:9F:5A:A9:9F:61:1F:D5:B0:25:AB:94:A2:A3:03:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018571877AE16820BD20834FA1E1FE8A3DAF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yPYunrKfWqmfYR_VsCWrlKKjA48.roa
Signing time: Mon 02 Jan 2023 08:09:42 +0000
ROA not before: Mon 02 Jan 2023 08:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:87:7a:e1:68:20:bd:20:83:4f:a1:e1:fe:8a:3d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 2 08:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8f62e9eb29f5aa99f611fd5b025ab94a2a3038f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:f3:35:0f:2e:85:2b:d3:47:aa:33:b4:a8:
e6:44:d5:c4:e6:4e:24:02:71:a4:9b:c3:e0:37:59:
86:f4:d6:7d:5f:77:f2:81:09:7d:d0:6d:d2:c7:bb:
f1:d9:23:eb:2b:c7:a3:c4:42:0b:22:95:e1:43:47:
66:68:0f:89:58:ec:dd:a7:c5:43:d6:da:75:10:bd:
ad:28:a1:42:95:53:d2:41:28:c7:7f:af:2d:52:7d:
53:29:b0:33:cb:bd:e1:ab:d5:d4:5b:ba:70:08:1e:
14:b0:2d:2c:3a:2a:61:bb:f2:e6:f6:0a:f3:a7:16:
bb:cf:eb:78:be:5d:4e:1f:ff:06:34:1d:c1:46:c5:
7c:af:c8:d2:40:12:cb:c2:e9:84:d4:30:d1:f1:ca:
57:95:22:8b:1f:64:15:05:be:26:48:50:94:92:66:
3a:97:22:60:d5:84:ef:c4:b2:e0:01:12:7e:9f:1f:
80:1c:6e:f0:cd:8f:fe:a1:b1:c8:a2:29:e8:5d:8d:
27:fe:78:e2:65:38:b0:89:e6:a8:e5:79:0b:07:73:
66:5b:fb:fa:e5:a2:49:21:8c:fc:45:45:33:c8:34:
84:9b:ef:57:9a:f0:a2:ed:e5:af:f7:21:e9:8b:6a:
f1:a1:04:a7:d0:91:57:19:b4:31:92:f3:fa:76:ea:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:2E:9E:B2:9F:5A:A9:9F:61:1F:D5:B0:25:AB:94:A2:A3:03:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yPYunrKfWqmfYR_VsCWrlKKjA48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:5e:e8:2e:8f:40:0a:a9:e3:84:ab:e8:16:24:8d:ac:b2:4f:
55:3f:59:ed:03:99:fe:b6:9d:07:84:d6:9a:ad:34:2a:27:0f:
33:94:81:ef:ef:e2:44:a7:9f:62:5e:26:ae:69:33:8c:df:83:
ef:e6:78:83:5f:28:41:5d:a0:df:f9:c1:7b:32:a5:ee:c9:dc:
8f:2b:a4:19:26:20:7e:74:56:68:cf:65:a6:37:3b:7f:c9:d5:
d1:f7:92:25:a5:58:5e:be:b6:b3:12:ac:9b:65:cf:d1:01:dc:
92:1c:c3:86:53:2f:27:85:e6:ce:6d:59:37:25:a6:a6:13:9b:
5c:b1:dc:19:c0:7b:82:50:1a:09:9d:5f:5c:ac:b2:70:cb:06:
6f:0f:57:94:1e:dc:f7:c0:cc:01:46:f2:66:d2:45:e4:b9:d8:
b4:fa:5d:2c:35:1f:da:d6:36:a3:87:f7:4d:da:28:3f:3f:c4:
c0:70:37:f0:a1:be:83:29:a6:c0:87:e7:20:08:12:54:13:2b:
7b:ce:80:b7:44:48:e3:fb:84:93:65:73:1c:db:09:16:80:88:
29:e8:13:27:87:28:c3:a2:90:90:12:62:91:a8:3c:95:6b:0e:
f2:ca:f0:7f:e1:52:46:4d:5c:76:52:32:33:a2:78:f7:69:77:
16:75:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:21:37 2025 by rpki-client