Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yQLtM8Rck_aPh9BY2KBB6y4gIfI.roa
File: yQLtM8Rck_aPh9BY2KBB6y4gIfI.roa (raw, json)
Hash identifier: RqP7r6f341AI1lbUsb+JDhrxKotemAF5+lVqWopLjoo=
Subject key identifier: C9:02:ED:33:C4:5C:93:F6:8F:87:D0:58:D8:A0:41:EB:2E:20:21:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FAA69873D76C0E4C2AB11EED36953BBC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yQLtM8Rck_aPh9BY2KBB6y4gIfI.roa
Signing time: Sun 19 Mar 2023 16:14:27 +0000
ROA not before: Sun 19 Mar 2023 16:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fa:a6:98:73:d7:6c:0e:4c:2a:b1:1e:ed:36:95:3b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 16:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c902ed33c45c93f68f87d058d8a041eb2e2021f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7a:19:2e:ef:ac:b3:90:9b:d7:e0:93:d2:7d:
72:39:27:51:a9:58:78:86:4b:5a:28:2f:8f:3f:ab:
6a:2c:c9:ca:b9:42:48:a5:14:b2:9c:a2:9d:b1:76:
05:de:5f:e9:24:9c:5a:88:a9:ba:36:9e:0f:24:43:
8f:d1:1e:e5:a2:04:a0:49:47:58:82:5e:8e:3a:31:
6d:b0:8f:c1:e3:c0:09:83:90:c8:60:34:5d:2a:5a:
86:57:cd:a6:e6:d6:f1:19:9c:c1:c2:be:30:1f:f3:
52:cd:bb:14:f9:e3:1e:4b:4f:d0:f0:c7:7c:a2:b2:
99:c7:93:7a:5d:23:5e:0b:ce:a0:04:d5:9e:27:21:
7d:d4:43:9f:88:d4:3e:ac:b8:be:15:d5:88:3d:54:
dc:de:0c:76:40:bb:ef:4b:74:c9:6b:9a:78:4a:2b:
23:c1:32:0c:27:ef:4b:b0:4c:8a:fc:47:4b:d0:3d:
4f:7d:a3:35:7e:d7:97:57:b9:58:18:a5:93:a5:a8:
c3:ad:31:96:2a:ce:ee:20:a4:9c:0d:29:9f:0d:cf:
58:18:59:4c:ed:f2:41:14:87:47:41:3c:be:a9:46:
20:3c:c8:04:9b:ea:1c:4a:7b:94:a3:e6:e6:56:1f:
d8:88:62:2a:0c:0f:ce:b2:22:a4:f7:77:ae:84:d9:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:ED:33:C4:5C:93:F6:8F:87:D0:58:D8:A0:41:EB:2E:20:21:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yQLtM8Rck_aPh9BY2KBB6y4gIfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:28:de:59:a1:eb:94:b6:bd:4a:d3:8a:53:0f:69:2f:33:56:
bc:15:2b:ad:f1:bd:56:cb:ce:20:e3:06:fb:90:d1:28:fc:ff:
33:45:51:8a:48:1b:fc:ce:ee:ac:d0:07:70:ba:96:1d:fe:fb:
7d:19:4a:08:e0:67:4b:e6:cf:cc:8b:20:04:90:3b:7f:32:48:
26:1b:c2:a2:8f:77:91:10:39:d9:81:10:c5:fb:71:6a:85:95:
a2:2f:04:fb:42:ad:04:15:11:05:d1:8a:c1:9e:7e:56:54:1c:
a9:e7:24:74:fe:2a:42:59:06:31:1c:c0:59:51:9a:aa:45:c9:
2b:73:01:60:09:2f:78:62:1f:6c:b0:01:72:90:72:ca:2b:30:
2a:28:48:56:3f:b8:bc:19:99:2c:97:21:da:c4:fd:7c:40:c5:
96:5a:c6:b9:b2:52:fc:bf:f0:dc:d0:c9:d1:b9:8f:ce:da:09:
1b:2e:4c:00:d8:8c:0b:9c:a9:21:4a:5b:e6:f1:c8:57:92:5f:
27:58:a2:8e:ba:22:01:39:0a:91:27:a8:9b:e9:16:07:a7:7b:
bd:5a:8f:c0:d4:83:52:f4:67:32:e3:0f:19:08:a8:fb:53:93:
92:35:8b:df:ee:d0:c0:01:63:e2:4d:d1:ed:c5:f4:f8:03:b5:
57:34:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:26:46 2025 by rpki-client