Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yRbp4TWuKECBHcQZ9pBXGSLWLkM.roa
File: yRbp4TWuKECBHcQZ9pBXGSLWLkM.roa (raw, json)
Hash identifier: IR1ILiJ05+KFh9c8E99ptkJmKvavqYzh/71RaASIfSE=
Subject key identifier: C9:16:E9:E1:35:AE:28:40:81:1D:C4:19:F6:90:57:19:22:D6:2E:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869443062734F958634699AA31E2D1866B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yRbp4TWuKECBHcQZ9pBXGSLWLkM.roa
Signing time: Mon 27 Feb 2023 19:04:25 +0000
ROA not before: Mon 27 Feb 2023 19:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9442:f04d/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:94:43:06:27:34:f9:58:63:46:99:aa:31:e2:d1:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 19:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c916e9e135ae2840811dc419f690571922d62e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:da:e2:81:ac:26:2c:9b:55:25:f4:b5:a4:
64:b4:5a:ab:9c:e6:9a:61:09:68:b4:41:40:ca:de:
b9:00:d5:01:2f:7b:e8:3a:af:51:11:da:65:65:1e:
8f:ce:f0:22:56:15:b1:fa:2d:0d:fb:fd:9b:ea:1e:
ea:94:a0:02:5c:54:fe:83:2b:6a:04:86:f7:2d:35:
ef:c3:39:94:ff:56:3f:90:56:f8:5d:cb:44:43:1e:
17:f1:7d:5c:bb:12:c6:bb:7c:8b:9f:7b:a5:e5:e9:
c3:60:e5:1c:4c:9c:68:98:63:13:2c:de:06:10:89:
18:5f:80:e1:a1:b2:ab:75:11:0f:6d:ca:b0:5e:cf:
72:4c:6a:49:07:67:20:37:e3:94:ad:1c:25:a0:4f:
3e:ef:cd:35:7b:70:d9:68:f1:d9:45:d2:1b:e6:30:
ec:bb:e9:f3:04:67:94:76:45:34:3f:0d:47:99:1d:
67:27:57:35:4d:bc:6f:12:84:76:73:cb:07:d1:6d:
4d:db:1a:cb:80:b8:ed:49:8f:e5:48:40:0f:16:94:
d5:45:9c:76:b8:31:41:f0:c5:11:70:48:b7:61:97:
21:59:74:76:eb:b8:eb:26:4c:fd:21:bc:d3:e8:90:
71:73:ab:f2:69:82:52:be:27:ca:99:5a:b3:30:bd:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:16:E9:E1:35:AE:28:40:81:1D:C4:19:F6:90:57:19:22:D6:2E:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yRbp4TWuKECBHcQZ9pBXGSLWLkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:6f:61:3b:18:85:82:2b:20:34:b6:c9:12:6c:fb:75:46:19:
9e:7d:4c:64:de:5f:28:eb:ab:6b:fc:1a:80:3c:82:8f:10:e7:
2c:19:f1:2f:52:7a:ba:e9:6d:cb:40:ce:bd:41:59:e0:43:ac:
76:ba:dc:7a:fb:31:6c:a0:75:a3:84:74:64:91:e9:2d:67:59:
13:46:3f:40:4b:b2:4f:2a:dd:1d:c9:54:fc:46:40:bb:c3:1d:
86:69:e2:02:2c:3c:17:28:58:2c:b2:cc:03:55:ee:13:f1:c4:
80:d9:a9:b1:67:b5:22:ac:ae:60:db:39:a4:99:2a:4f:7d:96:
e7:fd:85:ce:a0:2a:13:cd:fc:23:47:d2:7d:c9:82:00:ed:b1:
f9:88:ef:25:df:bc:b5:88:20:50:93:a0:83:ec:ad:36:00:1c:
b0:6f:aa:0e:94:0c:31:98:b6:65:dd:a8:b8:d2:00:49:99:67:
5e:c6:2d:fe:57:ac:fe:d1:a8:8c:a8:3f:29:d8:55:ad:53:52:
ed:82:b6:11:df:26:eb:ea:58:eb:9a:32:f5:b2:90:45:30:47:
40:28:4b:2a:57:75:1a:0f:c8:7a:c2:60:fb:a8:c7:10:03:74:
8d:e4:e2:1b:2f:6d:be:fa:aa:c9:a0:78:81:b2:be:88:f9:d8:
b5:9f:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:50:12 2025 by rpki-client