Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ySEr6zU5BSLsTOiTAu-hXThMpPw.roa
File: ySEr6zU5BSLsTOiTAu-hXThMpPw.roa (raw, json)
Hash identifier: K4DnHpMcmMK3+vWWNQprlIk7GXcMfdcSXYqgXYcAU4s=
Subject key identifier: C9:21:2B:EB:35:39:05:22:EC:4C:E8:93:02:EF:A1:5D:38:4C:A4:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71D16459
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ySEr6zU5BSLsTOiTAu-hXThMpPw.roa
Signing time: Sat 12 Mar 2022 04:09:59 +0000
ROA not before: Sat 12 Mar 2022 04:09:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909548121 (0x71d16459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 04:09:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9212beb35390522ec4ce89302efa15d384ca4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:f4:28:19:1d:ea:fb:0b:9d:65:3f:ab:a7:
c2:9d:10:9e:9f:b5:1c:88:d4:f7:50:5e:db:3f:48:
11:74:41:e9:c7:96:b6:bb:d1:84:86:e4:97:20:1b:
68:c9:ad:71:15:cd:60:37:70:0d:f3:74:06:94:90:
c4:bf:ad:f5:8e:4b:a0:36:ec:90:7d:a7:2f:9a:f0:
30:5a:13:d7:6d:8f:fc:51:be:0e:f6:90:5f:1f:a2:
d5:64:56:88:77:c6:03:e3:93:04:a9:f6:00:74:95:
74:d7:62:13:c8:41:c9:2c:c9:86:c4:2b:ed:56:3b:
5f:38:b6:09:d9:ad:a6:56:34:91:d5:b6:ed:ef:6c:
77:d8:84:e1:cb:c7:58:31:67:dc:16:11:73:02:23:
60:98:4a:3b:7e:53:99:f6:cf:8d:a3:51:de:59:b9:
6b:15:38:cb:be:00:76:1b:ea:f8:32:48:6f:06:f2:
b5:bb:45:8c:0e:63:0b:23:07:46:32:dd:63:73:6e:
0e:14:e8:de:62:15:f9:e1:e8:a8:40:a1:1f:69:6e:
a8:a4:b3:76:4c:8e:a2:25:8f:57:31:42:7f:f2:da:
07:e2:f6:a9:8a:2f:09:99:8a:3d:73:91:52:44:d7:
fa:d7:d1:4a:6a:d4:5e:fc:c2:80:11:74:f1:8b:d7:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:2B:EB:35:39:05:22:EC:4C:E8:93:02:EF:A1:5D:38:4C:A4:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ySEr6zU5BSLsTOiTAu-hXThMpPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:72:c5:3f:a8:79:e5:bd:a5:33:d0:17:71:8e:2f:40:11:ec:
f0:9b:43:30:b4:1a:7d:0a:b0:f1:85:1f:47:8c:ac:f0:57:c0:
2b:35:62:83:16:8b:0d:92:8a:43:a8:40:ae:af:05:75:3e:8a:
12:0e:a4:4f:92:74:dd:8d:e9:06:73:4a:03:95:a0:f1:ae:1e:
72:9c:b6:3a:4c:50:0d:0e:e6:80:a9:8c:de:42:4e:a7:6a:9d:
3c:0a:c6:b2:ba:bb:70:f4:f1:2c:1a:6b:87:6d:fd:c5:b9:77:
ff:32:11:9f:df:03:28:50:56:0d:6c:96:52:ce:74:2a:f5:3f:
71:86:fe:68:d8:ce:20:39:a4:e4:d2:5e:ec:4f:05:83:3a:29:
af:9f:24:02:9c:40:d6:5f:18:e6:59:cc:20:53:7d:eb:4b:c8:
96:ef:37:cc:7f:39:33:10:48:3c:1f:76:f9:b5:7a:b1:17:a0:
41:0d:67:9c:63:33:3d:12:b1:72:02:3f:b9:77:e0:c6:0f:94:
45:b0:80:36:94:0c:43:ff:43:ae:6f:92:04:2e:e9:a4:ba:57:
c3:dc:ca:7d:2b:28:58:44:bf:74:86:78:c4:3f:b1:fc:bb:53:
7c:8f:28:86:cc:71:c5:35:52:7c:5e:18:17:ed:52:41:7b:47:
35:10:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:43 2025 by rpki-client