Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yT6R6an1-t0PVb6cocZazloqplY.roa
File: yT6R6an1-t0PVb6cocZazloqplY.roa (raw, json)
Hash identifier: G+9GC+nsYXAdsP2LBEq+1dfcrbV3FjAFo7eXcPHdtQc=
Subject key identifier: C9:3E:91:E9:A9:F5:FA:DD:0F:55:BE:9C:A1:C6:5A:CE:5A:2A:A6:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182AE818A7A5D814F54D6CA58AF88A45F65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yT6R6an1-t0PVb6cocZazloqplY.roa
Signing time: Thu 18 Aug 2022 01:11:41 +0000
ROA not before: Thu 18 Aug 2022 01:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ae:81:8a:7a:5d:81:4f:54:d6:ca:58:af:88:a4:5f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 01:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c93e91e9a9f5fadd0f55be9ca1c65ace5a2aa656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:99:80:9e:45:5c:d6:20:b2:75:a6:6b:1a:
e6:41:4a:2e:39:1c:75:38:53:36:9b:a8:8b:f9:e4:
ab:7b:e4:3d:fb:88:99:4d:32:f5:8a:91:56:ca:34:
24:60:86:00:e8:5c:f5:58:fd:6a:ec:8d:cd:10:10:
1c:ef:bc:fd:72:60:48:14:ca:9f:4e:76:84:11:08:
78:43:33:b6:44:34:83:7b:c5:e2:88:21:8a:16:c6:
a1:1d:ae:d9:da:58:48:05:dd:41:e7:d1:c8:fe:df:
8a:70:68:bf:5b:cf:b5:a4:46:78:cb:6f:ee:0c:f8:
3b:09:51:13:b1:f3:94:f3:1f:92:ac:a6:c0:f3:6f:
da:ce:50:14:fb:8a:ae:12:ca:0b:18:f6:01:72:91:
02:b8:61:29:3c:4a:58:7a:a4:d8:d4:8f:69:2a:bc:
2a:de:1b:70:e5:a6:88:5c:cb:55:81:1e:db:35:21:
00:df:05:67:9a:8c:f1:36:68:26:f1:16:4a:d3:a9:
59:27:29:2d:87:ed:43:6c:ae:68:83:40:a0:bf:62:
b5:4e:ed:0b:fa:10:b6:ae:3d:33:5f:93:45:49:6b:
43:3d:9a:65:36:70:85:5f:a0:04:49:ac:57:c6:fa:
24:64:e5:33:fd:0b:da:bb:12:db:bc:04:05:85:9e:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:91:E9:A9:F5:FA:DD:0F:55:BE:9C:A1:C6:5A:CE:5A:2A:A6:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yT6R6an1-t0PVb6cocZazloqplY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:72:c1:39:24:97:34:a8:ac:bb:81:5a:c9:d8:e2:db:5e:04:
b5:f3:24:13:56:88:a5:05:37:4c:ff:6f:58:ce:ba:e3:12:fb:
5a:88:0f:1f:dc:eb:de:c4:64:e3:b4:4c:63:44:a3:1a:03:a9:
e1:12:13:81:3a:69:19:1c:a0:cf:fb:12:b7:1f:c1:80:30:11:
83:87:99:0f:2c:ff:9e:b3:93:96:45:3e:54:a7:17:44:5a:76:
b6:a2:f3:e0:99:5a:51:92:5f:56:e7:2b:06:52:16:4a:63:4a:
84:21:ef:74:d8:d0:95:76:96:ff:e6:ea:b1:52:4b:af:0e:87:
63:2f:cf:fb:08:62:c7:18:95:2f:84:88:28:62:2c:88:e9:80:
28:27:0c:22:a5:c5:b9:af:cc:fc:e2:17:ba:eb:2d:f3:fa:60:
7d:6e:c0:f8:19:1d:10:82:da:ba:f7:72:bb:75:9c:02:76:4a:
4e:7e:9f:c8:04:e5:12:b4:55:d5:69:80:1b:28:33:24:74:34:
51:15:99:b5:36:1e:1f:de:1b:6f:49:93:64:a3:5e:8f:31:39:
80:12:ee:d7:c9:bc:74:f8:b9:e6:d2:fd:1a:a4:d1:1b:d6:4b:
f7:4a:5a:09:80:29:e0:09:e6:cb:d2:48:20:35:f7:a8:1f:f6:
a4:08:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:58:30 2025 by rpki-client