Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yVVcDKz-2W8brjhvvG_yB3bKWkg.roa
File: yVVcDKz-2W8brjhvvG_yB3bKWkg.roa (raw, json)
Hash identifier: Q3dPobEaPX0/4WJoAiZB6gG+C/5/7BBzisbNfdMcXqw=
Subject key identifier: C9:55:5C:0C:AC:FE:D9:6F:1B:AE:38:6F:BC:6F:F2:07:76:CA:5A:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018821E499103E28EBE5C2D31DECDEC3A681
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yVVcDKz-2W8brjhvvG_yB3bKWkg.roa
Signing time: Tue 16 May 2023 00:10:09 +0000
ROA not before: Tue 16 May 2023 00:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:21:e4:99:10:3e:28:eb:e5:c2:d3:1d:ec:de:c3:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 00:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9555c0cacfed96f1bae386fbc6ff20776ca5a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:0f:71:e9:76:9d:2a:21:d7:e8:3e:3d:e5:
27:04:33:de:2b:fd:47:56:60:f2:f2:59:4c:1b:d0:
ed:28:35:b6:5b:67:f9:49:a0:6f:5d:fb:92:af:0d:
06:6c:b0:04:e4:38:ef:c0:73:31:e5:c9:00:2b:c7:
70:a7:b2:9d:ed:65:55:0d:33:69:d8:5e:5e:59:b7:
71:0c:c0:23:46:2e:6d:be:2f:bb:90:bc:b7:b1:77:
b3:e8:1a:56:a3:7d:23:6c:67:b4:08:18:4a:d5:d4:
bb:d7:4a:4f:97:13:4f:49:9f:9d:54:50:20:df:b9:
67:6c:09:b4:d7:48:86:e7:ae:ba:4a:87:4e:b0:42:
0b:42:a5:c0:b3:03:32:3d:94:75:65:7f:50:0d:17:
e7:34:c6:23:cc:d3:a6:75:bd:b8:2c:fa:09:32:72:
50:0f:33:ee:91:cc:21:0a:84:11:63:32:8e:5d:e3:
a0:7a:0a:ca:bc:5f:b6:de:67:75:eb:4f:09:47:7e:
ec:fb:27:6a:c1:14:69:a4:ab:11:cd:35:2a:f1:e5:
7c:94:08:d5:a9:dc:8e:66:0d:a4:2d:d4:ad:27:a8:
ca:0e:6d:78:79:14:44:34:40:f4:b7:b3:02:21:ed:
b4:32:43:6b:5b:6f:36:4d:b9:3f:21:e1:fb:3a:41:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:5C:0C:AC:FE:D9:6F:1B:AE:38:6F:BC:6F:F2:07:76:CA:5A:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yVVcDKz-2W8brjhvvG_yB3bKWkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:aa:4b:c6:88:27:58:a5:d7:69:ff:a7:36:08:d7:23:45:97:
9c:47:35:ad:6a:bd:0c:93:03:4f:55:d6:9b:89:94:75:1e:70:
2d:da:a3:04:c3:f9:d2:71:7e:bd:a5:35:f5:3a:f2:cb:13:1e:
4b:ac:37:f7:38:b1:84:fb:9b:14:94:2e:7c:b5:99:0f:d7:21:
d6:4f:04:e8:2e:5b:09:dd:89:11:2f:45:95:69:4b:c8:da:86:
1b:41:cd:f7:de:6e:6b:21:dd:06:e4:f8:aa:14:55:f4:0e:76:
7e:8b:b4:bd:62:0c:6a:2d:ed:92:40:a6:53:1c:27:15:17:6a:
04:d5:a8:b2:b0:1a:c7:6a:a2:33:02:f1:c5:56:68:f0:7b:f0:
ff:85:ae:1d:d8:3a:0c:56:df:a2:bc:62:9d:1d:7c:d3:f7:b9:
ad:c0:eb:7d:f3:1d:f1:3a:4f:1e:61:af:7f:f8:b1:92:70:95:
26:2f:0e:bd:10:af:4f:ab:02:ba:da:83:33:b9:0a:e2:20:ac:
ca:5f:8b:b5:e3:64:09:f4:96:33:b8:dd:7e:cf:94:6b:93:5c:
fd:e6:da:d4:9c:37:45:82:bf:dc:a3:b8:34:45:2c:e5:8f:26:
3f:97:ef:6d:71:78:45:e2:ea:10:36:0e:b4:fb:09:a8:d7:40:
4a:17:12:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:17:32 2025 by rpki-client