Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yVfwM0mhXKnO7Fa1luN93X9u56g.roa
File: yVfwM0mhXKnO7Fa1luN93X9u56g.roa (raw, json)
Hash identifier: gR16HlRm2TOqxhVD8UDfoVxdbXOkuYZ8fOyq4X8QD0M=
Subject key identifier: C9:57:F0:33:49:A1:5C:A9:CE:EC:56:B5:96:E3:7D:DD:7F:6E:E7:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826DECABBC4B3DA47CB6AA2E85CD6E9B8B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yVfwM0mhXKnO7Fa1luN93X9u56g.roa
Signing time: Fri 05 Aug 2022 12:13:23 +0000
ROA not before: Fri 05 Aug 2022 12:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:ec:ab:bc:4b:3d:a4:7c:b6:aa:2e:85:cd:6e:9b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 12:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c957f03349a15ca9ceec56b596e37ddd7f6ee7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:d7:b4:c1:83:95:19:9a:98:7c:52:bb:40:
60:14:a6:02:f3:67:42:b0:4e:32:f1:65:c0:03:ae:
53:09:13:a4:72:3e:a3:f9:2a:4a:eb:47:c8:2c:9f:
34:7d:a5:84:76:7b:98:93:36:68:05:dd:5a:1d:b9:
c8:49:64:b3:f3:20:97:38:f3:3f:0f:fe:ac:28:f9:
c4:22:be:9c:85:f6:e9:d2:14:bd:90:fc:26:0a:3c:
52:9f:b2:1b:12:19:a1:09:3b:57:da:01:32:69:a2:
59:c3:5d:b0:a3:2f:5c:6a:f9:d0:59:9b:7a:ca:fc:
b3:4e:ee:56:79:7a:36:09:c9:12:e1:ce:d8:84:d4:
2e:8e:0d:a0:c9:85:74:14:29:19:bb:aa:22:27:2d:
08:ee:68:0b:fd:7d:cc:3f:9a:7b:db:e2:5d:b4:1b:
95:67:33:00:1c:88:35:34:59:95:7e:33:6c:ad:6a:
e7:0e:62:47:6f:72:40:a9:5c:00:56:90:57:aa:ad:
d4:1c:5c:e9:5a:3d:3d:49:85:28:13:7a:be:91:19:
f7:fd:1f:ae:bd:42:df:13:09:06:41:6c:4e:4a:d3:
0d:a7:fd:ec:62:3d:24:52:b2:31:72:92:0e:3e:83:
45:ad:b2:0b:5c:db:3d:dc:a0:a4:2e:48:13:7b:f1:
ee:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:57:F0:33:49:A1:5C:A9:CE:EC:56:B5:96:E3:7D:DD:7F:6E:E7:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yVfwM0mhXKnO7Fa1luN93X9u56g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:f6:10:ca:90:84:b7:78:0d:a7:86:ed:2b:d2:f2:60:8c:74:
30:7e:40:b1:94:9b:46:c5:92:84:7f:ba:3c:da:eb:b0:d1:84:
bc:6a:96:33:a6:1f:b8:04:5c:b3:c7:af:c3:31:f2:20:fc:37:
4f:86:45:a6:a9:81:a7:6c:6e:fa:96:66:b3:5a:76:14:b6:d4:
70:1d:f7:c9:27:b3:4c:db:c1:1e:bf:ae:8d:5d:a3:5a:0c:06:
74:89:f5:7a:5b:f2:34:ee:ff:f9:eb:fd:c1:92:b8:c6:2f:10:
dc:09:65:20:4b:eb:f5:e0:f1:b9:31:dd:3d:c5:5e:78:4d:77:
63:99:f7:96:f8:56:2c:f6:06:98:07:16:8c:47:e2:e0:40:c2:
9c:9c:19:1e:7b:02:07:92:5b:e9:23:ed:cb:01:bd:04:ba:a2:
b7:88:8d:1e:3b:87:32:9c:da:56:9b:99:93:31:76:3b:3d:48:
f5:b6:18:2e:e5:d9:3d:07:4e:8b:55:39:0f:3b:24:6f:64:88:
c6:ed:ee:34:df:8a:a5:c0:fa:a8:55:f6:08:6a:c2:13:e4:96:
d5:73:92:57:f1:4a:20:49:ea:46:72:84:79:2c:5d:0d:98:76:
3d:1b:be:78:39:e8:9d:bc:40:ef:21:d4:04:d5:87:99:bf:43:
05:20:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:02 2025 by rpki-client