Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZajr6IUdax7jgffG1cwKFydNs0.roa
File: yZajr6IUdax7jgffG1cwKFydNs0.roa (raw, json)
Hash identifier: VR3OY+B+o4Ceh+8udViHCPcnlwFMplXP6wmvlgKTJpY=
Subject key identifier: C9:96:A3:AF:A2:14:75:AC:7B:8E:07:DF:1B:57:30:28:5C:9D:36:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A24B1B3E9217209D6A4A430893F31A36F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZajr6IUdax7jgffG1cwKFydNs0.roa
Signing time: Wed 23 Aug 2023 23:19:00 +0000
ROA not before: Wed 23 Aug 2023 23:19:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:24:b1:b3:e9:21:72:09:d6:a4:a4:30:89:3f:31:a3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 23:19:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c996a3afa21475ac7b8e07df1b5730285c9d36cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:60:39:5a:d1:d7:86:e7:05:a1:69:75:31:
33:8b:54:ce:0c:9e:8f:ca:f7:44:ef:63:c7:aa:96:
e2:d1:f5:92:0d:55:55:f6:f1:ee:95:23:01:bf:ec:
cd:2b:da:45:9d:a6:f0:74:80:8c:8d:16:ca:f2:d2:
87:0a:4f:4b:2e:f0:d3:1b:0b:20:46:cc:93:c2:05:
8d:62:95:13:48:e9:b0:2c:d9:76:23:4f:1f:e7:18:
a4:97:6c:59:10:1d:94:a2:4b:48:20:16:14:e4:b7:
b4:07:40:cf:24:42:c2:7d:5a:bb:3e:0e:f0:51:e8:
9f:e3:6f:c4:83:c0:c6:9d:8b:06:9d:f6:38:a0:8e:
ef:50:49:d1:25:fb:0f:f6:7b:cd:4f:ac:5b:12:27:
e7:ba:c0:57:ac:4d:9e:10:3a:55:b1:dc:89:e8:c3:
f6:f4:ec:11:c6:4f:87:70:57:69:d6:29:98:31:7e:
cc:8e:49:6c:9f:cd:67:9f:9b:4f:1d:d8:a8:61:df:
eb:2c:6d:0d:0c:4d:e1:dd:a5:5d:fe:88:27:2e:fd:
2f:3a:94:d8:84:cf:46:6c:4e:08:53:ea:50:45:b0:
d9:58:a0:94:61:c8:ec:b5:16:5a:d1:0a:b5:65:f7:
07:ee:b4:17:a0:25:a2:26:4f:4e:df:80:11:2a:93:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:A3:AF:A2:14:75:AC:7B:8E:07:DF:1B:57:30:28:5C:9D:36:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yZajr6IUdax7jgffG1cwKFydNs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:f0:65:cb:2e:a8:7d:58:89:3a:55:99:af:c7:74:d2:dc:f3:
5e:f3:c3:37:b8:ea:95:11:8b:ed:29:52:f5:51:8b:d7:85:a3:
3b:59:3b:2f:05:3b:0f:e5:0c:7b:84:92:9c:16:4d:42:8d:bb:
b0:83:69:73:8e:94:24:87:4b:2e:66:5a:12:df:bf:ce:1e:64:
68:ec:fa:3c:db:19:88:d4:87:60:eb:df:1b:1c:0d:3d:99:83:
c4:a3:01:db:83:c0:1e:0a:d3:e8:c0:bc:ae:66:6f:1f:b2:fb:
1c:8a:ea:08:81:db:74:99:c1:94:40:b5:e8:63:77:b4:22:6b:
5e:a6:27:07:d1:38:4d:0c:7e:a5:98:91:8f:e1:8b:9f:77:5b:
da:69:9b:e5:4a:dc:1b:d2:a2:84:e1:73:94:7d:0f:f1:f0:ea:
3a:c1:93:41:de:f8:7a:f4:de:cd:28:84:c0:a4:61:4a:ac:ee:
33:c5:29:66:87:d7:3f:9a:ad:53:58:76:89:d3:5c:d7:5a:6d:
8a:a4:1c:61:60:94:48:f2:04:de:3c:69:ff:7e:b6:28:6c:9d:
b8:00:0f:b6:5a:5a:33:8e:91:3d:17:0d:8d:5f:38:bf:80:e0:
a5:ce:20:38:0e:d3:b8:a7:d8:cc:1f:49:08:70:b5:89:74:26:
87:da:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:14 2025 by rpki-client