Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yd6BAPdXbuHzh8EBw_45YagFmA8.roa
File: yd6BAPdXbuHzh8EBw_45YagFmA8.roa (raw, json)
Hash identifier: k3GpfYw8XXaIQvI+4QpHggMVyVp+ELv9Aa8VHkRIRY4=
Subject key identifier: C9:DE:81:00:F7:57:6E:E1:F3:87:C1:01:C3:FE:39:61:A8:05:98:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018766FDD0819A729148BFAA96BCFFBB0B30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yd6BAPdXbuHzh8EBw_45YagFmA8.roa
Signing time: Sun 09 Apr 2023 17:08:42 +0000
ROA not before: Sun 09 Apr 2023 17:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:66:fd:d0:81:9a:72:91:48:bf:aa:96:bc:ff:bb:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 17:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9de8100f7576ee1f387c101c3fe3961a805980f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:44:52:b8:10:c3:38:c4:36:ad:a5:e6:30:
e1:c7:1b:b1:0c:8b:88:32:de:49:65:58:6a:81:68:
3d:5f:e8:a9:2a:15:56:6a:0d:bb:6f:b2:99:16:5d:
a1:32:65:cd:91:99:f0:55:f6:ea:a8:f2:c1:4a:0d:
5d:e7:86:36:8e:c3:d2:17:fc:62:30:30:2e:23:7f:
3c:cc:4d:be:43:ae:8a:12:dd:f0:32:f8:b3:b2:4d:
7e:de:98:b8:6f:2e:39:e2:01:05:3b:a9:6d:ac:2f:
85:12:f7:91:68:61:d1:2d:0a:d5:84:8e:bd:02:6c:
1a:29:14:e1:82:6c:24:1a:b4:3d:41:26:49:4f:21:
c7:69:13:e6:bd:65:82:5c:14:30:90:55:54:d1:ab:
c9:ba:6f:45:64:c3:92:b8:64:67:89:af:3a:dc:43:
d8:bd:69:f4:1a:54:88:33:de:65:8d:6a:fa:ad:83:
3d:ea:af:f0:82:c9:71:0a:f0:89:23:2b:aa:2c:f8:
eb:b4:00:c8:05:82:86:37:a7:a3:4d:10:ad:68:02:
d3:60:9f:07:e7:7e:c2:1a:d8:9f:0b:35:b8:e8:11:
f3:a8:db:ec:d0:0a:50:50:f1:ec:bc:42:a2:b2:04:
7a:27:85:1a:29:7c:6a:d4:d5:fe:35:3f:00:5f:02:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DE:81:00:F7:57:6E:E1:F3:87:C1:01:C3:FE:39:61:A8:05:98:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yd6BAPdXbuHzh8EBw_45YagFmA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:c4:53:4e:76:1e:17:a6:12:aa:9b:f9:f7:a5:91:32:e4:89:
e4:a0:85:83:72:64:39:b2:2c:c4:21:f9:24:1d:40:05:c0:38:
77:ee:44:5c:ec:e4:3e:5b:1f:0c:eb:e3:c6:46:a1:52:a3:86:
be:95:a1:75:cc:4f:4d:0e:71:f8:39:29:a2:93:27:fc:25:84:
35:8a:3b:25:51:4f:d0:00:d9:b3:8d:36:0e:00:08:fb:93:35:
ce:ce:4f:3c:12:7e:a1:c6:04:93:8c:68:50:89:0f:9a:cb:54:
d6:da:bb:55:c5:4d:36:a8:2d:3e:db:d7:00:1f:50:0f:78:55:
23:84:4a:14:8d:34:73:e3:75:01:0f:6f:44:cd:12:ad:68:c8:
41:ce:da:97:85:75:53:6a:42:d2:99:03:9a:22:99:da:58:47:
81:7b:dd:f4:0f:58:c2:4f:86:23:d8:4e:9a:c9:e4:0b:8f:f2:
40:82:32:70:c1:c1:d3:1b:69:ae:53:16:00:38:70:57:09:ba:
46:31:66:0c:5c:7d:a4:be:70:62:e4:96:93:f3:3a:97:c0:dc:
03:fe:8e:85:c3:58:5e:d9:5d:6a:72:0e:c7:8b:65:bb:ae:b5:
5b:b9:78:ab:64:74:92:a5:e5:d3:41:bf:86:24:aa:2f:e3:0f:
5b:45:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:50 2025 by rpki-client