Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yewRLB1C7iD50uC865TqjEq-l7M.roa
File: yewRLB1C7iD50uC865TqjEq-l7M.roa (raw, json)
Hash identifier: qX37SpIeh4DLtxBoX388gw4SzCOH2cXRuqNhmbUDTJc=
Subject key identifier: C9:EC:11:2C:1D:42:EE:20:F9:D2:E0:BC:EB:94:EA:8C:4A:BE:97:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184692EC5066920B039DB6686962E188307
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yewRLB1C7iD50uC865TqjEq-l7M.roa
Signing time: Sat 12 Nov 2022 00:13:03 +0000
ROA not before: Sat 12 Nov 2022 00:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:69:2e:c5:06:69:20:b0:39:db:66:86:96:2e:18:83:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 12 00:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9ec112c1d42ee20f9d2e0bceb94ea8c4abe97b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:a6:90:80:e5:ba:76:e7:00:d8:a7:f4:ec:
68:73:68:03:49:7b:2c:01:30:85:08:62:e1:2a:8c:
f6:64:f6:b4:95:05:7e:e1:9d:1f:f8:41:f7:84:9e:
f5:8e:16:a5:5b:fd:a4:53:f6:70:b5:42:65:17:fe:
26:3a:92:0a:55:6a:e5:f3:8c:c0:b6:0c:42:d4:1c:
ae:0b:99:27:fc:9a:44:b5:66:00:88:b6:a4:27:c9:
cd:fb:eb:74:af:cd:57:19:cb:4d:e4:69:bf:34:3f:
2a:d1:c1:8e:1b:f0:7f:5a:0c:50:ef:6d:89:0d:f2:
eb:5d:16:a3:69:13:fe:45:7f:f5:54:c5:89:62:a9:
e9:78:1b:bb:25:04:7f:61:74:0f:40:6f:67:b0:d1:
74:37:83:a1:d3:af:60:d7:32:6e:9a:7e:a4:5a:19:
55:78:ff:01:37:ee:32:84:09:aa:a2:51:28:56:84:
7a:29:89:0d:1a:c4:8b:f1:f8:ac:10:cc:fc:93:c9:
1a:50:ff:d3:d6:0b:dd:d8:98:16:7e:48:e6:61:7f:
55:6a:c3:0e:f3:b4:c3:de:bb:ed:87:9b:db:8c:3e:
d5:66:93:0d:6e:64:b1:6a:76:dc:a4:54:74:55:ef:
5c:77:9f:27:ba:1d:92:b2:b6:f7:16:b2:83:b0:5e:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EC:11:2C:1D:42:EE:20:F9:D2:E0:BC:EB:94:EA:8C:4A:BE:97:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yewRLB1C7iD50uC865TqjEq-l7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:86:c1:4b:66:04:59:fa:1f:fd:03:7b:ff:e2:c8:5c:dc:76:
8b:82:7b:35:f7:40:50:c1:4a:5e:85:67:fa:19:37:7e:a5:29:
11:97:ca:be:e9:43:06:d2:fb:b7:f0:f7:0b:a7:ff:02:fa:7d:
89:e9:2e:67:c6:f4:de:d9:1b:b6:57:7e:53:f6:61:eb:d3:3a:
19:32:99:bc:93:17:9a:eb:db:5c:3f:34:97:7f:f5:d5:5d:53:
5f:a7:00:3d:8c:9e:08:d5:fe:56:c8:a4:8e:c6:3a:3d:4a:67:
82:19:d6:8c:46:7e:78:35:20:b0:c7:b2:d5:e6:01:3b:3c:35:
92:3c:1f:da:24:97:1d:02:0f:48:63:c0:ba:96:a6:68:dc:01:
a8:56:f6:42:1d:3e:78:e1:d0:22:27:4a:1c:ea:b1:b0:78:f5:
93:7f:b4:a7:1a:8f:51:c2:80:60:5e:67:88:15:d8:6f:1d:73:
d4:c6:7d:0f:fd:9a:a2:90:7a:8e:25:2c:be:3a:64:c5:01:f0:
11:30:d6:c3:29:ff:dd:17:2f:64:bf:cd:9f:70:71:4c:22:1b:
be:3b:9f:e0:e6:70:36:28:a1:e4:d5:1a:76:65:53:41:f8:45:
c6:6c:ee:67:89:5e:5c:2f:e1:d5:b0:d2:aa:f3:d4:7d:0c:e3:
d7:ed:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:15:18 2025 by rpki-client