Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yilbDstVjDzMUYpyo_Tp6bnbqzE.roa
File: yilbDstVjDzMUYpyo_Tp6bnbqzE.roa (raw, json)
Hash identifier: iyDeuRI6GQ/Qd1OymJlTSN4no6Ul21Y3TYYScv9TN0I=
Subject key identifier: CA:29:5B:0E:CB:55:8C:3C:CC:51:8A:72:A3:F4:E9:E9:B9:DB:AB:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870221E13C15804DBC2DCBE6499EAEB842
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yilbDstVjDzMUYpyo_Tp6bnbqzE.roa
Signing time: Tue 21 Mar 2023 03:06:27 +0000
ROA not before: Tue 21 Mar 2023 03:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:221:45e8/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:02:21:e1:3c:15:80:4d:bc:2d:cb:e6:49:9e:ae:b8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 03:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca295b0ecb558c3ccc518a72a3f4e9e9b9dbab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0e:30:49:5f:71:63:7e:2e:08:e9:dd:54:e6:
ec:25:34:ae:f2:bf:3f:79:f1:6f:94:ee:a5:22:73:
f5:80:13:a3:71:cd:78:83:35:a9:09:eb:76:81:b3:
7b:16:c7:fc:7c:25:f0:b9:d9:f8:b1:73:90:09:ba:
36:b4:eb:48:9c:e5:e8:fa:3a:c7:37:df:83:c5:1f:
4d:60:7a:ee:35:f0:dd:30:e7:e0:7a:e8:d4:a2:2d:
2c:83:55:a3:b3:ae:10:73:c9:9c:4d:c0:d2:c3:ae:
c7:1a:ae:00:b6:c1:38:52:73:64:cd:79:3a:ac:e9:
5b:c7:ea:e7:56:39:97:b5:24:6e:82:45:a9:01:2f:
09:e3:d2:38:83:b2:8f:75:73:c5:71:93:83:32:1f:
2a:5b:f3:63:b5:b5:f4:cf:96:65:5c:ca:20:5e:b2:
27:98:b9:d4:fb:51:fb:e8:3e:bc:33:75:80:c4:ff:
0d:59:2e:30:31:09:38:e9:e5:67:00:2b:52:d2:3a:
6a:cb:96:e1:e2:79:23:4d:69:66:b7:04:0f:b2:06:
e0:82:ff:38:ca:c2:9a:36:54:48:9b:e0:ff:e4:ae:
d2:0c:5d:1f:27:a8:b7:47:22:c0:cd:4d:33:fa:62:
35:95:32:a7:09:61:f5:1f:bd:7a:52:26:6e:55:28:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:29:5B:0E:CB:55:8C:3C:CC:51:8A:72:A3:F4:E9:E9:B9:DB:AB:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yilbDstVjDzMUYpyo_Tp6bnbqzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:01:c2:e2:f4:93:74:b0:46:7e:a6:fd:d7:a6:b6:30:15:f0:
3f:ee:51:33:5d:3e:d9:c9:bc:39:3c:3e:96:8b:c8:78:f1:59:
0b:bb:26:b0:8c:54:31:71:c1:8f:69:2e:dd:38:f3:a4:10:51:
87:a7:48:b0:ff:82:f2:6c:c3:44:cd:b1:9e:6e:f7:bc:82:75:
24:31:0b:bc:43:a3:0c:f4:e0:bc:da:4f:3d:c5:a9:f5:80:90:
bf:0f:fb:a8:ac:b4:14:2a:6f:d5:ab:36:61:46:84:d8:75:35:
2a:e8:5b:67:a7:10:78:4c:26:ab:26:d5:1a:53:68:1d:7d:fb:
9a:93:e1:3f:ca:83:23:4a:a3:81:b3:7e:c9:9d:61:9d:11:b7:
2f:5d:7f:ec:8f:b6:9a:a8:3c:b4:cb:97:5b:01:cb:3b:52:b2:
31:1c:10:2f:de:33:94:72:02:52:3c:73:d0:51:27:eb:ca:ba:
9d:55:15:89:37:1d:5c:6b:a7:93:cd:35:6d:5f:bc:31:f9:b4:
db:5d:a0:a7:bd:fa:4d:ea:10:53:ed:9d:b0:35:ce:b7:61:2f:
e4:a2:51:49:4b:e6:40:d2:26:73:54:78:df:79:f2:22:6c:12:
06:85:c2:b3:f4:3f:67:bc:d0:fd:25:ff:da:58:21:24:80:81:
d4:ea:ea:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:55:48 2025 by rpki-client