Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ymhBwGe47f5A6VMpcQekcZKyR3c.roa
File: ymhBwGe47f5A6VMpcQekcZKyR3c.roa (raw, json)
Hash identifier: vgyiXLdaUKHZ95dMr2h8wnauzL8TIzoFbRkx4Fwe94w=
Subject key identifier: CA:68:41:C0:67:B8:ED:FE:40:E9:53:29:71:07:A4:71:92:B2:47:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01846B56D692C48EFABCD68DB633B0C99E29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ymhBwGe47f5A6VMpcQekcZKyR3c.roa
Signing time: Sat 12 Nov 2022 10:16:03 +0000
ROA not before: Sat 12 Nov 2022 10:16:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6b:56:d6:92:c4:8e:fa:bc:d6:8d:b6:33:b0:c9:9e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 12 10:16:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca6841c067b8edfe40e953297107a47192b24777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:4b:d9:d7:7d:0a:14:92:f5:37:6c:80:77:
0a:cb:05:33:ad:a9:11:99:ae:ae:db:2f:59:48:7f:
43:7b:e3:85:ff:4e:b0:47:e0:81:55:69:47:7a:1d:
4e:bb:58:8d:e5:9c:f6:b1:be:0e:13:00:40:2c:5a:
34:40:c2:74:bf:07:7a:31:c1:b2:4c:75:94:af:da:
04:b8:dc:1d:e8:39:c9:47:a3:a4:d8:da:0e:38:f1:
90:06:00:e9:5d:2a:3b:e8:46:68:06:a1:fa:f4:55:
d7:3d:2d:01:a5:4f:92:eb:37:65:91:49:4d:de:b2:
8d:7a:33:6f:7a:aa:01:d8:c0:70:fb:5a:ec:f2:83:
57:a2:bc:84:70:d2:de:b1:01:d4:1e:a1:23:21:03:
b2:3f:df:88:00:81:97:36:19:ad:3c:75:bd:07:6e:
3a:48:ac:e8:25:ed:90:0f:c6:be:6b:cc:49:64:ea:
48:d7:3b:83:96:4f:0d:65:63:63:ac:93:97:50:3b:
f2:a2:41:19:be:4e:eb:76:5b:44:09:98:80:4d:4e:
c4:e3:2e:b1:d2:d0:c2:5e:98:3f:6b:bf:f2:bd:d2:
2f:86:88:0a:77:69:e1:44:d6:c6:8d:20:a7:9b:70:
60:9f:26:97:b4:df:56:fa:46:e1:fa:00:e7:3f:e7:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:68:41:C0:67:B8:ED:FE:40:E9:53:29:71:07:A4:71:92:B2:47:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ymhBwGe47f5A6VMpcQekcZKyR3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:22:24:85:2f:eb:3e:1a:1b:59:72:94:d6:9b:57:a3:49:c6:
f9:16:44:ba:ae:37:37:03:c9:83:dd:7b:11:40:8a:49:08:04:
40:e9:21:bd:7d:1c:ae:d1:7f:88:24:15:67:d9:ec:7f:c0:12:
77:53:21:bb:a4:25:ea:d2:a1:28:07:07:ca:ad:78:41:80:fb:
99:52:3b:de:e6:ec:03:b8:84:d9:d8:b8:87:86:93:9d:63:11:
aa:d1:76:25:18:50:b0:54:75:d0:22:61:87:43:4b:09:ed:b8:
b8:1a:67:0e:12:b5:d7:ae:42:22:6c:ad:a9:26:22:e7:10:2f:
83:33:c8:58:2c:3c:fe:f6:25:31:0a:0c:7c:13:e5:08:65:35:
18:39:38:86:5e:58:be:8d:2b:d5:80:17:38:d5:8b:aa:60:73:
78:08:fb:6e:08:ee:cf:b3:3a:fe:94:2c:89:f4:bd:7c:c6:d2:
80:d4:5f:93:23:8c:af:e7:3b:e9:c8:c7:06:6e:65:01:7e:69:
ab:0b:07:a5:ba:82:df:7a:50:60:0c:fc:44:a6:28:d7:f2:77:
56:12:5b:e3:ed:e6:f0:db:48:7d:e9:bf:c9:3b:7a:41:54:d0:
53:87:0b:a0:cb:d6:5f:94:0a:89:ec:70:9d:08:b9:c3:92:88:
ab:1a:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:34 2025 by rpki-client