Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yriHJ8AqPQQ6aCtG75_qgKw6MPg.roa
File: yriHJ8AqPQQ6aCtG75_qgKw6MPg.roa (raw, json)
Hash identifier: T8A9SS0O192hgy6QPHz5p4d3Bg0VeHoNXTZ596r9nck=
Subject key identifier: CA:B8:87:27:C0:2A:3D:04:3A:68:2B:46:EF:9F:EA:80:AC:3A:30:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868810EA8F6B6126BFE9D7B7C574B64878
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yriHJ8AqPQQ6aCtG75_qgKw6MPg.roa
Signing time: Sat 25 Feb 2023 10:14:15 +0000
ROA not before: Sat 25 Feb 2023 10:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:88:10:ea:8f:6b:61:26:bf:e9:d7:b7:c5:74:b6:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 10:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cab88727c02a3d043a682b46ef9fea80ac3a30f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:c4:79:4e:d2:cb:ae:50:dc:ce:c4:87:c7:
d4:98:0c:16:0f:37:f5:84:87:09:77:a2:03:28:b6:
97:f5:4f:3b:b8:48:63:66:04:24:f9:96:0f:27:a0:
01:2d:8f:31:01:0b:18:9f:29:c9:fa:3c:04:8a:3a:
86:6b:1f:32:cf:41:d2:99:ec:f4:9b:5f:bb:3c:32:
4b:6a:37:1c:98:45:5f:b7:d1:7d:6c:a1:a4:19:cc:
3d:44:ef:e1:82:ad:81:51:67:e8:ef:4f:8c:4b:e0:
e6:e3:55:72:86:0f:27:06:45:cb:c8:e1:93:7a:ed:
56:9a:8d:52:24:c9:fb:0a:c5:d9:86:a7:28:b3:e1:
04:45:5e:93:f4:4d:12:fc:c6:7a:fc:52:4d:26:d4:
ba:48:35:a8:4a:fe:b2:77:a4:9d:51:7f:bb:b1:f7:
af:bc:d0:cb:14:c4:f0:42:96:32:fe:00:54:80:d4:
83:f2:9e:14:70:e9:79:fa:95:f8:d9:42:97:d8:22:
5c:d2:3b:47:26:d6:54:00:6b:35:49:23:bf:da:0a:
82:fa:cf:d1:8e:11:81:e0:8c:2e:8b:29:95:9e:71:
83:9e:45:01:0d:0d:67:d1:0e:dd:b1:f1:13:11:ea:
b2:05:4e:3d:b0:e6:7d:96:31:43:df:93:62:6b:53:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:87:27:C0:2A:3D:04:3A:68:2B:46:EF:9F:EA:80:AC:3A:30:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yriHJ8AqPQQ6aCtG75_qgKw6MPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:7c:82:53:36:39:65:9d:ce:0e:3d:82:a5:60:dd:ea:40:5a:
a0:ed:08:af:83:c1:74:27:ee:fd:5c:40:8c:53:7c:60:c1:70:
73:12:8b:18:88:26:ac:51:de:9f:dc:c3:0f:a1:13:9c:c0:24:
83:84:96:9f:9f:8d:56:32:ea:33:6a:57:4b:f6:0f:8c:af:70:
70:bc:29:9b:ec:3e:de:e6:df:b5:35:a8:a6:6d:44:5f:85:46:
5a:d2:79:1c:72:5f:34:8b:4d:b7:be:a4:02:01:47:50:3c:b8:
4f:ca:11:f4:f6:85:d1:d5:4e:f6:f5:c4:97:1b:0a:a7:1a:16:
a7:64:e6:18:ef:76:9a:ac:20:e6:8e:8f:bc:15:63:35:29:fe:
a2:76:cb:e4:7c:ad:26:3e:8c:35:30:6a:f2:22:65:63:6f:ed:
d6:b3:7e:d4:bf:09:66:61:ce:0c:78:91:10:f9:68:08:58:8f:
ee:cc:f6:a3:e7:5e:42:5c:8d:f2:25:b1:c9:7f:d0:60:7f:8b:
48:0a:4f:7b:9e:50:15:2f:59:80:a1:50:73:7b:28:bb:91:d7:
78:1e:51:53:ec:56:d1:13:ba:9c:c0:f5:aa:4c:a3:c5:84:d5:
0a:27:e7:27:49:e1:53:54:d3:75:1a:83:f0:79:c6:36:73:7c:
a1:5d:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:38:27 2025 by rpki-client