Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ytCqZeyUcXwuoXIe69UVFRCPCME.roa
File: ytCqZeyUcXwuoXIe69UVFRCPCME.roa (raw, json)
Hash identifier: AgcfQcFvGLJ8upuy76bAm+VY/WTuS3NEPogpeY1PX00=
Subject key identifier: CA:D0:AA:65:EC:94:71:7C:2E:A1:72:1E:EB:D5:15:15:10:8F:08:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EEC902BAC2E11AFC073D963705845870
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ytCqZeyUcXwuoXIe69UVFRCPCME.roa
Signing time: Sun 13 Aug 2023 12:04:58 +0000
ROA not before: Sun 13 Aug 2023 12:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:eec8:5ceb/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ee:c9:02:ba:c2:e1:1a:fc:07:3d:96:37:05:84:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 12:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cad0aa65ec94717c2ea1721eebd51515108f08c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:0a:d1:c9:4b:fe:22:fb:1b:fe:00:7d:3f:
c1:09:92:4f:10:61:19:29:f2:eb:4e:ee:d1:3f:f9:
29:93:bc:8d:9e:a5:0e:c4:2c:5e:bb:b5:8f:c1:49:
79:c4:07:6b:24:ec:5b:27:46:3b:62:39:b3:16:62:
18:62:b9:71:0b:f9:36:9f:97:47:66:c1:c4:65:24:
55:32:10:05:3a:e0:7a:8e:d6:2a:27:31:1b:89:03:
05:6d:a9:48:b7:82:d8:42:12:24:51:0c:6e:e7:56:
74:75:32:28:b4:87:67:4a:1b:fc:93:33:74:99:0a:
bc:64:d4:cc:f5:6f:44:23:1d:70:99:8b:a1:66:df:
86:46:05:bd:48:bf:4c:27:93:1f:3d:df:79:78:da:
c5:40:9a:e4:f0:1b:90:a2:7d:44:41:d9:a5:5a:e5:
27:7e:cd:b3:5c:28:80:7f:92:9e:ca:ac:22:55:2f:
7c:1d:8a:98:c1:23:a1:54:e7:06:52:46:df:b7:59:
ba:9e:d5:fa:e8:8a:ef:89:cd:69:cc:af:ae:84:fa:
6a:24:95:20:9d:b4:c4:6e:8f:6c:f5:3f:4d:81:44:
88:b3:52:b7:17:ff:4e:f0:ef:15:6d:57:0a:63:3c:
d8:00:8e:cc:af:3f:b3:0c:79:c9:44:f1:8c:dc:fe:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:AA:65:EC:94:71:7C:2E:A1:72:1E:EB:D5:15:15:10:8F:08:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ytCqZeyUcXwuoXIe69UVFRCPCME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:bb:cb:66:ac:43:59:35:7d:2b:24:82:09:63:a4:1a:10:c5:
11:fb:1e:4f:51:03:34:49:13:d7:18:73:b2:ba:2f:5e:90:2d:
a2:2d:ef:80:30:82:48:62:3e:46:8b:d5:c4:4c:f8:92:be:a4:
3a:38:53:c5:a4:b1:ef:54:e0:e7:8f:ec:9a:b3:f4:9b:d4:38:
29:b9:50:93:c4:ce:4d:3d:77:ba:d3:18:26:31:c2:09:45:5b:
60:cf:d3:02:49:8c:d4:b0:93:27:3b:b7:72:29:4b:09:89:49:
54:18:da:a8:19:86:65:08:4a:8f:3d:8c:1c:ee:6f:ec:06:dc:
1d:ea:51:64:10:a6:30:5c:8c:02:fd:74:86:c5:db:97:9e:5b:
26:5e:ca:f4:41:e0:6f:22:97:ed:62:ba:fd:45:62:8d:3b:fa:
c3:2a:5f:13:59:70:5c:7a:25:71:41:2a:c4:31:5f:41:ea:64:
2a:b6:c7:9e:aa:83:85:b4:05:bf:ff:c3:bb:20:65:a2:71:5a:
04:d1:02:e0:9e:5d:40:c5:72:43:c7:c9:6e:da:43:a8:8c:db:
a7:19:64:54:5a:e0:71:5f:7c:95:67:87:cf:da:0a:32:c9:ae:
9b:df:fe:15:5a:f6:4d:20:cf:df:f8:14:4a:fc:6b:be:b8:1a:
57:e9:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:28 2025 by rpki-client