Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYur-O_9HVRSwvEdSMAdzLaC7so.roa
File: TYur-O_9HVRSwvEdSMAdzLaC7so.roa (raw, json)
Hash identifier: 2OZnyHM9Z4o8Y01kjtUge7l8Tglho4BWi8djmH0Vw9o=
Subject key identifier: 4D:8B:AB:F8:EF:FD:1D:54:52:C2:F1:1D:48:C0:1D:CC:B6:82:EE:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187488B324E54EAF84C98CEA52DE2672C13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYur-O_9HVRSwvEdSMAdzLaC7so.roa
Signing time: Mon 03 Apr 2023 19:14:54 +0000
ROA not before: Mon 03 Apr 2023 19:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:8b:32:4e:54:ea:f8:4c:98:ce:a5:2d:e2:67:2c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 19:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d8babf8effd1d5452c2f11d48c01dccb682eeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:f7:58:07:ac:8a:cc:23:6b:76:b9:77:1d:
49:62:aa:16:90:fa:fb:70:36:7e:fa:15:7c:0d:ac:
6f:79:cb:b9:10:ad:d2:a6:16:34:5d:53:6f:2d:79:
c8:c6:e0:5e:72:e8:63:3c:d5:6d:06:6c:4c:69:0d:
29:ef:9c:71:44:50:f8:39:53:0c:db:5f:38:b3:e9:
bd:2c:6e:ee:f1:bd:c2:ef:67:bb:c2:3c:97:bc:f1:
c1:e4:67:1d:d2:a4:c1:98:ee:35:02:7a:53:8c:5d:
a4:b0:86:0b:7a:e8:c5:f8:31:7a:48:1f:ea:4c:e0:
75:5c:ac:af:01:77:ae:7b:65:39:e3:5e:72:c5:b5:
27:fe:b0:cb:fa:44:de:12:a3:bc:6a:c7:d4:54:54:
84:67:24:c4:f8:28:b4:39:83:da:85:c4:34:64:d2:
8c:14:ff:60:2a:60:ab:1e:0a:47:f4:ac:79:80:93:
63:b4:c6:38:ae:06:ad:92:ca:0a:28:3d:23:91:22:
37:06:d0:16:b6:29:ca:f8:cf:0c:c9:3d:1a:85:1d:
b5:45:82:46:2b:83:75:7b:1d:23:0b:37:50:87:57:
6a:68:b5:b1:31:ce:f6:71:23:5d:bf:f7:63:ca:83:
a5:f7:db:3d:af:a9:e9:f7:07:82:56:0b:9c:a6:d6:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8B:AB:F8:EF:FD:1D:54:52:C2:F1:1D:48:C0:1D:CC:B6:82:EE:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYur-O_9HVRSwvEdSMAdzLaC7so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:45:54:05:a8:4d:c3:ed:6a:5b:75:b0:4a:5e:b1:1f:d5:5a:
53:d0:1e:bb:ea:17:56:53:2f:d9:04:38:95:f5:c8:80:a1:18:
8d:33:2f:b0:f1:b7:08:a7:bf:72:d4:06:bc:0e:71:59:59:df:
ca:37:d9:f5:41:5e:41:91:0d:37:5d:35:11:19:b4:9a:fd:00:
aa:29:05:66:3b:f9:94:e3:86:97:09:ca:cf:9a:3b:a6:93:3c:
00:68:af:d5:7a:4b:58:1c:cf:53:d7:d3:bc:1c:b8:b9:08:7e:
6f:13:e2:53:02:72:48:6b:bf:97:b7:5c:66:ea:17:5a:4d:b2:
d3:58:dc:a4:33:7a:4e:8c:04:56:9e:db:42:2b:d9:0e:1c:57:
69:c1:95:12:c5:1a:a2:98:32:2e:7f:39:e1:9d:b6:1f:4b:ff:
42:9b:3b:e9:1a:1c:16:88:72:03:b1:e1:9d:fc:53:65:ad:0e:
cf:81:b6:8c:cc:6c:5b:99:73:ee:b3:d0:f2:54:34:6a:13:ff:
73:8d:ba:03:59:30:65:b8:12:5a:bc:88:92:b4:bb:23:3e:1e:
62:4f:91:73:d7:67:39:99:4b:69:18:c4:58:af:20:4b:c0:3e:
15:b9:44:63:88:7b:f6:8d:f6:72:a4:40:7a:8e:29:6f:0f:43:
d9:2b:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:09:58 2025 by rpki-client