Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TpA7u75nEkaUPl1wuzlEKSHzv0o.roa
File: TpA7u75nEkaUPl1wuzlEKSHzv0o.roa (raw, json)
Hash identifier: UhztDcHQGKZxcbwlGoNfto4EzKXNJlPsEJZP81ozwwI=
Subject key identifier: 4E:90:3B:BB:BE:67:12:46:94:3E:5D:70:BB:39:44:29:21:F3:BF:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881D2D04D01308AFF20CE4D357767535A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TpA7u75nEkaUPl1wuzlEKSHzv0o.roa
Signing time: Mon 15 May 2023 02:11:09 +0000
ROA not before: Mon 15 May 2023 02:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1d:2d:04:d0:13:08:af:f2:0c:e4:d3:57:76:75:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 02:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e903bbbbe671246943e5d70bb39442921f3bf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:3e:c9:c7:52:fd:e8:09:e5:1c:b3:91:e5:
b0:72:d9:96:e5:48:c7:60:11:00:09:21:57:12:8d:
de:53:90:fc:84:36:ee:4c:46:d8:a0:cb:1d:c0:de:
58:e7:08:fe:a6:12:06:b8:c8:41:cd:b2:7c:b0:8b:
2a:ee:5e:89:3f:5a:78:82:39:b4:e7:21:dc:3c:27:
70:09:ca:3e:eb:33:8b:bc:4a:90:35:eb:83:a1:52:
4f:28:c3:2e:10:1a:e9:46:11:a3:f4:a9:00:67:07:
43:b4:54:10:e0:f3:86:1e:64:08:d2:cd:29:ab:32:
c7:c2:88:26:08:61:2a:30:78:7c:50:a4:2c:80:0e:
6f:08:e7:69:28:f1:4a:fb:44:fe:1e:70:4d:13:fe:
59:d5:67:f5:01:21:49:2f:8f:f2:49:1c:e0:bf:e3:
40:9d:b1:e1:e5:49:9f:e1:41:17:0d:6b:ed:18:b3:
f7:30:51:fa:03:cf:96:28:18:1e:72:00:20:4b:55:
b8:b4:1a:87:77:8d:42:94:29:73:ee:76:fe:66:9d:
14:7f:2d:25:10:0e:79:7a:f3:76:58:23:9a:f1:4f:
1d:fc:fc:57:8b:29:29:f7:34:20:3b:b1:84:56:2f:
5c:4b:5f:1a:cd:1a:a3:1e:d9:a2:cd:ff:77:93:87:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:90:3B:BB:BE:67:12:46:94:3E:5D:70:BB:39:44:29:21:F3:BF:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TpA7u75nEkaUPl1wuzlEKSHzv0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:42:fa:d1:a3:00:c0:fd:f1:30:47:31:aa:aa:d2:20:55:1b:
2e:fe:54:98:e7:f7:c2:58:d9:e1:26:6e:2e:2c:dc:d4:26:ee:
30:93:0a:80:0e:33:6f:b9:20:cf:3c:fb:1a:09:64:8b:fc:b5:
14:1b:d1:69:23:ef:f9:c3:58:b4:38:4c:2f:ba:81:1a:c1:1a:
12:f9:aa:2f:0e:bf:36:ce:86:e2:2d:12:59:ed:48:a3:72:1a:
b7:76:96:e8:bc:fd:9a:0f:15:06:27:3c:5b:62:f7:3b:d5:d2:
c2:c3:1a:08:76:c6:c3:68:94:0e:b8:61:a4:c7:95:92:73:42:
3c:fa:84:05:02:c3:4d:96:dd:af:3a:6f:f8:c8:90:a1:74:02:
1a:59:a9:7a:27:da:47:c4:22:91:44:52:2e:67:28:7d:3d:d9:
64:f2:16:8c:e0:50:71:75:43:d1:26:a5:b1:4a:f1:e9:04:68:
41:0a:d9:ad:13:bc:53:bd:0b:b6:fc:9d:1d:eb:3a:b7:78:ff:
db:13:b4:8e:99:93:24:c5:ce:c1:ff:3b:67:ba:4f:46:6a:4b:
0a:8e:d9:a2:79:64:98:23:18:b9:17:f2:cd:16:3f:f9:dd:49:
5f:a3:04:2d:bf:f1:63:d9:5f:ed:e5:9c:0d:24:83:7f:cf:23:
32:c7:6c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:38:47 2025 by rpki-client