Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XTukpyivWEQmRHMA_ilatrdkyjY.roa
File: XTukpyivWEQmRHMA_ilatrdkyjY.roa (raw, json)
Hash identifier: ZCZpKpUam5TOfNVK23GMH7lZmIP30QdpHoeR0y3SY1A=
Subject key identifier: 5D:3B:A4:A7:28:AF:58:44:26:44:73:00:FE:29:5A:B6:B7:64:CA:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188AFBAEA773FAA5788E811E05636BB8216
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XTukpyivWEQmRHMA_ilatrdkyjY.roa
Signing time: Mon 12 Jun 2023 13:10:42 +0000
ROA not before: Mon 12 Jun 2023 13:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:ba:ea:77:3f:aa:57:88:e8:11:e0:56:36:bb:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 13:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d3ba4a728af584426447300fe295ab6b764ca36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:60:80:1b:eb:cb:8a:26:c4:7d:26:a5:2a:
8e:c3:ee:5d:fb:99:5a:01:e4:79:86:23:f7:e8:d0:
d5:cd:1d:98:81:ba:51:b2:3b:49:1a:24:4c:86:8d:
af:a1:92:b1:b7:08:09:7b:58:58:64:62:ee:fd:02:
cf:65:2a:e0:82:76:25:22:a5:e8:00:f5:bd:ed:eb:
d6:56:15:02:62:59:62:4f:2a:b7:2a:64:72:67:f2:
c1:b0:ec:b0:07:d5:a6:7b:0c:52:82:48:b1:27:a1:
d1:10:ca:42:24:4f:f2:07:21:41:f9:51:a6:35:6a:
5c:05:1f:6f:03:36:ac:a9:aa:c3:79:c1:4f:93:7a:
e0:a6:af:7d:9d:05:98:31:7c:14:b6:cc:3d:14:84:
ec:b9:5f:c0:4d:23:48:17:07:da:6f:4f:22:b2:77:
13:77:a0:97:9b:3c:24:c9:91:7a:e2:27:ae:e9:bb:
d8:9c:c6:9a:c8:9c:7b:9b:eb:0b:4d:7a:98:13:ea:
37:0a:81:68:0a:d8:a5:e0:25:e2:a1:3c:92:84:64:
cd:d4:4b:f8:75:35:07:aa:6e:51:30:88:41:d4:9a:
09:2d:71:09:e9:98:62:72:6e:0b:5f:cd:3f:46:90:
6b:9f:6f:9e:60:77:ad:49:2d:9f:00:c3:79:81:1a:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3B:A4:A7:28:AF:58:44:26:44:73:00:FE:29:5A:B6:B7:64:CA:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XTukpyivWEQmRHMA_ilatrdkyjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:c7:e9:16:f5:64:7e:50:0a:89:99:51:e2:5f:3a:cd:74:23:
56:4e:d3:70:c4:26:a6:46:dc:2c:b8:ab:54:90:c9:38:94:49:
16:0b:d8:c8:04:f1:bc:4f:02:bb:d6:fa:c3:7d:9a:6e:5f:39:
84:53:54:14:1e:d4:f8:d8:a9:10:51:9a:53:9f:c7:82:ac:0f:
77:b7:34:de:65:1b:de:be:ee:bb:c2:f4:b8:9d:6d:6c:12:1a:
11:b5:d8:ad:aa:8e:ca:fb:48:f8:0d:d3:40:4f:e5:a3:ab:88:
f6:41:e3:0e:d2:28:4d:de:31:96:93:d7:65:8e:d2:11:a7:df:
27:3b:78:d7:79:75:0b:85:30:f0:3d:9b:a2:a5:ea:ca:60:c1:
e3:28:ce:5c:3b:32:04:f7:43:f0:3e:f8:1e:46:7e:bb:ec:78:
3c:4e:68:9f:75:37:81:25:81:77:63:72:68:45:68:c9:f3:02:
60:b2:33:da:f4:46:ec:ea:3f:98:b3:a1:fd:13:81:47:ff:f4:
3d:74:29:fd:77:88:fe:e6:31:13:49:69:70:77:99:9c:4a:81:
9a:87:92:31:63:46:54:a8:19:36:c4:9b:3a:ea:ed:a3:f3:b9:
50:7d:5f:9c:6c:e1:14:6c:98:39:78:c1:86:8f:5e:db:ee:16:
98:f6:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:10:18 2025 by rpki-client