Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tRA55WNuSEcvwv2SCqYhBfib3N8.roa
File: tRA55WNuSEcvwv2SCqYhBfib3N8.roa (raw, json)
Hash identifier: SbM10Km/YqYxTW0htU2X1lIgjwn9oBOQ8cujDA25QDs=
Subject key identifier: B5:10:39:E5:63:6E:48:47:2F:C2:FD:92:0A:A6:21:05:F8:9B:DC:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C498AD8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tRA55WNuSEcvwv2SCqYhBfib3N8.roa
Signing time: Mon 13 Jun 2022 05:08:02 +0000
ROA not before: Mon 13 Jun 2022 05:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353629912 (0x8c498ad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 05:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b51039e5636e48472fc2fd920aa62105f89bdcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:60:da:c3:08:56:2d:a2:3a:71:3d:36:32:
e1:70:52:76:04:f9:a8:89:2d:db:9d:8a:32:b6:8d:
09:9d:b1:4e:66:bf:0a:42:57:58:32:44:b4:8d:77:
79:7b:84:91:fd:84:63:3a:30:53:ac:c5:fc:1f:4d:
95:62:2f:c4:f9:64:a5:6f:75:83:fb:29:1c:f6:33:
56:12:80:73:38:ac:1a:9b:ab:32:70:b6:3a:d6:64:
a2:72:c4:81:cb:6c:6d:4d:08:10:05:c2:48:49:63:
e8:ef:1d:ac:1a:bd:60:55:47:d8:53:74:4e:ff:30:
28:57:9d:29:5b:6f:4f:48:8a:c1:e7:1e:8f:79:8c:
33:b6:13:c2:88:12:ef:82:27:f2:3a:16:2a:e0:43:
61:95:2f:a7:fa:39:a3:eb:ac:57:6a:c1:36:4e:4c:
00:8e:3e:13:90:89:63:e2:28:6b:7a:b2:ef:28:42:
48:ff:d4:41:64:df:92:87:ee:91:f6:d1:f0:22:ea:
25:56:ac:6d:da:e2:65:b6:14:94:7f:8c:2a:bb:92:
4e:cf:d2:ee:a7:d5:79:94:36:99:a2:34:83:b7:3c:
82:58:5a:9e:aa:5d:f9:4d:24:b9:75:88:cb:c8:34:
76:61:45:30:c2:4c:35:6e:02:b1:38:7b:f1:d6:e8:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:39:E5:63:6E:48:47:2F:C2:FD:92:0A:A6:21:05:F8:9B:DC:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tRA55WNuSEcvwv2SCqYhBfib3N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:37:d0:89:30:ec:13:1d:e9:38:43:4b:8a:21:b8:c8:c2:23:
0b:04:26:97:e6:fd:fa:79:2a:68:b0:e1:6a:95:d4:ff:54:fe:
ef:c7:d2:ab:52:21:c7:56:7f:83:29:79:f2:0a:ff:65:50:d4:
ae:70:d7:9b:ae:16:f3:7a:b9:a9:0e:63:10:f4:e5:ff:1e:d4:
32:91:82:88:65:87:4f:0f:26:84:03:4a:cf:0a:9b:67:61:1f:
b1:21:24:41:be:c6:63:fa:15:38:a6:2c:64:f8:c0:a3:c7:71:
63:d8:2a:99:8e:2a:cf:07:82:92:5b:c7:1b:44:b7:db:55:a7:
ce:48:26:7b:64:ee:11:a2:e8:31:f4:eb:85:81:86:d4:4b:39:
c8:34:61:37:5e:e3:43:6f:d8:6d:0b:dd:18:29:97:18:76:cd:
99:bd:23:12:a4:5e:ea:85:3f:6b:b0:26:12:31:d6:9b:15:80:
e3:88:67:13:4e:5d:1c:27:30:33:93:75:10:a3:97:d9:b4:b8:
44:5c:e2:2c:e4:58:cf:38:3c:d5:23:50:13:18:91:9e:33:4c:
ba:47:08:6e:f1:05:a9:fc:16:57:80:e2:e1:92:c5:0a:db:41:
4c:1b:ab:56:47:94:af:2f:27:af:0a:11:db:e1:f1:e1:55:77:
61:d7:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:31:49 2025 by rpki-client