Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tRxidaJjtUomGhuBRjPrXZ2lpoU.roa
File: tRxidaJjtUomGhuBRjPrXZ2lpoU.roa (raw, json)
Hash identifier: 0Y0E1umUNJe3/nVIAAeyKHyPmtAJrkfwgaFd4qQnKdc=
Subject key identifier: B5:1C:62:75:A2:63:B5:4A:26:1A:1B:81:46:33:EB:5D:9D:A5:A6:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018772C72BCBD761C7926679B7F0F7E88892
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tRxidaJjtUomGhuBRjPrXZ2lpoU.roa
Signing time: Wed 12 Apr 2023 00:04:28 +0000
ROA not before: Wed 12 Apr 2023 00:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:72c7:1ac6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:72:c7:2b:cb:d7:61:c7:92:66:79:b7:f0:f7:e8:88:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 00:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b51c6275a263b54a261a1b814633eb5d9da5a685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:e1:aa:10:3b:56:2d:82:14:30:0c:06:ef:
e0:5c:7c:63:37:18:bd:3c:8a:15:53:12:8f:67:fd:
98:c3:d5:36:ec:7a:e0:7e:59:b6:fb:23:00:d8:78:
a8:49:09:45:d1:f5:84:36:eb:9d:8f:96:dd:e1:47:
2f:bf:de:ff:bd:62:ba:03:6f:3f:6f:3c:47:f8:7b:
92:aa:33:c2:99:d6:99:c2:9a:89:00:9a:8b:46:21:
66:c9:0b:79:f0:17:d4:e6:69:7f:a4:7c:7c:24:e4:
8b:6d:eb:86:3a:07:d0:6a:15:db:0f:f0:1b:02:3f:
06:53:5a:47:05:bc:5d:e1:d4:69:50:84:ad:1a:7a:
c6:11:51:e3:22:6f:bb:7e:29:0d:30:95:f6:88:4d:
56:a0:da:9d:83:94:4a:7a:2f:2d:7c:7a:8f:3f:07:
30:77:d3:8b:a3:f2:93:55:c7:57:11:1f:b4:af:1f:
ec:11:f8:cd:42:45:f3:e0:29:36:a1:a8:6d:c9:13:
5c:ba:a4:95:6d:24:e6:0b:b5:cd:15:a9:a1:25:2a:
55:01:de:9c:8d:24:8d:0c:5f:38:95:a2:7c:60:fe:
5b:4f:0b:48:af:cc:0c:e8:92:68:ed:90:3f:31:16:
9b:ec:78:6b:e7:35:27:ff:b8:08:5a:99:8e:ae:fa:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:62:75:A2:63:B5:4A:26:1A:1B:81:46:33:EB:5D:9D:A5:A6:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tRxidaJjtUomGhuBRjPrXZ2lpoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:2f:f9:59:40:dc:16:97:0d:2e:a3:06:2d:fb:7a:c7:da:d1:
7c:bd:23:1f:d4:d6:04:e7:03:ba:e7:63:b2:87:96:31:77:96:
17:fb:ae:2f:c0:cb:12:bc:88:eb:1a:d4:65:8e:0d:15:08:dd:
dc:ab:39:1f:8a:e4:ae:e3:3d:80:f6:1d:b1:c3:27:b9:a4:38:
cd:e8:29:35:0b:51:b8:d4:3a:ab:18:a3:c9:9a:e9:c6:83:9d:
c7:9a:25:26:a6:d8:06:05:0b:d8:91:02:6f:6e:bf:d5:f9:fe:
02:35:99:87:dd:b8:ce:3d:b8:83:1a:98:13:20:3b:91:5c:e6:
2d:04:31:bd:e1:8f:e6:64:74:d1:46:db:67:9c:05:96:55:ef:
88:00:4f:a0:5a:0b:d4:60:9e:0a:a5:95:9b:8b:0e:bd:65:9d:
7f:4a:a3:3b:cf:8f:31:56:31:a9:56:31:16:86:5f:c3:8d:44:
0f:d0:45:66:17:71:24:9f:4c:d8:92:ba:5f:cb:3d:2a:1d:cf:
e9:61:71:c4:97:8c:3b:6c:e4:72:a9:5c:69:1d:a9:30:f3:cf:
f9:79:a7:67:4f:a3:40:5a:8e:8a:94:98:d1:7f:5f:1e:c2:3f:
fa:05:61:82:48:dd:76:34:af:e7:6f:0e:c8:d2:5d:3f:cb:8d:
47:17:c3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:21:23 2025 by rpki-client