Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tUgmANm_OWADKTSw3aRkeu4VW9E.roa
File: tUgmANm_OWADKTSw3aRkeu4VW9E.roa (raw, json)
Hash identifier: aRH9acmKtmZKs0pww/jhLwmfFvR0hQf9jJ0XRFtJVIQ=
Subject key identifier: B5:48:26:00:D9:BF:39:60:03:29:34:B0:DD:A4:64:7A:EE:15:5B:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6BF7ED34
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tUgmANm_OWADKTSw3aRkeu4VW9E.roa
Signing time: Sat 19 Feb 2022 13:24:35 +0000
ROA not before: Sat 19 Feb 2022 13:24:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1811410228 (0x6bf7ed34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 13:24:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5482600d9bf3960032934b0dda4647aee155bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:3b:15:7b:78:1c:19:fc:96:ae:af:da:53:
84:ac:c0:17:10:2a:63:7a:46:e1:7c:8e:ad:fb:ec:
95:aa:15:f2:3e:bd:8d:fd:65:9e:76:c1:ad:63:7f:
ad:ac:9a:72:d3:74:56:0c:35:40:fe:27:bc:27:b9:
26:73:98:65:1d:74:8a:eb:5a:c7:2c:40:53:42:74:
40:d7:da:f2:1b:22:19:9f:7b:e8:3e:96:a1:ba:d9:
5f:27:01:3a:2a:90:e2:38:49:71:6f:6c:f4:bf:8f:
25:d3:28:c3:25:f1:1a:19:73:72:a4:f8:6d:09:41:
d3:95:ed:70:3d:01:63:0d:dd:a7:0a:13:0d:44:99:
c0:2d:47:fd:2d:70:99:e3:90:11:d5:06:f3:9c:10:
0c:05:b3:59:d5:51:fe:5a:1e:4e:16:72:63:d9:fd:
bb:af:64:a2:fd:05:ce:d8:68:81:ff:63:c0:3c:63:
ba:eb:dd:3d:af:df:a6:54:23:bc:2d:cb:c1:5e:49:
37:2b:6e:fb:2e:65:8e:b3:d2:fe:a5:d3:54:5d:eb:
4a:7e:cb:cd:37:c2:73:91:eb:b6:f9:4f:b9:f8:95:
53:80:ce:c5:5d:79:da:e8:9f:97:87:cf:90:51:4d:
f3:23:bf:75:7e:cf:e4:c8:6c:9e:9a:94:a0:61:96:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:48:26:00:D9:BF:39:60:03:29:34:B0:DD:A4:64:7A:EE:15:5B:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tUgmANm_OWADKTSw3aRkeu4VW9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:81:2a:e8:01:65:df:91:24:d8:cf:5d:22:93:18:69:f0:a1:
d4:f2:54:d3:6d:5b:87:9e:d0:22:91:d3:2c:94:ec:e6:04:0c:
c3:bd:77:cf:3c:db:81:83:b1:0b:30:ca:23:db:2c:25:42:b8:
b1:56:4d:6a:0d:e4:29:c6:83:8b:2b:b1:23:c1:e2:f5:c0:5a:
29:2c:84:a7:ec:30:e2:b7:1f:a8:e8:35:8e:0d:be:5e:8a:b5:
79:fe:e4:28:be:54:ba:13:f0:10:05:fb:38:c0:d2:fa:9a:77:
33:f7:5a:ad:52:20:99:f0:c5:fe:15:d5:f1:ae:c8:f4:c9:d9:
62:0d:2c:ba:7f:ca:8a:c4:c6:7f:16:2a:dd:20:ad:27:1e:2c:
ae:8a:32:f1:28:28:80:10:04:f5:b9:ba:2b:2e:39:cf:08:7a:
5d:f4:7a:4f:30:bd:e4:c0:73:f6:f0:d3:41:99:97:35:4a:61:
1a:60:4c:ce:1a:2e:e0:3f:1e:83:59:3b:de:dc:cc:0f:a8:92:
ba:33:b1:04:42:e2:1d:6a:7e:c3:62:ff:cb:68:06:51:10:d6:
57:7c:0a:f2:13:fd:d8:39:ef:be:9a:c4:b2:19:c6:b7:d0:7c:
d0:9e:4b:ef:7d:34:e3:e5:de:63:86:82:79:5f:7e:6e:15:68:
3a:51:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:56 2025 by rpki-client