Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tbdNqYlHTpbsmOYHox46H9h6qgM.roa
File: tbdNqYlHTpbsmOYHox46H9h6qgM.roa (raw, json)
Hash identifier: L5uZjKPfx3OxsiTOJnM2CPJywCBCLnZjoGWuq/DFbcg=
Subject key identifier: B5:B7:4D:A9:89:47:4E:96:EC:98:E6:07:A3:1E:3A:1F:D8:7A:AA:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018879A98319089CE74FD9952DC3D6284F0C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tbdNqYlHTpbsmOYHox46H9h6qgM.roa
Signing time: Fri 02 Jun 2023 01:12:12 +0000
ROA not before: Fri 02 Jun 2023 01:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:79:a9:83:19:08:9c:e7:4f:d9:95:2d:c3:d6:28:4f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 01:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5b74da989474e96ec98e607a31e3a1fd87aaa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:5c:4e:83:81:d7:4c:e9:09:d1:1a:16:d6:
67:fa:f2:da:72:05:74:d7:a5:cc:3d:a5:e7:56:49:
89:b0:63:07:0a:28:cf:c4:07:44:3a:59:1a:6b:19:
22:77:4f:c5:09:29:ff:18:82:47:46:3f:a2:f0:f6:
0f:15:cc:e8:3d:6e:4f:12:69:b4:5d:eb:db:7a:24:
29:52:93:65:55:f9:7e:be:25:28:71:a8:0a:c6:0c:
5b:19:4f:f9:f5:9a:2a:cd:86:77:c9:8c:b9:72:05:
77:7c:9f:f0:b2:e8:08:8c:e7:f1:8c:60:ba:89:bf:
c8:92:67:a4:01:83:56:bb:a6:5d:17:b3:ae:a7:52:
e3:dc:9f:30:dd:ce:b2:eb:27:96:6d:67:10:c5:53:
46:6e:fd:6f:ea:cd:b3:ad:5d:ae:1f:9c:66:19:6b:
2b:15:08:f6:9a:9f:aa:11:fd:c4:07:0a:c0:a5:ba:
84:28:cb:d4:37:ec:75:80:a6:ea:ef:70:cc:99:b4:
12:02:70:d1:a7:42:6d:28:b4:f6:de:0d:2d:a5:e5:
4b:03:a9:6c:fb:5c:84:92:3d:f6:c6:32:05:bf:d7:
4b:c9:0d:4a:4c:47:fb:1e:63:cd:4f:d3:d1:7d:fa:
41:a3:a6:ff:cd:49:8a:8a:e4:92:25:e5:b1:8e:6c:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B7:4D:A9:89:47:4E:96:EC:98:E6:07:A3:1E:3A:1F:D8:7A:AA:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tbdNqYlHTpbsmOYHox46H9h6qgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:c1:70:14:c1:6d:35:3f:e0:e8:6f:93:05:72:da:c7:91:41:
7f:ac:76:2f:99:80:ad:7a:98:68:65:ec:e0:ab:21:52:83:36:
bb:c5:1b:5d:91:b5:78:82:19:2e:18:e0:7f:46:94:c7:9c:7f:
f0:f2:22:fb:bc:81:29:2b:f7:3d:f5:f4:23:4b:f2:f8:78:e2:
76:32:af:8f:8b:22:c6:b9:1c:c9:71:49:58:47:b0:57:b0:fb:
f9:a4:a6:1f:15:7c:49:5b:51:3e:14:40:f5:c5:13:fb:a0:6b:
4a:e2:dc:6f:f2:a0:40:e3:a2:68:e1:28:15:7c:ea:73:34:a1:
29:71:a0:81:62:9a:93:6d:c3:a7:50:44:dc:38:80:fe:94:63:
c2:9c:0b:09:57:fe:7f:bf:e2:52:5a:e1:a2:ef:27:71:4b:d3:
52:0a:6f:1d:83:88:9b:bf:ff:05:54:e3:13:22:91:cf:46:23:
65:42:d7:d2:0b:22:51:bd:5c:8a:25:ca:a0:c2:4d:40:b3:d9:
cb:29:2d:64:39:0e:e7:d7:c0:88:86:14:88:07:7a:20:78:9b:
5b:21:40:1b:f7:42:fa:f4:76:97:a4:f4:69:e1:7b:00:2e:83:
28:b4:dd:b3:3c:e0:50:c5:e4:00:fe:16:ff:aa:50:49:c4:d3:
9c:8a:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:49:08 2025 by rpki-client