Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tjdQwDRVP62lSK7oeikjg-M6jXU.roa
File: tjdQwDRVP62lSK7oeikjg-M6jXU.roa (raw, json)
Hash identifier: npdrtVyqDu7xBmrPpCHdoGZK7X3DDqLo9PPUGL4Ue1Q=
Subject key identifier: B6:37:50:C0:34:55:3F:AD:A5:48:AE:E8:7A:29:23:83:E3:3A:8D:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018703AAA2F93E6E4F2AE66AC13BD0751E91
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tjdQwDRVP62lSK7oeikjg-M6jXU.roa
Signing time: Tue 21 Mar 2023 10:15:27 +0000
ROA not before: Tue 21 Mar 2023 10:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:aa:a2:f9:3e:6e:4f:2a:e6:6a:c1:3b:d0:75:1e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 10:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b63750c034553fada548aee87a292383e33a8d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:30:fc:25:74:cf:f4:35:a3:0e:99:51:2f:
ab:04:28:98:3a:7a:c7:ba:c9:a0:a1:5c:ea:7f:41:
e4:11:ce:b9:83:f8:f7:3f:e5:c8:96:96:9f:53:75:
17:ae:8f:c5:21:bc:43:ad:ce:a7:50:92:9d:a2:c3:
15:df:ce:94:17:65:34:74:4e:c1:79:62:26:5a:07:
03:4c:e8:08:12:de:ac:9e:01:10:95:47:66:bf:ce:
ff:fd:7a:1d:8c:71:7e:75:2d:d2:d2:b5:81:ee:5b:
97:0b:97:d7:f2:eb:f2:df:3a:7e:28:35:dd:c4:aa:
b0:7b:fb:4e:42:42:e0:fb:56:1e:a6:52:b3:93:49:
ed:be:dc:fb:55:ee:3b:5c:aa:0e:19:05:7a:fc:57:
5e:d1:08:16:8c:89:d0:77:4e:83:8e:6e:14:10:0c:
b1:78:07:27:f6:9b:47:20:0d:c8:87:17:2e:ee:dd:
80:a3:ad:d2:05:eb:a7:9d:13:80:26:c4:9d:f3:38:
9b:ee:64:2c:bd:df:3c:6d:83:59:3f:e5:cc:31:bb:
b7:79:ae:25:12:ec:10:48:27:13:07:a2:44:3a:3f:
0e:51:b9:14:f9:37:c1:50:fb:17:3e:4a:2e:c2:54:
cf:ad:b6:fc:2f:d7:73:43:53:56:2d:3a:ac:72:23:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:50:C0:34:55:3F:AD:A5:48:AE:E8:7A:29:23:83:E3:3A:8D:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tjdQwDRVP62lSK7oeikjg-M6jXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:d7:71:ad:89:83:ee:4b:51:61:a9:e1:81:5a:f3:20:9b:2f:
62:b9:b1:f7:20:5f:9f:f8:f5:d5:d3:2e:8b:0f:80:c3:0e:64:
4c:89:45:a6:67:57:61:7d:a2:6d:0d:48:59:69:09:4f:93:87:
c7:f1:94:08:68:c9:58:f0:a0:9a:b9:d9:c9:f0:d8:1d:8e:57:
84:14:18:b1:ed:22:1c:f0:83:f9:86:73:44:36:a5:2a:b1:ef:
56:f0:a2:06:7c:fd:8e:c3:c6:70:f7:c0:e1:f8:d4:5b:36:9c:
37:8b:c3:4f:aa:80:2d:3a:73:73:04:a7:45:b1:3f:34:bf:53:
ba:df:d5:10:0b:e3:40:eb:73:17:b2:ab:d8:03:de:5a:03:be:
a3:db:f5:9a:21:79:1a:98:5b:91:2e:99:9b:2d:4d:34:82:8f:
8b:85:b2:a0:59:b4:df:b4:07:b9:a0:8c:ad:1b:fa:3b:47:12:
be:4f:e9:18:e6:b0:c2:4a:9c:2a:5d:67:b1:91:47:20:fb:57:
1b:27:bb:af:aa:2a:12:cf:d7:77:3b:6f:f0:aa:38:f4:32:c3:
bc:88:91:c2:9c:ce:bd:3b:15:ee:b2:7a:18:b4:10:69:b3:6f:
0e:21:c5:71:eb:3a:c9:91:51:66:e7:4d:31:90:27:37:df:77:
bc:68:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:14:58 2025 by rpki-client