Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tkjfZSyQ72nJIRVEBGxy3UF_q3o.roa
File: tkjfZSyQ72nJIRVEBGxy3UF_q3o.roa (raw, json)
Hash identifier: cpTxbfD/wrQq1Nc37ewSv+zztGk8EuG2AfQNt9xWNtw=
Subject key identifier: B6:48:DF:65:2C:90:EF:69:C9:21:15:44:04:6C:72:DD:41:7F:AB:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896799FB9E6E610968CD74514AABFBABD3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tkjfZSyQ72nJIRVEBGxy3UF_q3o.roa
Signing time: Tue 18 Jul 2023 06:04:51 +0000
ROA not before: Tue 18 Jul 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:189:6799:9395/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:99:fb:9e:6e:61:09:68:cd:74:51:4a:ab:fb:ab:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b648df652c90ef69c9211544046c72dd417fab7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:6b:06:78:59:f1:a9:f5:04:2a:19:4c:72:
1d:80:96:7d:b0:68:de:d0:1b:97:2f:d0:b6:0a:f2:
f6:60:03:8b:c0:19:ca:5d:3e:27:ff:dd:5c:80:55:
96:48:39:e9:30:3e:e3:5e:43:28:51:de:78:c4:23:
2e:f6:90:65:41:65:13:86:d8:23:69:ed:5b:68:8e:
14:76:e4:71:43:d3:ed:33:13:ad:63:70:d8:d8:51:
0b:58:fe:11:d2:70:db:05:bd:d6:29:b0:f2:36:7b:
97:0f:8a:eb:05:12:b5:cd:e3:68:ba:d8:fc:90:18:
a0:3e:3a:ba:29:d1:1f:f3:7c:11:e7:36:22:a1:1d:
56:e0:58:d6:cb:5f:3c:7a:ee:99:b3:68:cc:7d:8f:
ca:0e:a8:68:96:d7:38:9b:12:b9:18:6d:b1:cc:52:
d8:71:aa:f9:e1:01:1d:47:3e:39:5e:d9:e7:28:ac:
ea:1a:d6:ab:3b:8f:bd:dc:09:29:37:6d:39:a1:ea:
91:b5:58:61:b5:9d:9c:be:6d:a3:11:10:a8:10:b6:
b9:87:dd:59:86:78:dc:4b:c1:7a:f7:87:c1:11:6d:
da:61:14:5a:ab:3b:96:0f:b5:1d:3b:49:e0:80:a1:
ff:43:c5:0a:c6:41:cf:50:9e:bb:f7:6c:57:80:f7:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:48:DF:65:2C:90:EF:69:C9:21:15:44:04:6C:72:DD:41:7F:AB:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tkjfZSyQ72nJIRVEBGxy3UF_q3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:33:ad:e8:a1:6b:fb:7f:be:0f:3c:48:0a:74:8d:5e:09:21:
e3:10:9f:14:42:00:f1:89:6a:5c:37:da:0a:4b:83:ae:fb:a9:
9f:8b:25:ef:21:30:6a:73:0d:d1:84:fc:1f:bb:97:d7:67:55:
e6:15:a0:07:c8:e4:60:5e:5c:6f:d1:eb:36:bc:50:32:14:59:
c5:35:9b:7f:70:c3:60:2c:0f:4c:43:84:18:86:51:de:40:e7:
a6:74:76:57:65:5f:09:f7:9c:b1:02:38:d4:2a:43:d1:bc:21:
28:86:49:3f:14:99:4c:5a:21:41:ba:a4:74:fa:82:76:0c:b4:
84:4d:41:d8:03:da:aa:45:db:c8:7a:3c:4c:f4:38:a5:42:d2:
6b:3a:09:7e:4f:6c:db:f1:57:12:c4:c9:3e:63:49:cd:95:88:
73:d2:de:96:a3:76:13:52:57:fb:12:05:91:f7:80:92:b2:68:
d9:aa:e2:7c:45:40:ea:92:97:33:38:f3:ef:a7:21:fd:65:e0:
af:a2:82:6c:ba:d9:e8:06:a4:8c:64:b2:4f:fe:b2:67:1c:16:
35:86:e9:1d:cd:10:d7:bb:91:07:59:c5:57:d6:57:8a:e1:66:
88:40:59:34:54:ec:47:b4:65:b9:82:a5:86:e5:87:20:bb:95:
bd:7a:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:56:00 2025 by rpki-client