Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tyoUtrswdl1mcW15X72xq-KIVuU.roa
File: tyoUtrswdl1mcW15X72xq-KIVuU.roa (raw, json)
Hash identifier: kSKwJI/RgHd6hm7fjzSkncLhQQpklkN2ZAmaU7EMMyw=
Subject key identifier: B7:2A:14:B6:BB:30:76:5D:66:71:6D:79:5F:BD:B1:AB:E2:88:56:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018936E47AF3BE03633AD44564441D14CAC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tyoUtrswdl1mcW15X72xq-KIVuU.roa
Signing time: Sat 08 Jul 2023 19:04:50 +0000
ROA not before: Sat 08 Jul 2023 19:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:36e3:e62e/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:e4:7a:f3:be:03:63:3a:d4:45:64:44:1d:14:ca:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 19:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b72a14b6bb30765d66716d795fbdb1abe28856e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:d0:95:05:4a:70:01:94:39:83:a9:e1:48:
5f:c1:ed:7c:63:d6:16:56:1b:8d:21:07:97:f0:89:
31:d6:e8:a5:2e:b2:37:90:08:81:9a:d3:7a:3f:ea:
26:cf:6c:22:06:d0:00:b0:fd:be:94:9a:37:e8:5a:
1f:61:11:38:f2:ac:bc:9b:81:60:a2:e1:4d:35:02:
58:01:a4:75:a2:fc:8b:ff:9f:8f:7a:ee:8b:9b:54:
d7:14:70:e6:5c:1f:52:b5:8f:4c:f3:1d:d3:cb:26:
63:dd:e2:32:c7:5e:10:81:e7:07:0b:0a:ca:bb:73:
59:6d:59:37:db:93:34:12:a9:36:de:5b:62:4b:4e:
a5:68:70:67:f9:3f:3e:e9:2c:c6:12:0e:c5:dd:1b:
c9:1e:52:02:98:21:60:09:d9:2b:6e:cf:53:57:ee:
e0:d0:8b:14:72:f0:92:9c:ca:51:b3:80:51:4f:ed:
ce:41:d0:1d:9c:67:97:d9:cd:42:11:f3:f2:b8:64:
23:1e:31:2a:51:44:30:36:a8:8c:bd:48:84:a0:ea:
1d:4b:46:df:67:24:23:dc:1c:de:b5:a2:93:55:5d:
d8:f6:5c:c3:c2:40:15:90:af:42:b9:ce:eb:4d:56:
ab:7d:2a:82:da:af:31:ee:e9:75:d5:6f:60:5d:27:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:14:B6:BB:30:76:5D:66:71:6D:79:5F:BD:B1:AB:E2:88:56:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tyoUtrswdl1mcW15X72xq-KIVuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:3f:42:44:1c:b9:d8:72:66:a8:01:66:e1:a5:ea:a6:d1:e6:
35:a9:b9:fa:72:fb:93:82:f8:56:7e:7a:1a:3b:87:b5:d1:9c:
e8:7c:b4:b2:84:9f:35:66:eb:2c:d9:7a:a7:f2:49:8f:ce:54:
1e:0e:5d:6a:aa:b3:29:ad:1e:7c:5b:da:d1:00:b1:e9:5b:89:
e1:ee:01:29:34:68:2f:9c:ea:ae:70:96:6f:38:10:8f:82:46:
b5:ad:9d:d6:b1:3d:9b:9b:23:0d:94:13:f4:71:f1:df:ab:37:
62:43:32:89:4c:40:e9:62:52:1d:7f:c8:b8:ed:3a:62:20:4d:
bf:3a:20:b7:4f:45:76:41:60:38:94:eb:48:d4:6a:3a:df:5c:
2f:ec:ae:82:28:31:75:f1:2b:6f:94:8a:c5:f3:8b:7d:32:f8:
ab:4a:99:7a:1d:35:7c:9c:1f:dc:a9:20:08:56:91:7e:11:52:
10:16:81:ed:d2:37:e9:d9:18:78:55:8d:e2:b4:71:06:cd:de:
b6:90:76:bc:4c:bc:35:66:44:bc:6d:50:8d:9e:43:3d:09:72:
34:62:42:bc:a9:77:81:1c:2f:8f:58:86:aa:c1:7d:55:7b:04:
8c:df:28:e1:35:d0:f8:2d:9e:57:ed:6d:94:cd:6f:7d:3d:cf:
3b:9f:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:56:27 2025 by rpki-client