Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tzzEGh3RvgQV_ZUVyUrRhTUihXo.roa
File: tzzEGh3RvgQV_ZUVyUrRhTUihXo.roa (raw, json)
Hash identifier: RWYFw2jXf5A6y42r/Rz8oR6Jzy3lBNDDE+HCkIsm9is=
Subject key identifier: B7:3C:C4:1A:1D:D1:BE:04:15:FD:95:15:C9:4A:D1:85:35:22:85:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018703D7816E784CBAE437B45147D1F13AED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tzzEGh3RvgQV_ZUVyUrRhTUihXo.roa
Signing time: Tue 21 Mar 2023 11:04:27 +0000
ROA not before: Tue 21 Mar 2023 11:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:3d7:588e/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:d7:81:6e:78:4c:ba:e4:37:b4:51:47:d1:f1:3a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 11:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b73cc41a1dd1be0415fd9515c94ad1853522857a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:17:78:c7:4d:5c:67:54:28:bc:68:1d:06:
ca:07:47:b5:3c:c0:92:55:fb:52:d5:79:62:c4:34:
99:54:5f:ae:e6:15:6e:89:e6:c1:d3:5e:50:e0:19:
26:c5:28:c4:f3:36:13:60:d0:d0:5f:b7:22:f3:a3:
4c:44:30:76:41:bf:fa:e3:f4:39:18:a9:99:a2:d4:
e7:1a:41:96:36:ad:ac:6f:5b:ba:87:e2:ea:ec:54:
06:bc:23:dd:c8:d0:b9:e7:53:ad:3a:6f:fa:91:60:
2e:1b:71:00:31:3a:be:89:56:b0:87:0f:30:ef:71:
f9:7e:78:d5:3a:17:51:81:20:01:90:03:1a:b6:67:
50:ca:6a:33:7b:60:38:8a:e4:76:21:d2:df:c2:bf:
3c:da:7b:90:68:9b:d7:0e:de:f3:ab:ff:b5:a2:ae:
22:87:fc:f3:6c:e9:d4:48:1f:55:29:22:e1:6b:a3:
81:2b:de:99:d0:c2:2a:84:84:b2:19:f0:55:8c:cc:
92:35:d5:04:b2:74:0e:26:01:2c:86:ba:c1:f7:21:
43:ee:8d:fb:38:b8:c0:32:1d:f3:b5:4a:ce:f8:82:
ac:e4:71:a4:87:56:51:96:60:d7:5c:2f:78:24:80:
db:56:e2:31:a5:90:93:d2:2e:d2:a7:57:52:6e:4d:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3C:C4:1A:1D:D1:BE:04:15:FD:95:15:C9:4A:D1:85:35:22:85:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tzzEGh3RvgQV_ZUVyUrRhTUihXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:2e:7c:76:0b:ca:41:ad:9d:ed:b4:eb:76:6a:a7:40:f6:f0:
2c:cc:b7:f3:98:47:43:70:fd:c9:b8:8a:f5:c0:13:82:25:f7:
2d:3d:5a:70:b2:2c:57:c5:67:33:20:a8:47:2c:7d:ad:27:20:
74:ef:d5:57:f9:90:c0:c3:2a:fd:a0:c3:71:46:32:c4:6e:5f:
f6:55:d3:44:99:83:f8:b7:44:4a:4d:93:45:ef:71:7e:cf:4a:
a4:bc:07:aa:d2:95:47:92:a4:c5:ee:db:84:4c:7f:cb:9f:e9:
58:53:5b:a4:d4:88:64:93:23:a4:f0:aa:b1:ec:15:78:0f:73:
ec:9b:72:f9:ef:80:3c:f1:c6:53:f7:27:d4:08:99:fc:4c:d6:
ea:01:b0:ec:de:d7:e7:e8:73:db:50:46:7b:5e:f6:6f:df:ff:
16:bf:0c:27:8b:b2:27:0d:05:3d:ca:a3:12:97:3b:47:72:f6:
88:a9:ab:c9:41:c7:67:dc:86:29:c0:16:ee:25:ec:a0:92:f1:
cb:0f:b2:9e:0e:4f:61:27:ef:e5:4c:f7:c2:2c:c5:fd:32:31:
96:34:13:6d:07:b5:9f:21:0c:97:23:2c:44:0a:98:7a:de:0d:
19:45:4c:0b:1c:a8:6e:fe:63:10:8f:d5:b8:75:1b:11:36:a9:
7e:dd:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:18:41 2025 by rpki-client