Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1tyj-kTbIUuifQH7NoEHF4ycHTE.roa
File: 1tyj-kTbIUuifQH7NoEHF4ycHTE.roa (raw, json)
Hash identifier: GzPFLmmagMuFeLnT6b530rv6mKSj06m2+8N1aVMyeUA=
Subject key identifier: D6:DC:A3:FA:44:DB:21:4B:A2:7D:01:FB:36:81:07:17:8C:9C:1D:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C455B50BFEC96C30E1835E07D98A2674
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1tyj-kTbIUuifQH7NoEHF4ycHTE.roa
Signing time: Sat 05 Aug 2023 06:14:58 +0000
ROA not before: Sat 05 Aug 2023 06:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c4:55:b5:0b:fe:c9:6c:30:e1:83:5e:07:d9:8a:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 06:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6dca3fa44db214ba27d01fb368107178c9c1d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:d0:ac:5d:f3:73:bc:9c:6b:ba:d9:bd:bd:
23:47:ac:bd:ac:62:1b:4a:2b:09:1a:4f:81:28:6e:
0b:3b:6f:dc:bc:bf:9d:2f:a2:d8:d2:4f:9e:d7:ac:
92:10:97:39:6d:c3:cc:9d:86:9a:0b:ea:e3:63:3b:
8e:60:a6:e6:50:37:8d:38:3a:2c:b0:db:1b:49:5d:
cf:26:9d:04:45:fe:36:47:27:0f:26:55:3f:b4:78:
80:b4:ce:49:c3:33:49:3c:ff:c5:43:52:56:52:9a:
6a:84:95:aa:cf:70:f2:f9:e6:42:66:41:b7:82:98:
75:3b:1a:8f:ce:68:3a:48:f1:75:df:8b:d0:c8:61:
d7:e5:f2:9b:a9:57:1f:9e:f3:59:17:c2:e9:4b:20:
ee:04:dd:77:df:3e:74:c0:d6:9a:95:d3:95:d0:6f:
9a:26:7d:52:0e:29:9e:f7:9e:82:10:7e:ca:9f:32:
60:96:ad:08:de:4f:aa:88:43:98:34:f4:0e:47:6d:
c5:9a:f2:e1:5c:ce:82:11:14:b4:fe:0c:5d:63:10:
d7:26:c7:f0:21:27:5f:3e:33:fa:b4:24:eb:8e:25:
89:36:3a:97:18:00:28:0e:78:42:b8:9e:4f:47:ff:
c8:89:79:e8:78:ca:1d:87:57:c1:5b:57:1c:52:73:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DC:A3:FA:44:DB:21:4B:A2:7D:01:FB:36:81:07:17:8C:9C:1D:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1tyj-kTbIUuifQH7NoEHF4ycHTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:43:4b:21:9a:02:7c:ea:ad:d2:c7:19:5e:57:cf:aa:7f:fb:
38:1f:0f:73:9e:97:07:39:40:ec:ec:cc:c6:99:10:e4:04:ab:
e1:d3:e0:85:b7:c9:ae:26:82:1a:d6:f1:6f:0e:60:23:57:67:
72:98:51:8a:6f:7d:b3:29:60:dd:26:74:4d:b1:fd:31:94:2b:
62:97:8f:3e:d7:41:92:ee:8d:d1:13:fa:3a:2e:ec:f1:73:de:
3e:eb:84:98:b5:de:f4:11:15:5b:d3:ac:5b:a6:0e:8a:b1:9d:
30:1c:68:0d:a3:77:4e:e3:a9:92:a2:bc:ee:bd:5a:ad:75:a4:
ed:99:35:2d:e2:31:74:50:aa:fa:0f:0a:c1:e2:0d:eb:df:6c:
77:d1:21:2a:ea:92:d7:c4:bf:2d:2a:17:df:95:16:c3:2d:34:
16:58:6a:22:61:e8:8b:7f:e0:f0:3c:40:be:e5:17:f9:d4:a9:
02:f4:9c:c4:00:7d:7c:28:dc:23:4a:fc:c7:3f:b9:c1:60:87:
00:6c:d1:5a:5d:8b:0d:5c:51:4e:ae:65:16:4d:a4:84:06:5a:
eb:a2:3a:5e:53:1d:e3:2e:c9:4a:5d:18:04:0b:bb:f5:3a:cc:
53:a4:00:3c:85:a1:03:51:b7:8a:6a:f5:c0:68:7b:e5:17:7b:
1e:89:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:17:08 2025 by rpki-client