Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/StuPZqj_glOZ-ckW8nLqMwXL54A.roa
File: StuPZqj_glOZ-ckW8nLqMwXL54A.roa (raw, json)
Hash identifier: yE6fQ+vIJ31dvg5Y9hykFZZ36jkgnnUiOVt6YZxtTUQ=
Subject key identifier: 4A:DB:8F:66:A8:FF:82:53:99:F9:C9:16:F2:72:EA:33:05:CB:E7:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186711B439874B9DE31635B886993A8D661
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/StuPZqj_glOZ-ckW8nLqMwXL54A.roa
Signing time: Mon 20 Feb 2023 23:14:17 +0000
ROA not before: Mon 20 Feb 2023 23:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:1b:43:98:74:b9:de:31:63:5b:88:69:93:a8:d6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 23:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4adb8f66a8ff825399f9c916f272ea3305cbe780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:1b:f2:13:48:df:bc:27:00:cd:9c:e1:d5:
5a:63:3e:65:cb:5f:4c:26:fa:ca:a7:2e:9e:82:59:
23:65:3a:d4:20:07:2a:15:54:58:31:88:41:1f:c2:
8e:16:15:11:8f:7d:5b:26:c3:ee:fa:66:b9:65:14:
bb:a3:eb:e9:62:44:fb:5e:b9:8f:dd:06:e6:26:eb:
df:b0:18:3c:b3:df:92:3f:42:b1:f5:24:da:b0:69:
2c:c3:13:90:77:f7:68:ed:6f:c2:c1:33:c6:60:8d:
4d:5c:bc:1f:b6:11:da:db:6d:cf:dc:e6:1b:f3:71:
af:45:8a:49:a8:53:13:be:94:42:0d:60:30:c1:ba:
ef:07:dd:e4:4c:45:ef:76:e5:48:e5:cf:00:bd:0a:
11:fe:e4:1c:99:27:e4:21:17:49:a7:dc:3e:74:e0:
06:7d:de:05:ff:a2:0f:d3:aa:89:9a:aa:7b:43:0b:
b6:f3:dd:fc:7e:58:4b:76:47:f1:79:d1:be:f9:cd:
c0:ba:4c:c8:ca:24:99:56:a8:45:e4:14:d5:06:e2:
d4:66:09:9e:86:60:89:9a:c5:1f:05:04:0e:7f:a0:
0b:d8:b6:f2:08:14:f3:01:a6:fd:79:41:2d:83:98:
14:79:f3:7f:c4:b6:bb:29:70:fa:9e:3c:90:e5:13:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:8F:66:A8:FF:82:53:99:F9:C9:16:F2:72:EA:33:05:CB:E7:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/StuPZqj_glOZ-ckW8nLqMwXL54A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:ba:b1:e4:25:96:a8:6d:62:2e:ce:a5:27:59:dd:98:67:48:
b8:3c:75:3d:e1:b5:d6:40:9f:c8:66:8d:b4:7a:65:03:dc:a9:
70:c1:7c:8f:6f:17:84:b4:aa:76:76:f9:64:6f:7b:6f:ea:ae:
d9:09:64:31:64:fb:f7:a5:26:43:f4:11:b6:0c:34:9c:72:2a:
ba:ef:ef:a5:22:06:6e:41:fa:bc:43:b2:a1:dd:5c:0b:23:2e:
c0:8c:75:5d:e2:c5:6f:80:5f:76:07:5a:0e:68:c1:22:ad:9e:
6a:59:ad:c5:5a:4d:61:1f:6f:34:98:58:0a:16:be:b4:86:31:
b5:bb:3e:5c:27:a3:f5:74:b9:43:e6:3a:7b:15:19:2e:f0:b5:
40:8d:6f:e9:5a:e8:eb:b0:07:38:83:ad:46:16:a3:a7:fb:af:
be:ab:05:91:b1:7f:8f:95:9f:87:0c:0b:3c:fd:b2:28:40:02:
f9:64:6d:36:bf:f0:19:fe:e4:65:d8:14:56:5a:13:41:68:f1:
76:b9:19:18:38:9a:e0:eb:be:1f:f8:41:2d:88:bc:bb:4e:97:
f2:cd:0f:2b:cc:da:98:34:7c:4a:94:67:8f:8f:90:7c:22:e2:
72:c9:cc:ab:49:9e:42:1f:52:ee:8a:48:ee:b0:7d:ed:2d:d9:
22:d6:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:35:42 2025 by rpki-client