Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tsg-mUGYtPlE4cRRtFaPbW87x-E.roa
File: Tsg-mUGYtPlE4cRRtFaPbW87x-E.roa (raw, json)
Hash identifier: 4vKfng8kocAtBJJVhHtL+hXSFseBuhp18gXorbvMA2c=
Subject key identifier: 4E:C8:3E:99:41:98:B4:F9:44:E1:C4:51:B4:56:8F:6D:6F:3B:C7:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871AD5BA81721D231474B3F9E161999294
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tsg-mUGYtPlE4cRRtFaPbW87x-E.roa
Signing time: Sat 25 Mar 2023 22:13:47 +0000
ROA not before: Sat 25 Mar 2023 22:13:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1a:d5:ba:81:72:1d:23:14:74:b3:f9:e1:61:99:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 22:13:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ec83e994198b4f944e1c451b4568f6d6f3bc7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:95:01:94:c9:03:02:68:a6:e9:05:c1:3a:
d7:27:40:38:db:e4:91:4b:da:bf:08:3f:9d:32:5a:
ba:a0:02:92:65:cd:e3:c4:25:2c:ba:3c:64:21:c8:
d0:c5:1f:5c:2c:92:9d:12:85:b8:52:d4:94:fc:26:
44:81:47:42:91:ef:40:2d:27:29:e5:c2:ce:f8:9b:
05:3b:dd:92:4e:30:0c:2c:de:2c:22:74:6d:f1:0e:
ca:d4:f2:10:6b:3b:9e:74:af:9d:96:f0:11:db:15:
a2:1e:88:87:77:94:53:1b:48:dc:f5:bc:55:8c:d2:
8f:e3:a6:af:e4:f0:af:c7:01:57:c1:25:ef:8b:7b:
74:00:30:47:bb:72:65:9f:1d:ee:2e:12:d0:04:dc:
4d:73:f3:e3:7c:e0:41:92:64:6c:b5:ac:20:71:4a:
87:58:ea:1c:60:b3:79:8f:81:db:ef:69:cf:1a:f0:
02:e7:f6:52:f1:1e:68:d2:39:44:ee:33:4d:7c:b4:
fb:8c:ce:cb:ed:8b:e9:95:b9:5f:d5:1b:85:da:1b:
00:9c:c0:0e:58:99:b5:50:0a:28:7f:88:6e:e9:a2:
08:e1:92:d6:73:d1:63:ac:8e:a3:16:ba:ee:94:f8:
d3:cd:6f:5f:b8:f5:34:56:cb:77:db:92:99:28:e9:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:3E:99:41:98:B4:F9:44:E1:C4:51:B4:56:8F:6D:6F:3B:C7:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tsg-mUGYtPlE4cRRtFaPbW87x-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:c1:8d:78:68:99:a3:05:1d:10:d1:d4:c0:cf:78:4a:5b:3f:
8f:24:4f:79:3e:69:a8:33:9d:7a:9e:65:96:6b:ac:46:c5:8a:
79:57:5c:a2:46:1d:6e:66:66:8a:79:46:25:10:57:3a:82:f0:
f4:01:61:a4:4c:22:8b:f1:88:df:b3:56:8c:5f:2b:69:22:f7:
f2:cb:43:67:34:aa:6e:d6:d8:ce:d5:d1:94:ed:6f:a7:78:15:
d5:83:31:f9:af:42:e3:90:c6:eb:54:5b:30:94:df:30:85:57:
6f:ee:8a:85:5b:65:73:5a:66:19:d7:f7:ac:9f:36:4d:50:8a:
8c:9e:ee:3e:33:8d:f3:bc:45:73:c1:84:29:e2:c2:d3:a5:fb:
46:c2:a0:6c:f8:04:b8:97:1d:3f:6f:f2:e2:47:18:38:f3:1d:
09:57:15:56:4a:a6:85:3e:12:e6:7e:40:70:5a:8e:7a:60:f8:
2a:8c:b3:06:48:02:dc:86:b9:80:32:17:64:ea:1b:9a:1a:51:
98:ad:ef:95:7e:9f:c4:a1:18:8b:01:b4:f0:a6:f1:2e:35:63:
ed:77:2a:7c:6b:1a:0f:20:67:d4:6b:f8:85:cf:03:6e:fe:3d:
fa:9c:af:a6:99:ac:9f:ff:a3:9a:bf:16:51:bc:45:e4:00:a4:
3f:a0:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:25:10 2025 by rpki-client