Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tJCXK1OERwIyvJgGcv9ffxbi5dg.roa
File: tJCXK1OERwIyvJgGcv9ffxbi5dg.roa (raw, json)
Hash identifier: wCuCMAUvlrZcH8KbC6pYXAwyUm9oOz6WIPI+MttR66Q=
Subject key identifier: B4:90:97:2B:53:84:47:02:32:BC:98:06:72:FF:5F:7F:16:E2:E5:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D24568BE0DBBE334A7C8B42B74DE16FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tJCXK1OERwIyvJgGcv9ffxbi5dg.roa
Signing time: Mon 19 Jun 2023 06:09:04 +0000
ROA not before: Mon 19 Jun 2023 06:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:45:68:be:0d:bb:e3:34:a7:c8:b4:2b:74:de:16:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 06:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b490972b5384470232bc980672ff5f7f16e2e5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:bb:ff:07:8d:1c:d2:19:ea:b5:41:e5:e6:
38:02:e9:90:da:c4:8b:a9:12:ba:2f:4a:87:97:0a:
f0:ca:bb:84:65:ae:63:d8:aa:d6:aa:d7:06:a9:89:
5a:51:0a:39:f1:9d:42:9a:3b:20:17:0b:ea:7e:83:
f9:08:32:db:46:c6:d0:5b:b6:b2:3e:d5:7f:20:49:
79:70:a5:9f:5c:34:ed:68:4f:7f:df:56:27:79:9f:
2d:58:c0:10:ab:1a:2d:a0:9c:2b:9f:c4:b0:5c:05:
77:8c:d8:22:7f:5e:ef:41:e6:f8:6e:5d:11:8c:a6:
18:d4:d0:84:f9:bc:46:1a:5e:1c:a8:ec:29:4b:88:
6e:68:9d:41:59:66:38:a8:80:ce:45:a7:ab:6e:14:
0e:2d:d5:99:7e:7d:21:75:fb:1c:69:11:1f:75:20:
87:3c:e3:80:1b:af:bc:4c:eb:34:27:21:97:11:74:
48:16:e1:0b:74:3d:f7:66:ba:20:43:2a:ba:37:13:
81:e9:f1:5b:18:96:44:ab:a2:d6:02:85:ae:e3:e3:
19:a7:19:34:38:7b:e5:6c:f1:9a:d1:56:c2:1d:d9:
a1:d7:30:77:fd:bb:30:bf:e3:bf:d3:d5:2c:53:05:
1b:85:be:ee:af:b9:1b:77:1a:de:2a:e5:e6:10:d8:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:90:97:2B:53:84:47:02:32:BC:98:06:72:FF:5F:7F:16:E2:E5:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tJCXK1OERwIyvJgGcv9ffxbi5dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:45:84:42:70:ee:6c:b9:3f:6d:5b:1a:3c:c3:14:b4:1d:e4:
67:2c:21:99:97:f8:a3:94:46:4e:d5:02:af:5f:4d:5d:a7:b3:
11:5f:f4:5e:77:bb:f0:b9:58:77:8e:d3:75:bf:41:88:0e:20:
4a:b1:57:5c:56:4e:2f:87:f6:85:a8:cf:3a:aa:9a:30:a2:6b:
ca:51:fd:f2:33:48:a2:d9:00:66:9c:42:40:99:89:3b:40:23:
6c:3d:87:6d:b9:a1:4b:84:8f:a0:1b:78:af:28:1f:57:aa:d3:
5d:cc:3a:69:b0:ca:3a:2e:37:f2:48:d1:00:77:95:d7:2c:fc:
8c:a0:d8:67:66:fd:7e:87:c3:31:68:1b:a2:60:ae:93:60:d6:
a6:61:39:1d:38:a8:0d:df:10:7b:69:52:97:84:16:aa:a1:89:
30:91:97:44:ab:20:2f:3a:4d:42:62:8c:ac:b9:b6:4d:ae:c9:
63:97:7b:21:3d:48:ac:10:5a:77:72:69:cc:9f:fb:76:a5:1e:
cb:45:06:7b:7b:be:da:09:66:f5:28:6e:06:76:d7:98:a4:c9:
57:f9:bf:76:e6:7e:e2:8f:75:fc:0a:be:c0:03:d7:3a:84:26:
4d:08:ec:e3:da:1f:89:27:8b:5a:20:a9:36:3a:87:f3:70:03:
ca:56:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:27:49 2025 by rpki-client