Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tUgUDShwXJaMgXrDvzROR3gmLDs.roa
File: tUgUDShwXJaMgXrDvzROR3gmLDs.roa (raw, json)
Hash identifier: zCd9nHOcaRR4OQdpJ86vIF6iUGq7pPJ8so2whGemNbM=
Subject key identifier: B5:48:14:0D:28:70:5C:96:8C:81:7A:C3:BF:34:4E:47:78:26:2C:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018997E6B7609F5E14E71C98ECBA7EEF0135
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tUgUDShwXJaMgXrDvzROR3gmLDs.roa
Signing time: Thu 27 Jul 2023 15:10:26 +0000
ROA not before: Thu 27 Jul 2023 15:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:e6:b7:60:9f:5e:14:e7:1c:98:ec:ba:7e:ef:01:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 15:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b548140d28705c968c817ac3bf344e4778262c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:32:89:95:af:6e:cc:65:db:89:86:27:87:
a3:b6:0d:f9:17:f8:3c:14:ae:4b:6a:ce:38:d2:d1:
f7:21:1b:a5:bd:1f:10:bb:13:3a:48:e0:34:7b:68:
0b:5a:44:ae:c0:f1:32:05:63:a8:f0:16:1e:ab:38:
4a:02:5d:b6:a9:dd:39:eb:4b:9d:da:80:02:60:44:
5e:d3:3e:fe:7e:ea:3b:72:68:1f:e3:17:ed:18:e2:
06:ad:e7:55:c2:ac:e0:2f:b6:4a:10:52:cb:99:6c:
39:2a:c1:d2:90:b1:ca:bf:e1:02:13:0f:9f:b0:2e:
ef:9f:ce:94:74:ce:4c:77:9a:dc:29:3f:2a:c4:8f:
16:17:ef:17:bb:52:b3:e7:58:77:11:2a:07:42:1c:
2e:e3:9b:af:e2:ab:f6:53:5f:ae:77:af:7f:c9:73:
7e:54:ec:a7:d4:aa:e3:41:60:7b:78:96:f8:1a:a9:
bf:d1:de:20:fa:eb:ea:dc:cb:26:f4:20:fd:fd:bd:
15:95:36:4b:49:9d:c8:f9:1f:0a:e1:9b:74:1f:1a:
28:db:ea:fd:64:c9:ff:94:1c:0c:e0:c0:c5:b6:87:
3b:e3:07:bd:42:ba:d9:84:4c:de:d5:2f:5b:2d:4b:
02:3e:6d:90:65:db:f2:5d:9b:f3:eb:ae:94:96:da:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:48:14:0D:28:70:5C:96:8C:81:7A:C3:BF:34:4E:47:78:26:2C:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tUgUDShwXJaMgXrDvzROR3gmLDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:a6:f1:d0:01:f1:21:e2:87:fc:ba:a0:54:95:cb:be:d2:0e:
23:b7:dc:59:f7:f9:af:b4:94:4f:b9:37:21:89:07:56:23:28:
aa:de:ed:6a:7d:1e:12:8f:f9:20:6f:a7:b7:97:de:d7:89:e4:
b6:9d:1b:1a:c1:9e:39:09:86:3f:22:f3:8c:3b:d8:28:1f:1b:
05:fc:9a:7c:b8:25:e4:cc:fc:0f:a9:34:12:f0:dd:69:c5:6a:
f0:fa:6e:97:81:40:2c:57:f3:aa:cc:67:a9:86:e4:b3:a9:31:
32:89:90:9b:38:7c:a1:cf:75:32:4f:0e:32:cb:16:3e:e1:40:
85:7d:0c:e8:c6:d0:9d:46:b7:07:09:a9:f6:a8:51:3d:ac:84:
cc:a0:f2:f6:6d:ae:7c:22:0a:88:7e:d6:0d:c5:4f:6e:d2:30:
34:35:ca:1f:f3:f1:52:3f:f9:03:30:ca:3d:e3:5b:a9:82:3a:
fa:50:22:91:5b:cd:fc:21:11:19:9c:8f:ab:bc:8d:55:fa:44:
9b:76:37:92:10:10:7c:0e:41:7e:53:92:3f:68:e4:e3:95:63:
3e:3e:b3:16:e9:c0:16:5c:f3:25:6e:33:f8:03:2d:44:5c:64:
50:8b:54:27:1d:3f:ae:39:f1:e2:cd:6f:c7:26:15:9c:c3:3f:
86:64:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:37:01 2025 by rpki-client