Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tZWqq-Efxtd8LVOwHHDoaOpxzPs.roa
File: tZWqq-Efxtd8LVOwHHDoaOpxzPs.roa (raw, json)
Hash identifier: /fAf78ZJvqWkcKC6NcYrgkYzwlgFlkAULOb1jtagM78=
Subject key identifier: B5:95:AA:AB:E1:1F:C6:D7:7C:2D:53:B0:1C:70:E8:68:EA:71:CC:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D823ECF4E442AE149D574D1F14D26E42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tZWqq-Efxtd8LVOwHHDoaOpxzPs.roa
Signing time: Fri 26 Aug 2022 03:13:29 +0000
ROA not before: Fri 26 Aug 2022 03:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:23:ec:f4:e4:42:ae:14:9d:57:4d:1f:14:d2:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 03:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b595aaabe11fc6d77c2d53b01c70e868ea71ccfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:b1:bc:a9:c4:d8:9b:5e:ad:91:cf:86:d9:
3d:f8:19:f6:4f:e8:ca:2d:ee:d7:a6:bb:fe:8c:f6:
74:f2:3c:1a:2f:b6:6c:bc:13:d5:60:f3:8d:3e:bd:
3b:de:95:69:cb:9e:bb:eb:8a:15:ca:ee:d8:4c:e3:
90:79:d6:7f:e1:ad:3d:e7:26:1b:27:c6:f4:51:ea:
fe:6b:9c:cd:fa:af:bd:16:65:c8:1e:87:28:98:c4:
97:c0:06:ad:b8:7e:77:bf:21:30:94:6f:61:ad:b6:
ba:78:70:cb:9a:3c:cc:93:81:68:03:37:d0:8f:96:
79:32:2b:0a:7c:3a:2f:d2:f3:64:51:0a:d2:6e:be:
47:7a:3c:25:88:7d:8f:bf:42:8c:a7:1b:4a:8e:88:
8a:01:88:34:4e:19:91:83:87:10:0d:0f:71:a8:0d:
7e:c0:c9:ab:0a:cb:cd:66:87:94:c0:ac:c2:bc:7e:
c2:f1:0b:b3:5e:0b:93:fe:19:76:8b:c2:36:99:a2:
c1:fc:ab:7a:1b:a4:fe:9c:fb:7b:2a:57:0f:65:ae:
a8:10:0c:7d:36:2c:90:24:46:63:33:75:bb:d3:e5:
3f:c9:cc:dc:5a:c8:71:99:3b:08:8b:3a:df:85:f9:
50:59:7e:ee:08:a5:e0:b8:45:3e:7c:ed:fa:cc:99:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:95:AA:AB:E1:1F:C6:D7:7C:2D:53:B0:1C:70:E8:68:EA:71:CC:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tZWqq-Efxtd8LVOwHHDoaOpxzPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:5f:9d:57:b0:e5:73:11:31:14:bf:a9:86:cf:35:5b:c6:52:
28:0d:61:5c:8c:65:3e:9d:67:5a:e7:05:63:1c:77:b3:5c:86:
53:46:62:06:f6:f8:54:20:25:1d:bf:2b:3f:97:b3:d2:06:03:
e4:1b:02:7a:90:36:90:df:6e:42:d5:37:4b:e8:b8:5a:d4:24:
f1:2d:b3:ec:67:e6:fc:dd:87:a2:d4:6f:30:ea:c3:fc:aa:f8:
58:79:59:9d:e8:c2:75:68:af:81:f8:3c:f3:0c:53:52:ac:fb:
ed:a3:e9:20:a9:a2:d4:0c:6c:54:84:4d:33:33:19:ac:7d:cc:
d8:7a:0a:a0:7a:fa:78:85:00:1c:21:01:f5:e3:5d:33:fd:11:
4f:d2:ba:fc:91:07:af:a1:37:98:2c:50:33:04:e1:41:0d:87:
d0:bd:07:7d:50:d2:17:ed:6b:a9:bb:1c:63:a7:93:2a:d9:06:
ec:d3:cb:05:5e:a1:be:80:10:2a:bf:80:bb:fa:ee:14:d3:4d:
a9:82:13:e6:6b:b8:c7:07:17:9f:bf:27:2a:70:3b:06:e0:65:
cb:94:56:f9:a2:d0:7e:25:85:ce:2d:9b:bc:d1:f1:05:49:f8:
38:9a:ca:e2:2e:b4:ca:a7:43:38:1d:de:86:15:16:fc:0f:59:
d5:53:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:27:19 2025 by rpki-client