Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tfhWu052FnkbDt33DQ1sPz-IhYM.roa
File: tfhWu052FnkbDt33DQ1sPz-IhYM.roa (raw, json)
Hash identifier: w0rUX5OluSXARlFI4lMXFQIakYX8dGVroetnnnBFUNM=
Subject key identifier: B5:F8:56:BB:4E:76:16:79:1B:0E:DD:F7:0D:0D:6C:3F:3F:88:85:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EC0C7E33F16BA59DF7F1125CE5A00595
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tfhWu052FnkbDt33DQ1sPz-IhYM.roa
Signing time: Thu 16 Mar 2023 20:11:27 +0000
ROA not before: Thu 16 Mar 2023 20:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ec:0c:7e:33:f1:6b:a5:9d:f7:f1:12:5c:e5:a0:05:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 20:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5f856bb4e7616791b0eddf70d0d6c3f3f888583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:bb:d7:4c:0f:a3:e1:df:1f:38:b1:f3:bb:
5a:2a:c5:ab:6c:1e:5b:1b:5d:f1:8b:f5:8a:aa:01:
20:ac:9c:4f:fb:55:d2:47:77:ab:03:20:eb:4d:a5:
a3:40:f5:18:da:ed:04:ec:5d:83:33:46:9a:54:d9:
9e:19:c7:d5:d9:72:1d:36:4c:a2:b1:f6:2a:5f:e6:
43:9e:27:c3:4c:82:8c:9f:47:ec:cc:c3:41:f5:a3:
89:1d:23:f2:d5:7c:65:c1:d4:f2:12:f4:54:9a:81:
62:d9:b7:c9:e6:4e:1c:68:e8:ee:38:2d:3e:5f:0f:
1c:10:34:bb:10:b5:5b:cd:54:19:2e:4d:85:23:d8:
07:07:20:65:77:7e:47:91:3a:4a:7a:da:18:bb:19:
b0:5f:1f:a2:2b:ff:af:39:17:4f:40:18:c7:c2:6f:
28:c5:cc:ca:ee:48:a7:1b:75:48:70:64:65:70:1a:
c6:41:ec:10:a3:39:ef:06:55:b0:52:8c:0a:0b:07:
4d:a0:b5:9e:31:3f:ad:bc:1b:e8:2b:91:e4:4e:c7:
df:22:01:95:1e:bd:e5:92:94:df:d4:28:e5:f9:e0:
fa:a1:50:d6:60:2a:ed:01:eb:98:ac:2d:f4:53:cc:
e6:6d:4f:18:db:77:2d:33:80:86:87:2e:56:14:8e:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:56:BB:4E:76:16:79:1B:0E:DD:F7:0D:0D:6C:3F:3F:88:85:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tfhWu052FnkbDt33DQ1sPz-IhYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:e7:42:49:e1:80:24:51:37:5f:c9:f4:03:c3:73:a5:cc:bc:
dc:8c:4a:33:3a:fe:a1:63:7b:fd:b2:04:46:fc:64:3a:05:ed:
60:af:fb:dc:c4:34:e1:41:06:ca:d4:44:90:c8:d5:0f:d4:73:
84:84:f5:d2:94:b6:10:d9:f3:97:38:f4:dd:a5:a4:e5:4a:fb:
12:3f:32:f7:6b:86:e4:b6:8e:51:a9:2a:ec:35:e1:67:cc:85:
15:1d:04:e0:8f:2e:35:ac:da:2b:0f:d3:5b:e2:8a:f5:7d:77:
e0:16:9f:5f:1e:9f:3c:db:72:92:53:5a:ab:4a:7a:3b:b9:bf:
dd:f2:ce:3c:c1:ce:39:73:b9:14:fd:9d:08:9d:93:9c:79:db:
6e:06:3a:1a:47:64:b0:a9:10:bb:d3:1c:5f:b5:5f:b6:89:b2:
a5:dd:b0:b7:85:84:ab:47:9e:d3:6b:aa:35:a3:96:71:47:ac:
e9:15:20:c2:08:7d:3d:5a:01:91:f3:9b:64:f5:c6:0e:ae:3a:
99:26:39:8b:a7:f4:72:3d:fc:74:c8:0a:27:02:96:39:80:dc:
b7:a7:d9:16:41:70:35:38:d1:1e:b6:4c:84:fc:71:38:e0:17:
3c:d8:fd:99:ad:e8:af:99:c0:aa:6c:a1:30:ce:c2:44:4c:de:
6b:cb:ca:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:25 2025 by rpki-client