Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tnaXQMrWtPDhmeY9efcXNaKrUkc.roa
File: tnaXQMrWtPDhmeY9efcXNaKrUkc.roa (raw, json)
Hash identifier: 990MCsd36igbxNMgzI+RBSLhSAY1LRovTZ9U+yayOdU=
Subject key identifier: B6:76:97:40:CA:D6:B4:F0:E1:99:E6:3D:79:F7:17:35:A2:AB:52:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FC8E40EBFBCB1CEA001B52671EAF4F6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tnaXQMrWtPDhmeY9efcXNaKrUkc.roa
Signing time: Wed 16 Aug 2023 04:15:28 +0000
ROA not before: Wed 16 Aug 2023 04:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fc:8e:40:eb:fb:cb:1c:ea:00:1b:52:67:1e:af:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 04:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6769740cad6b4f0e199e63d79f71735a2ab5247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:a1:5b:f2:49:89:4f:8c:8f:1f:ac:b4:9c:
89:67:5b:9f:56:45:a4:25:e5:07:72:8f:42:b0:f7:
a2:6c:10:19:f7:d3:84:68:cc:4b:23:2a:dc:fe:b2:
11:8c:75:42:d2:21:17:26:02:67:e5:1b:11:68:b4:
3f:31:ed:ce:ad:e8:09:25:81:a9:6f:28:75:5c:95:
ba:f0:b2:49:e1:25:31:5e:68:fc:f3:62:ac:33:67:
be:ab:89:8e:ef:54:1f:2f:ad:ce:50:de:63:7a:a0:
eb:21:22:01:a9:07:9e:d0:34:09:07:20:a2:16:27:
e7:86:e6:2b:3d:5a:e1:84:4a:fb:a4:eb:84:71:80:
5e:be:dd:79:b5:25:c4:91:78:23:d3:31:cd:8d:29:
ce:eb:d2:aa:a5:5f:41:cd:6a:43:42:41:3b:58:2c:
15:10:37:5e:1d:22:45:ca:2d:06:dd:b5:72:86:48:
e1:28:7a:f7:d0:d1:3c:b4:bb:df:57:a1:d0:fc:8d:
58:89:a6:a7:fc:40:cb:6f:c5:66:b5:5d:eb:5f:7e:
88:bb:f3:d2:c9:79:41:65:6e:f5:b0:2f:de:fd:4c:
4e:f2:69:37:eb:3a:97:44:c1:62:da:20:3b:a1:c1:
e4:f0:c8:78:8e:05:06:49:0b:94:e8:02:b7:95:cc:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:97:40:CA:D6:B4:F0:E1:99:E6:3D:79:F7:17:35:A2:AB:52:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tnaXQMrWtPDhmeY9efcXNaKrUkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:bf:c0:7e:ac:29:e4:de:77:38:b9:f3:c1:97:6c:9b:d5:20:
8e:d2:28:76:d2:3c:1d:db:b9:7b:b1:8c:66:45:67:e0:ef:fb:
65:f8:4e:0b:24:22:8b:ef:17:4b:4c:e0:44:b5:7d:3d:e9:64:
ba:52:03:4e:3f:16:db:d5:3f:74:23:1e:1a:bd:eb:9d:6c:72:
f9:d2:a7:ea:a0:fa:b7:ab:1d:71:15:a8:98:fe:bb:43:3a:9d:
d8:2a:16:35:39:f9:5f:7b:e4:5d:e7:68:e4:22:ac:66:7f:86:
28:86:c0:cb:f2:5b:c4:27:63:ca:f9:7c:02:a5:1c:ad:44:b8:
24:04:cb:e0:b0:6e:17:de:ef:cd:28:86:a4:9a:5d:03:75:92:
37:50:77:d1:d3:bb:cc:a5:12:70:a6:d8:60:17:e0:e9:df:0d:
24:e2:11:56:df:ac:3f:ad:c7:54:2f:fd:05:a0:43:3e:81:62:
50:7c:0a:d3:22:01:23:c0:e2:38:0e:f0:32:5c:e5:6a:f3:90:
20:bb:4d:d5:cb:08:6c:78:5b:7a:1c:0e:f7:25:62:4b:35:65:
c2:d9:03:8a:46:56:5f:41:3a:ed:2a:a7:47:89:c8:1e:59:1f:
c7:10:1d:9b:62:53:70:86:a7:a4:51:ea:34:6d:3f:76:a4:ba:
4f:49:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:11 2025 by rpki-client