Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tu0_frY5TpyiDLLz3qeoJZty_Y4.roa
File: tu0_frY5TpyiDLLz3qeoJZty_Y4.roa (raw, json)
Hash identifier: Lix8xiYpzWaJ8hJRWcurwXQX5Pidikt5jBHBsPwWFZE=
Subject key identifier: B6:ED:3F:7E:B6:39:4E:9C:A2:0C:B2:F3:DE:A7:A8:25:9B:72:FD:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A01E9A731B53B7A9688DA710A34E04118
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tu0_frY5TpyiDLLz3qeoJZty_Y4.roa
Signing time: Thu 17 Aug 2023 05:13:24 +0000
ROA not before: Thu 17 Aug 2023 05:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:01:e9:a7:31:b5:3b:7a:96:88:da:71:0a:34:e0:41:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 05:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6ed3f7eb6394e9ca20cb2f3dea7a8259b72fd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:e5:f4:31:45:0c:c5:3a:ab:45:ce:87:d8:
71:8c:77:3e:bd:a9:1b:a9:fd:be:77:cf:5b:8e:c8:
b2:45:a4:6a:70:1a:61:ca:82:62:0e:56:95:83:e7:
d8:3e:04:99:b6:80:96:9a:93:09:b1:5b:7e:d2:9d:
d8:cc:30:cb:7f:43:27:d5:62:b8:e1:cc:26:9a:7d:
e0:26:e1:3f:43:82:4f:21:15:c3:c2:af:7b:ab:a0:
26:5c:22:71:04:95:e1:5e:27:20:5a:c5:ee:8d:41:
3f:35:23:bf:0d:aa:d3:ab:60:1a:4b:64:9d:17:bf:
bf:b1:1c:fa:f9:70:86:9e:d4:21:10:e1:3a:70:d6:
db:da:13:59:43:f1:d7:a5:e5:25:ab:f3:32:dd:a3:
9e:8e:2b:d0:fe:40:17:ac:41:39:6d:f4:d2:c5:87:
51:67:f9:71:b3:0d:77:2a:2e:bd:dc:35:08:fe:79:
32:f1:ac:db:40:01:aa:d1:b3:3c:4c:72:99:3e:0d:
d9:8a:14:04:60:88:3c:71:7e:8a:a3:46:a2:95:ea:
b9:36:0d:39:3a:59:7a:cf:e6:e1:5f:7e:90:ba:c4:
dc:de:20:31:00:5c:d0:47:54:fe:4c:c7:8a:98:51:
79:53:d7:b4:af:7f:b3:f7:44:7b:42:47:ca:51:c4:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:ED:3F:7E:B6:39:4E:9C:A2:0C:B2:F3:DE:A7:A8:25:9B:72:FD:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tu0_frY5TpyiDLLz3qeoJZty_Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:2b:3c:48:1a:7c:cb:d7:38:1d:05:1f:f7:20:2d:ff:51:a5:
8e:ed:6e:82:90:de:94:4b:00:0d:de:bd:2e:8f:5d:63:51:dc:
42:77:af:00:2f:fb:8b:fc:57:ab:ee:43:10:89:81:d6:c3:18:
d9:51:db:b5:42:22:41:a3:99:69:b0:65:7c:a2:21:43:d4:a7:
49:c6:c6:a8:71:69:7e:42:31:00:df:5a:78:cf:35:6d:2e:86:
36:c4:4a:44:d8:9b:ef:6e:63:90:ba:46:bd:ef:45:2b:00:99:
9a:3c:72:f6:b9:bd:82:5c:7e:5f:22:ad:e5:26:64:fb:d8:02:
6f:28:af:2c:7f:ab:61:ac:9b:91:b5:77:e7:25:84:b7:73:1f:
ca:a1:c2:09:d5:c7:30:01:55:3f:f5:bc:0a:b3:e4:95:87:c4:
1c:68:ea:44:87:1a:e4:0e:3a:cb:51:bd:17:21:15:78:c4:b4:
82:4f:61:58:f1:c4:d6:76:87:d6:97:ff:83:f3:12:de:e3:f4:
70:15:58:f8:75:89:99:40:35:7e:a7:4c:0a:f2:18:5f:90:f5:
78:66:b0:3f:b7:a7:21:06:1f:66:d8:b0:ef:d6:0d:ed:5b:a5:
6b:b6:11:bf:db:fa:f6:24:50:22:4e:a0:9a:96:4c:55:7c:fd:
a1:07:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:26:04 2025 by rpki-client