Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/usuwTN56Mw34xCDD8QF6IdPdT1o.roa
File: usuwTN56Mw34xCDD8QF6IdPdT1o.roa (raw, json)
Hash identifier: nvWHK5tCiNNf0X/we+7s28Z7yt8unpTcYw0//JYKt5Q=
Subject key identifier: BA:CB:B0:4C:DE:7A:33:0D:F8:C4:20:C3:F1:01:7A:21:D3:DD:4F:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7D260889
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/usuwTN56Mw34xCDD8QF6IdPdT1o.roa
Signing time: Thu 21 Apr 2022 04:10:45 +0000
ROA not before: Thu 21 Apr 2022 04:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2099644553 (0x7d260889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 04:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bacbb04cde7a330df8c420c3f1017a21d3dd4f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:24:8a:e2:29:26:27:05:49:39:c2:ae:f7:
1a:8c:40:f4:85:da:f3:7e:2c:b8:76:a9:51:d3:3b:
5f:e0:fc:28:45:c1:68:58:7b:70:b4:32:c9:8c:fe:
67:a7:24:58:c9:23:a8:7c:ca:c1:d3:f1:24:22:60:
fa:42:d6:d1:c9:a1:b5:54:5d:ac:30:8a:87:cd:97:
57:4d:1c:25:c5:38:5c:b0:31:e1:96:dc:b9:ea:85:
a4:56:1f:ec:ec:88:69:ac:5c:8c:be:fd:9c:2b:ff:
6d:e1:b2:92:07:25:d0:74:b9:e3:68:3d:74:18:33:
3f:29:d2:bc:46:42:99:55:d6:8d:d6:ea:19:cb:bb:
7e:4e:a1:15:1c:47:23:ef:b7:e9:b0:fb:c0:51:6e:
bd:3a:f8:a1:f5:e3:9f:e8:24:b5:75:de:4d:f4:4c:
72:3d:e1:8e:64:c7:75:f6:08:89:a2:30:36:fb:77:
65:2e:5c:d7:6b:ad:05:72:f6:5c:5c:19:b2:4e:a7:
55:a4:1a:9f:e1:cc:03:02:38:b3:6f:6a:6d:5b:f4:
f1:b6:b6:77:1b:55:e0:82:46:f5:19:8b:82:f6:7e:
48:38:ad:93:8d:93:af:2c:bb:60:6e:65:37:9d:97:
d5:16:54:d5:f0:fb:bb:d5:da:dd:66:7c:83:01:68:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:B0:4C:DE:7A:33:0D:F8:C4:20:C3:F1:01:7A:21:D3:DD:4F:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/usuwTN56Mw34xCDD8QF6IdPdT1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:5e:75:ba:f5:4a:28:41:d6:04:f5:d4:38:7b:75:24:7d:2f:
61:f4:1f:87:6e:55:3a:1f:32:41:93:80:57:dc:60:12:32:f2:
56:02:40:6b:d9:70:8a:19:72:df:d5:0e:ab:9f:56:f3:7b:30:
34:dd:7d:73:cd:cb:f7:12:87:2a:62:46:ec:59:c2:8f:3b:5e:
28:ff:78:f0:f5:4b:c6:1f:6c:50:b8:69:aa:e1:83:76:1d:bc:
3d:b9:87:5f:aa:59:13:c0:dc:00:24:b4:50:ad:f3:01:36:b2:
d6:47:06:97:47:39:60:00:e8:70:3e:4d:c1:8c:b4:e7:14:be:
1f:d8:d6:96:1e:3f:68:e5:6e:18:b7:16:07:c1:38:29:e2:ee:
75:10:55:c8:43:ec:80:5b:62:2c:46:af:70:c6:80:2e:e2:ff:
4d:f3:3f:2f:94:4e:62:48:76:80:e0:7e:c0:0b:9e:8d:d8:a3:
49:0c:aa:ce:90:52:94:e2:fc:90:68:39:e0:64:d4:0d:b1:1c:
db:92:62:f2:73:26:73:13:bc:14:fe:1b:1f:7c:74:b1:44:de:
41:b8:07:aa:8d:3d:5f:72:43:52:76:9b:8f:1a:9d:24:62:fd:
c5:4f:36:c8:d2:69:fb:97:4a:58:e0:70:48:42:4b:2e:7a:bd:
45:3a:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:45:46 2025 by rpki-client