Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1TKwjHaESZNpcyhAwiTUJF3jnqY.roa
File: 1TKwjHaESZNpcyhAwiTUJF3jnqY.roa (raw, json)
Hash identifier: fG0li3vgDRF5mqILNrVOEAzaQErzETtr5ORpBeAfuDM=
Subject key identifier: D5:32:B0:8C:76:84:49:93:69:73:28:40:C2:24:D4:24:5D:E3:9E:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F2526A2FC152609D86FDEB622C382E88
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1TKwjHaESZNpcyhAwiTUJF3jnqY.roa
Signing time: Wed 31 Aug 2022 05:14:23 +0000
ROA not before: Wed 31 Aug 2022 05:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:52:6a:2f:c1:52:60:9d:86:fd:eb:62:2c:38:2e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 31 05:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d532b08c7684499369732840c224d4245de39ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:ab:93:07:78:cd:bd:7e:22:8f:e5:9e:04:
74:74:85:44:d6:a2:7e:66:ab:f0:19:e0:32:c4:69:
7b:73:65:1a:44:e4:51:ad:ba:d3:17:75:88:36:3e:
af:81:ba:4b:eb:23:f8:7b:11:f4:3f:ab:aa:c6:a5:
b9:89:8e:a7:95:d4:e6:0a:4b:a4:be:d9:22:61:94:
75:25:f2:f9:94:00:de:16:9f:2a:ce:c5:ca:16:db:
fa:78:e9:5d:94:cd:93:5e:2c:b7:21:7b:8a:c8:72:
be:f4:51:13:de:04:d0:ec:e3:59:be:df:f4:81:38:
8b:9f:d8:8e:c2:08:29:7b:2f:b1:dc:23:ca:a1:17:
ef:18:ea:4e:cf:75:aa:74:b1:12:96:03:ab:f2:16:
95:3a:88:0e:20:b9:3c:6d:12:54:75:2d:33:7f:bc:
88:fb:78:c1:04:bf:9e:b5:29:bb:93:e9:37:c3:68:
a3:90:84:8d:47:f9:79:bb:d5:68:4c:cb:a6:60:5d:
30:f6:46:82:f4:2a:34:d6:68:58:50:e4:95:cf:b7:
ef:c2:24:72:e8:06:19:93:1b:f4:7f:06:a4:40:9b:
3f:1f:b0:aa:f3:8e:82:f2:95:6d:72:0d:11:d3:6e:
17:3e:6c:d9:b0:ff:db:9d:a5:36:3e:3f:b1:f1:d0:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:32:B0:8C:76:84:49:93:69:73:28:40:C2:24:D4:24:5D:E3:9E:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1TKwjHaESZNpcyhAwiTUJF3jnqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:58:d2:6b:cc:c5:1f:d0:80:35:2e:56:63:dc:d1:09:dc:fb:
7f:ce:f3:04:c7:59:07:af:eb:26:96:b6:8c:fd:c9:cd:1f:19:
be:e6:46:8a:31:6a:2c:21:93:99:36:ac:8c:97:2e:e0:2f:54:
90:02:12:4d:18:4b:71:69:5b:c2:ad:20:53:65:56:ed:54:60:
83:0c:3c:97:ed:7e:3e:1b:8d:19:52:cc:4e:0d:72:96:8d:2d:
67:d9:97:93:99:4b:11:78:a7:5f:ee:28:56:1d:10:9c:91:08:
b6:67:23:cc:dd:81:d6:f2:f3:17:0f:f3:63:dd:f6:7e:d3:2b:
c3:bd:8a:75:bd:63:ff:e5:77:e6:0a:18:d3:70:09:7b:af:eb:
18:93:a3:f7:26:ba:b1:64:8a:2d:8f:78:09:54:fb:be:c5:85:
28:3a:5c:21:25:e0:b1:d9:59:c2:8b:ae:27:04:a2:6e:a0:05:
71:c9:87:52:e4:2e:21:df:22:2b:08:df:a9:d9:12:d2:97:81:
b6:13:cf:29:7c:e5:a7:2a:e1:4d:a5:73:88:4a:88:59:82:3f:
fb:c7:bf:4a:24:8b:6c:22:33:f8:95:c9:44:fc:6b:7e:06:d0:
44:e8:66:51:d2:04:50:95:56:d4:4f:2c:92:38:50:aa:5e:85:
e2:4c:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:46:47 2025 by rpki-client