Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3-tatuNMtCRz6wctqvDKG_08zCY.roa
File: 3-tatuNMtCRz6wctqvDKG_08zCY.roa (raw, json)
Hash identifier: u4B8mpIrJCmP2qQ2Uw+tURtZYX4adycUvmnbxw9zLBY=
Subject key identifier: DF:EB:5A:B6:E3:4C:B4:24:73:EB:07:2D:AA:F0:CA:1B:FD:3C:CC:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821CD341D95DEE381AE60FFFEEBCC9CE43
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3-tatuNMtCRz6wctqvDKG_08zCY.roa
Signing time: Wed 20 Jul 2022 18:16:23 +0000
ROA not before: Wed 20 Jul 2022 18:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1c:d3:41:d9:5d:ee:38:1a:e6:0f:ff:ee:bc:c9:ce:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 18:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfeb5ab6e34cb42473eb072daaf0ca1bfd3ccc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:c5:ef:7d:56:63:ea:39:66:a9:ee:6a:74:
68:81:0c:29:bd:09:f5:22:1d:ad:02:b5:8c:b9:f2:
55:80:5f:48:b5:56:cc:43:fa:c9:74:25:fa:24:2b:
8a:ea:f0:57:c4:83:be:c7:03:fe:65:1c:2f:eb:86:
81:bf:fd:62:30:5a:70:a1:40:0b:f5:af:22:88:0a:
4f:fa:b4:d7:c7:17:5c:8b:80:ab:fe:8e:55:7b:70:
36:8b:c9:ef:ea:0c:95:81:39:db:95:64:29:62:e0:
f1:66:e8:d6:1b:10:5d:c3:30:87:cb:7c:7f:ab:c4:
69:01:88:f1:00:5e:4b:f6:15:e2:c2:48:b3:9e:88:
8a:10:6c:c6:56:79:3c:03:94:61:c0:a0:42:c2:3c:
0c:2d:23:4e:4c:c4:c4:0a:b6:57:65:14:57:df:b4:
aa:51:de:a9:5d:e9:a7:23:04:9e:1a:11:40:a4:03:
cb:28:59:4f:7d:99:5f:35:cd:e1:3e:82:de:bf:64:
86:77:90:ba:a3:27:b7:61:02:9e:fa:b1:89:08:66:
3a:d2:33:db:57:57:1a:65:a0:30:4d:ae:c6:a6:3f:
08:4f:70:06:53:0f:e8:e4:a0:d3:59:06:42:26:ea:
17:f2:3d:12:f2:e4:a9:c6:aa:05:e4:99:aa:fa:2d:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EB:5A:B6:E3:4C:B4:24:73:EB:07:2D:AA:F0:CA:1B:FD:3C:CC:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3-tatuNMtCRz6wctqvDKG_08zCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:29:f4:55:2b:29:bb:c2:84:ff:2b:b2:21:63:f4:84:61:c3:
87:db:3b:d0:5a:fc:ea:79:20:c9:2c:b1:40:ef:b6:c4:53:7e:
a4:c3:b4:66:6b:b2:08:0e:58:47:97:54:a5:37:b0:fa:4f:79:
c7:4d:e0:11:90:74:48:7e:15:b7:60:a6:90:47:48:2a:31:57:
d1:d8:22:cc:11:34:e9:db:50:8a:90:70:96:22:6e:6a:67:7f:
ef:4f:00:93:4a:3a:69:11:92:16:96:1e:65:34:7f:d3:6f:d2:
96:8c:3b:96:fa:d7:e1:87:cd:f2:ce:4f:63:ea:7c:15:76:6a:
51:27:47:4f:0a:db:16:7d:da:4f:26:5a:4c:51:e8:69:c8:62:
e0:d1:39:ee:1c:4d:c9:57:47:aa:58:96:f9:2e:73:7a:85:16:
6e:a3:a8:df:ec:51:5a:1e:dd:ea:63:32:ff:9b:84:d0:f7:3b:
d3:ee:7c:b7:84:0b:44:31:d2:29:55:fb:3a:59:95:71:bb:57:
eb:fa:e7:e2:0e:34:23:77:72:21:35:c1:50:8b:aa:c9:7e:c4:
e9:89:99:44:11:ac:61:f4:83:6f:10:a9:29:8d:59:bc:ab:43:
79:00:73:3b:0a:f9:66:e0:33:2a:57:26:54:dc:e0:b5:bf:bf:
3e:ca:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:51:10 2025 by rpki-client