Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rteqtn-ADC-TdJiqMyMgvO_DpSw.roa
File: Rteqtn-ADC-TdJiqMyMgvO_DpSw.roa (raw, json)
Hash identifier: TeinNLsmqTIauf1uzbewEFXnCcB5azHpOUU08fAWACk=
Subject key identifier: 46:D7:AA:B6:7F:80:0C:2F:93:74:98:AA:33:23:20:BC:EF:C3:A5:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899742D8F2F06854D814FD67F1CBE50C22
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rteqtn-ADC-TdJiqMyMgvO_DpSw.roa
Signing time: Thu 27 Jul 2023 12:11:27 +0000
ROA not before: Thu 27 Jul 2023 12:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:42:d8:f2:f0:68:54:d8:14:fd:67:f1:cb:e5:0c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 12:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46d7aab67f800c2f937498aa332320bcefc3a52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:2b:15:b1:b6:4d:06:d0:39:45:1b:1c:05:
55:bd:09:be:55:e2:f4:8e:dd:3a:cf:20:2e:4f:cc:
4f:fb:b5:57:5d:fb:fb:53:b1:66:d3:ca:2a:ff:01:
c0:a3:27:a7:0d:1e:41:e4:86:e8:e9:8e:f0:1c:69:
df:d6:fb:7a:24:3a:2f:56:6b:22:59:a2:7c:30:11:
22:19:c2:9a:5b:dc:66:f8:18:30:fc:8e:8d:b6:6b:
ed:ca:84:11:0d:e0:29:ca:e3:f2:9c:9a:87:6b:61:
57:0a:a3:5d:57:52:bc:de:3f:cb:e2:fc:ef:9a:81:
3a:ac:3a:0c:92:eb:5b:f1:41:9d:7d:a8:83:19:96:
ba:31:14:1e:a9:0f:fa:ea:ec:41:c0:a3:5e:60:73:
7a:5b:85:85:a9:60:07:28:ed:fb:ac:ba:0c:50:8d:
2d:a4:be:f8:c7:d9:95:47:81:35:11:1f:5a:52:d9:
38:48:3d:1e:8f:fc:ef:13:6e:34:40:3e:ef:f5:13:
40:4f:05:34:4c:e7:5e:d1:3f:bc:c9:4f:eb:73:96:
4a:e0:81:29:52:cd:96:60:2d:5c:6f:06:0c:e7:e3:
90:dd:66:ce:bc:86:a4:f0:b8:16:71:04:de:50:d8:
62:31:10:07:bd:f6:3a:2e:22:eb:f4:ab:ce:a1:c8:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:AA:B6:7F:80:0C:2F:93:74:98:AA:33:23:20:BC:EF:C3:A5:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rteqtn-ADC-TdJiqMyMgvO_DpSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:17:c8:e5:2f:1b:8f:f7:d5:3e:50:eb:02:39:1c:4c:e5:ce:
46:b5:6a:79:24:7a:c2:22:79:8c:36:dc:89:a2:08:e0:39:83:
5a:fd:34:25:71:b3:e7:15:64:e3:d3:71:93:91:ab:cb:21:90:
fd:45:64:32:95:bd:04:ed:c6:24:5f:43:f6:b8:b5:b2:4e:73:
ff:4e:3d:f2:07:f5:f4:c4:96:68:cf:d2:f2:46:ba:62:53:06:
13:60:e1:7c:52:0b:39:4a:d8:f2:91:c1:16:c0:70:65:bd:69:
a8:fd:b9:21:ba:93:e4:49:6a:89:b7:5a:2d:58:1c:ba:6a:69:
c2:04:8d:2c:78:7e:b2:89:d7:59:f6:1a:80:23:f2:96:37:fc:
b4:e8:19:07:08:8d:38:b5:b3:d6:fd:31:77:ca:34:79:c0:4b:
98:42:fa:26:01:b0:1b:ed:d0:e3:d4:27:c0:ba:e5:2d:74:95:
e6:4a:83:e3:c2:2a:cb:ef:4f:9d:b7:55:47:aa:30:8f:c4:7c:
d0:2a:50:bd:1a:5c:c4:55:e6:74:44:a0:59:f7:4a:19:1a:be:
67:4c:97:7a:c2:47:75:3d:97:74:60:00:9d:a3:8f:8d:c8:94:
0f:74:bf:cd:a8:cd:a6:ac:5e:e1:7f:ba:3b:c6:ae:1b:3c:75:
31:9e:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:23 2025 by rpki-client