Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TAV-k8UkSKlk77fN2NDCY919Y98.roa
File: TAV-k8UkSKlk77fN2NDCY919Y98.roa (raw, json)
Hash identifier: k3DfZietbvi+KPB1lrw2Ho25tEtin34Ac+ZiQIEKAno=
Subject key identifier: 4C:05:7E:93:C5:24:48:A9:64:EF:B7:CD:D8:D0:C2:63:DD:7D:63:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183FC2C67A24EA26399ADD60BEE118684A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TAV-k8UkSKlk77fN2NDCY919Y98.roa
Signing time: Fri 21 Oct 2022 20:11:52 +0000
ROA not before: Fri 21 Oct 2022 20:11:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fc:2c:67:a2:4e:a2:63:99:ad:d6:0b:ee:11:86:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 21 20:11:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c057e93c52448a964efb7cdd8d0c263dd7d63df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:c8:47:04:85:5c:b5:e7:d5:10:20:d4:76:
f2:a1:3b:fd:6e:34:6e:a7:cf:fe:1e:81:e7:47:07:
df:e3:a7:72:81:5c:8e:f9:e2:10:29:f5:f3:90:16:
2e:de:28:4c:9e:c4:8f:7b:5d:c5:64:95:35:50:aa:
39:57:be:ae:88:8a:b9:c8:57:d6:cc:23:9e:94:f8:
ee:87:25:1d:52:97:51:2b:42:72:c2:6a:19:e3:16:
ab:cc:b7:8a:09:ec:a4:e4:b2:74:7a:84:a9:20:ed:
ec:41:03:92:e2:62:54:de:45:0d:69:3c:c5:02:e7:
21:7d:36:41:7f:cc:aa:f6:3d:b4:32:da:e6:b1:5a:
a7:56:b4:41:91:be:8c:35:b9:b2:7e:8b:f5:a5:32:
db:c6:30:64:57:7f:9b:5e:3b:4a:31:a6:5a:69:e2:
14:05:3a:ad:c3:10:c3:2c:36:d9:a0:38:26:35:67:
2f:0a:04:18:a0:98:97:44:91:09:fd:7e:a1:63:2d:
c4:54:1a:52:4b:c3:1e:7a:ca:38:75:8f:a6:ae:c0:
ba:73:0c:37:3a:a3:2c:10:01:ef:e0:1a:a7:27:96:
c9:16:44:b0:77:84:e0:dc:b4:29:f7:1f:81:51:64:
b9:d3:7c:b7:5f:fb:74:e0:37:5a:38:fc:89:21:43:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:7E:93:C5:24:48:A9:64:EF:B7:CD:D8:D0:C2:63:DD:7D:63:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TAV-k8UkSKlk77fN2NDCY919Y98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:b0:72:19:7b:ce:bf:fe:37:c9:83:cf:09:3a:a8:d3:a8:79:
b3:09:aa:5e:60:62:03:fa:c3:b8:a4:6e:9e:b2:a4:ec:62:6a:
f3:68:d4:e8:83:20:ed:02:88:80:d5:e3:f4:38:9e:db:01:1d:
89:52:d5:60:ed:0c:c7:d7:db:ab:95:8d:f7:55:36:ea:df:f0:
ee:17:82:c1:0f:dc:95:4a:9f:fc:a2:92:dc:e0:1a:51:0f:94:
28:b2:43:0b:c7:ff:80:62:77:85:d8:60:58:4a:eb:f8:c3:33:
55:ea:cd:4e:e9:be:56:12:9c:27:1a:04:19:86:18:b1:b7:16:
53:e2:ce:c1:7c:aa:dd:4e:65:4d:65:17:2c:b7:90:8d:6d:c1:
be:b3:3c:12:ed:1a:f2:ea:ac:ff:45:21:de:06:36:1d:b4:36:
b1:c3:c0:d4:9c:0c:3d:f7:67:c6:67:5b:62:35:5e:05:17:a5:
18:f2:af:a7:ab:d1:67:70:62:82:e0:47:15:39:15:19:40:6f:
31:ba:0b:0a:4a:e6:a1:4a:0b:7e:e0:ce:da:c2:62:fb:f0:7a:
df:65:82:87:c4:50:24:72:16:1c:75:09:6d:42:7b:1c:8b:e9:
f6:62:f4:8b:e9:ab:40:1a:a1:45:82:6c:66:56:af:14:6a:ff:
2d:75:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:23:55 2025 by rpki-client