Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TB04BqN2N3DTGM0oZ3Wztekpiiw.roa
File: TB04BqN2N3DTGM0oZ3Wztekpiiw.roa (raw, json)
Hash identifier: r2Q+ktDw4yAgq1qnhRaH9Ps5o7qAAdJlq48NWn0JxNU=
Subject key identifier: 4C:1D:38:06:A3:76:37:70:D3:18:CD:28:67:75:B3:B5:E9:29:8A:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899CD7FA09620C3EF5160195815FE3D7CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TB04BqN2N3DTGM0oZ3Wztekpiiw.roa
Signing time: Fri 28 Jul 2023 14:12:27 +0000
ROA not before: Fri 28 Jul 2023 14:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:d7:fa:09:62:0c:3e:f5:16:01:95:81:5f:e3:d7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 14:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c1d3806a3763770d318cd286775b3b5e9298a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:03:ae:8e:a6:2c:06:0f:91:c0:05:9d:a8:
91:af:95:65:f8:5f:c5:fd:1f:3e:92:d3:c3:4c:ef:
ff:a8:73:74:5a:fc:22:f6:5e:35:6f:e0:cf:00:c7:
57:98:9f:09:85:3d:47:81:73:34:68:94:d1:89:04:
7d:25:ad:91:b4:b2:d4:56:11:97:e2:36:b7:92:7c:
a6:a7:8f:25:c1:85:df:fb:a9:e5:aa:c7:e9:c8:af:
9e:1c:3b:b6:e7:df:4f:72:b5:ee:4f:fb:d6:3e:ef:
4c:fb:ab:3b:d2:a8:90:9a:c3:b0:5c:af:8f:15:d9:
60:83:e4:b6:3c:28:69:07:52:13:f8:90:fa:77:d1:
f1:3b:9d:56:e4:ae:a3:f6:1f:68:d2:42:12:b0:be:
65:c9:49:17:f0:96:d1:a5:f7:02:5a:ec:d0:59:0c:
79:b2:56:fa:b7:67:74:4b:d7:fe:06:60:76:74:6f:
c9:77:e7:b3:0a:71:40:77:ae:17:e9:21:93:3f:41:
3e:3e:e1:f4:19:c4:30:29:10:4c:0d:83:6a:15:3c:
08:de:e0:5c:5d:3c:34:b7:7a:65:f6:22:ab:03:88:
67:cb:28:d0:bf:06:7e:1c:a2:df:6e:31:b5:bd:62:
8b:99:9f:21:31:89:ef:b0:e0:5e:29:9e:8c:26:f6:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:38:06:A3:76:37:70:D3:18:CD:28:67:75:B3:B5:E9:29:8A:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TB04BqN2N3DTGM0oZ3Wztekpiiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:cd:0a:38:36:b9:70:64:e6:1b:e7:9e:77:dd:0a:a4:e6:77:
9b:d4:d4:63:eb:b8:5b:4d:7d:03:f6:f5:d2:03:01:a1:90:ed:
8e:d1:cd:bd:90:1d:90:71:6b:1a:94:6b:bf:80:8e:0e:3d:95:
7f:f8:ab:c3:f1:b4:09:ce:45:24:fa:45:35:76:d8:9a:95:a3:
35:f3:52:5c:5d:0d:1e:ad:2a:59:ff:16:90:51:e5:b1:dc:0b:
65:1d:10:a8:3a:f3:30:63:52:de:d8:75:4e:f9:bc:9c:58:e8:
3f:ef:90:fe:90:31:1f:75:5e:6e:9e:1d:6c:0f:16:7d:1b:ba:
2a:9f:52:58:67:3d:0d:6d:23:c1:3e:7e:04:6d:a4:fa:cd:86:
2f:cb:17:7e:04:76:4b:44:8a:52:e1:d9:bd:fb:fc:55:84:70:
fe:1f:60:c6:58:54:10:77:71:67:2d:87:fa:e7:5b:3e:82:90:
dd:9f:63:dc:7c:db:63:6f:41:15:02:9f:f7:a4:5d:00:8d:7c:
cb:6c:d5:56:26:66:03:0c:1b:bc:65:2e:ef:ad:45:a6:17:c3:
b6:44:55:e4:74:15:91:d6:14:b7:cb:d3:66:34:0a:19:74:81:
fa:2a:2b:3b:27:fe:98:c6:ef:25:1e:bd:3f:20:c4:1a:dc:77:
72:20:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:08 2025 by rpki-client