Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TB8Slv5LVVMhtLkA-4g2OBuUzDQ.roa
File: TB8Slv5LVVMhtLkA-4g2OBuUzDQ.roa (raw, json)
Hash identifier: s6ho1l2PP+WnYLhuu2O4bkf7o+eyW8z6RqoLCOpXxTI=
Subject key identifier: 4C:1F:12:96:FE:4B:55:53:21:B4:B9:00:FB:88:36:38:1B:94:CC:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184AA3385928129AF71931B519E8DDD30DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TB8Slv5LVVMhtLkA-4g2OBuUzDQ.roa
Signing time: Thu 24 Nov 2022 15:13:33 +0000
ROA not before: Thu 24 Nov 2022 15:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:33:85:92:81:29:af:71:93:1b:51:9e:8d:dd:30:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 24 15:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c1f1296fe4b555321b4b900fb8836381b94cc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:08:0c:ed:8e:8d:6c:27:9c:e0:65:b3:16:
33:6b:3d:b7:33:b0:7b:55:a2:3b:83:74:61:b1:84:
74:44:83:b1:3c:51:a9:4a:3b:23:7b:da:c7:b7:e5:
c8:d8:d6:a0:08:93:c4:10:d2:02:05:76:c2:70:e9:
0a:5f:f6:34:07:f4:38:18:17:ea:5b:c6:04:71:15:
10:f5:ca:b5:94:b5:8f:43:d5:28:1d:ac:9e:13:0a:
cb:60:93:83:c7:90:cc:52:02:7a:2a:5f:dc:b7:e4:
54:10:2a:7d:97:04:94:c8:75:75:87:6b:98:e3:34:
cd:fd:98:7f:86:b3:ad:ab:d0:17:08:ae:dd:30:76:
42:cc:c7:ce:1e:ea:0c:7c:74:b8:5c:ab:37:6f:7c:
2e:a9:f6:4b:90:a2:c4:43:0a:54:6f:e6:61:92:e4:
9c:73:8f:84:0d:e9:07:01:9f:4c:6f:d3:7c:15:35:
46:cf:d5:a6:1c:f4:ac:80:d3:24:2e:98:1a:20:f7:
1b:67:c4:03:41:b7:c6:27:67:72:b7:43:d7:42:ce:
5c:1d:52:4d:60:f4:8b:23:d9:ea:8d:0c:8e:c2:56:
29:b6:59:4e:59:fb:a6:90:c0:fe:46:e8:26:57:52:
5f:51:f4:83:eb:f4:7f:11:c1:77:c3:45:07:2d:78:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1F:12:96:FE:4B:55:53:21:B4:B9:00:FB:88:36:38:1B:94:CC:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TB8Slv5LVVMhtLkA-4g2OBuUzDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:a7:01:af:40:3d:b7:6c:1e:83:e2:05:33:aa:83:8a:5a:8f:
3b:c4:18:80:74:e2:11:c6:78:18:5d:a8:de:38:3e:52:09:76:
07:34:1a:18:7b:77:ef:c0:98:04:c6:a2:48:55:ad:38:6a:d6:
15:e0:c0:80:c9:d7:07:7a:4a:38:4f:2d:f1:f9:73:32:3c:0d:
fa:39:c2:90:b7:0c:10:cc:de:b8:42:06:a3:57:c6:4f:8a:e1:
96:67:08:1b:73:35:02:18:0f:05:73:e8:6f:fa:b7:3a:6f:0c:
4e:70:fa:ea:33:fa:7b:88:ec:a0:9d:f9:6b:c6:49:27:18:24:
c6:06:5d:9f:68:40:69:a0:bf:14:2a:03:3c:e0:bb:40:8c:38:
e2:50:3d:2f:ab:15:97:b5:dd:64:2c:c5:54:6e:db:b5:c3:fc:
ae:dc:1d:91:f1:c9:47:4e:0f:dd:77:34:c3:c7:52:bf:a4:ab:
b6:29:96:34:e6:5a:ee:75:22:d5:b4:a1:40:5b:40:38:51:f1:
69:63:90:d6:0d:57:9d:bb:81:6b:3a:98:65:23:1a:e8:76:35:
65:fd:3f:36:7e:8d:56:68:69:ae:99:2d:ce:43:a1:6a:7e:cc:
72:af:df:28:d6:cc:42:9e:6b:a1:52:a6:95:71:24:7d:89:09:
76:a4:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:52:06 2025 by rpki-client