Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TBM07c5zbA23sEnj8Z2cerT2lUg.roa
File: TBM07c5zbA23sEnj8Z2cerT2lUg.roa (raw, json)
Hash identifier: hmHCQ+/SfWJCQ3xADpIoyazLaihvRn2B50GWKn7x5Po=
Subject key identifier: 4C:13:34:ED:CE:73:6C:0D:B7:B0:49:E3:F1:9D:9C:7A:B4:F6:95:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C151CDB0CCB24E10ED7CB58A382291BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TBM07c5zbA23sEnj8Z2cerT2lUg.roa
Signing time: Thu 15 Jun 2023 23:09:03 +0000
ROA not before: Thu 15 Jun 2023 23:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c1:51:cd:b0:cc:b2:4e:10:ed:7c:b5:8a:38:22:91:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 23:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c1334edce736c0db7b049e3f19d9c7ab4f69548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:0c:f4:49:45:35:54:f1:fd:fc:7e:71:c7:
28:25:01:6d:8f:df:34:a7:c0:aa:ae:73:84:d8:26:
5c:3b:0d:fe:53:d9:ec:af:22:ac:70:d1:9c:c4:13:
0a:6e:de:01:2c:c5:1b:6b:cb:74:7f:a2:08:5d:6b:
3b:f2:34:69:04:cb:cb:cc:48:4d:23:63:89:89:eb:
8c:31:c1:78:a8:46:a1:8f:4b:78:5e:9a:bd:28:d5:
da:c4:62:b9:01:08:44:14:52:b8:af:58:51:1b:ea:
aa:8a:52:5b:da:48:f2:c1:6c:ae:ca:01:09:b5:ae:
3d:d6:94:5d:63:72:f0:a6:5b:5d:fd:bf:c9:6e:9d:
a4:25:b4:8b:22:9a:42:85:52:c9:79:f5:40:00:71:
d8:be:2c:e4:df:7f:57:c0:48:8b:46:2d:7c:c9:61:
15:a6:70:9b:ed:9a:ae:cb:b5:8b:3f:74:fe:ee:c9:
38:da:6c:9b:da:24:8e:0b:e9:d7:a8:f5:a9:0e:15:
f2:10:82:3b:4d:0b:3e:e6:65:aa:d4:b0:42:69:34:
7a:fd:0a:2a:6f:33:fe:31:6e:b6:3a:3a:20:dd:d9:
3a:36:72:47:cb:26:b2:aa:73:2b:52:19:24:0c:97:
d4:8d:85:13:a9:b6:ce:5b:41:ed:de:b9:71:de:ca:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:13:34:ED:CE:73:6C:0D:B7:B0:49:E3:F1:9D:9C:7A:B4:F6:95:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TBM07c5zbA23sEnj8Z2cerT2lUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:83:92:cc:cd:8e:02:0f:46:7e:84:5a:e7:18:8a:06:22:5d:
21:73:8c:14:4c:0d:c4:f6:8f:15:b4:b3:33:ab:1b:89:9d:2d:
e0:b8:bd:4a:a1:bb:9a:60:09:85:df:58:46:1b:b9:8f:ad:82:
7b:32:6f:d4:47:58:68:2f:4a:76:7b:07:9d:1e:24:fe:61:37:
4c:b6:6a:3e:44:29:aa:f6:94:31:a0:85:d2:b3:75:79:44:68:
d1:17:b4:d9:2f:20:98:8b:3a:60:81:b6:5b:ad:17:02:d6:e9:
4c:27:14:c7:f2:dc:f4:4a:04:2a:87:2f:56:9e:ca:ca:06:0d:
5f:5a:de:58:9a:cb:59:fa:a9:3d:01:1e:76:ff:a8:87:c1:72:
67:95:c2:a1:6b:e8:6d:06:92:49:53:8e:fa:1f:05:c8:bd:7b:
51:63:ee:1f:ec:43:09:56:e7:0a:59:fa:29:45:2c:6a:de:91:
8c:95:29:b8:7b:44:24:af:5f:3c:e0:fe:c7:2c:99:66:b5:44:
69:11:51:90:2e:85:0b:ec:35:07:07:4b:3d:60:0f:77:d6:6f:
02:29:8b:63:73:72:5e:37:d5:8d:90:06:40:5d:49:ab:68:16:
41:33:07:ca:dd:fa:59:12:17:0d:03:90:36:ba:f7:80:50:0c:
c6:06:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:44:06 2025 by rpki-client