Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TBlJfGyJ6SFr521CFuVzxIxHskY.roa
File: TBlJfGyJ6SFr521CFuVzxIxHskY.roa (raw, json)
Hash identifier: I6Z/5d2Bxt/wd9vyhmojLou44ctA3dY2lXx1clTjxBQ=
Subject key identifier: 4C:19:49:7C:6C:89:E9:21:6B:E7:6D:42:16:E5:73:C4:8C:47:B2:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C79EE6912C22EB7D17B883F1EBD9BC90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TBlJfGyJ6SFr521CFuVzxIxHskY.roa
Signing time: Mon 22 Aug 2022 22:14:15 +0000
ROA not before: Mon 22 Aug 2022 22:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c7:9e:e6:91:2c:22:eb:7d:17:b8:83:f1:eb:d9:bc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 22:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c19497c6c89e9216be76d4216e573c48c47b246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:d6:a2:d4:29:8c:96:30:6e:b9:8e:f7:79:
36:a2:fb:d8:67:cf:80:de:c4:56:8c:c1:57:ed:a5:
ff:2f:eb:3d:1f:7d:aa:ab:e3:a3:ab:7a:e5:87:06:
22:26:88:5e:5e:40:6e:23:c1:b5:60:81:6e:99:99:
0b:b7:c4:d0:95:00:a8:09:7b:12:a1:80:de:9e:73:
56:80:87:68:27:84:bc:70:69:06:0c:fe:e9:05:7d:
fa:ed:c6:95:24:77:6f:bc:4d:46:93:38:eb:db:3d:
ac:e8:1a:e8:aa:60:a9:a6:7b:9a:2b:c5:7e:32:21:
d1:db:14:25:03:3a:56:50:e6:5e:d9:16:6a:72:b0:
87:1a:12:b1:aa:f4:be:c9:dc:5a:12:65:c2:8f:f4:
b4:1d:e5:44:97:a1:a9:05:57:64:e2:1d:6d:bc:e2:
6f:ff:f4:48:5d:da:c9:c8:71:d3:47:97:c0:de:88:
fe:ce:bc:f6:fb:f5:4a:a9:1f:ac:c2:68:c9:9a:8d:
8f:54:bb:f8:19:aa:6c:87:3b:3b:d5:d7:0f:94:5e:
9f:0d:4c:d3:df:2c:c1:d1:5c:f2:31:71:25:3b:57:
32:fe:d1:fb:2f:bb:76:b0:41:67:ae:c0:15:3a:f3:
61:a2:b2:3a:03:ce:49:ca:f5:a6:08:e0:a6:d5:2f:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:49:7C:6C:89:E9:21:6B:E7:6D:42:16:E5:73:C4:8C:47:B2:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TBlJfGyJ6SFr521CFuVzxIxHskY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:71:a9:49:4b:79:a8:07:f8:f7:03:58:35:4f:15:4e:15:ea:
b1:35:17:e1:59:9c:e7:fe:5d:56:8e:df:3f:d9:10:bf:ff:8b:
e7:14:00:f7:61:60:9a:8c:93:0c:b7:1e:94:42:b1:c0:54:29:
8f:0a:c4:cc:6d:56:83:24:55:27:56:15:a9:26:06:bc:a8:df:
e0:46:48:2e:87:cc:fc:ec:5f:a0:3a:c5:53:97:5c:ed:b2:56:
78:c1:fb:1b:43:ab:67:f9:eb:83:e1:35:cb:47:15:02:3e:d8:
88:2a:30:a4:7e:8a:ca:97:89:d1:76:53:08:4d:df:a2:5c:a1:
96:33:12:e0:a4:a9:80:1a:b0:c7:b6:b6:92:b8:b9:d9:c2:08:
41:5a:76:1d:de:3e:85:69:9c:19:42:20:b2:50:55:b4:85:2b:
84:ee:3c:e6:72:86:43:28:e6:a4:e3:49:ec:54:bf:03:6f:f7:
a1:cc:65:95:9b:fc:bb:ff:54:3a:67:c6:54:13:0e:c4:1e:d5:
df:ca:e3:b4:6d:b7:98:3d:49:97:e2:0a:70:25:7d:4b:3c:9d:
3f:77:e1:a9:44:c4:61:66:72:cd:ed:81:2f:74:26:5d:05:10:
1d:c6:ed:2f:03:e6:78:62:b4:e7:d5:22:eb:c8:69:27:33:e3:
2f:c9:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:22:37 2025 by rpki-client