Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TBmOatYPTJn1pgwhUg_LHKJkF0E.roa
File: TBmOatYPTJn1pgwhUg_LHKJkF0E.roa (raw, json)
Hash identifier: PHYeOXtr/a8WFHz8a2RPlDYFDAC8DgWG+/Ma+LsMbWk=
Subject key identifier: 4C:19:8E:6A:D6:0F:4C:99:F5:A6:0C:21:52:0F:CB:1C:A2:64:17:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865421964EBC2B0EEFAC55E8C7860DBBB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TBmOatYPTJn1pgwhUg_LHKJkF0E.roa
Signing time: Wed 15 Feb 2023 08:12:12 +0000
ROA not before: Wed 15 Feb 2023 08:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:21:96:4e:bc:2b:0e:ef:ac:55:e8:c7:86:0d:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 08:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c198e6ad60f4c99f5a60c21520fcb1ca2641741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:2f:37:44:a1:df:86:a4:49:fc:cc:da:b0:
c7:23:0f:a8:79:bc:5e:37:55:ea:46:ba:38:9b:2a:
ec:f3:0a:c0:49:98:55:c9:0c:23:f7:36:c0:84:af:
e5:ce:9e:a5:a0:ee:85:11:f9:dd:d0:c5:9e:bc:2d:
cb:ba:1d:40:a2:8d:2a:04:6b:e8:9c:83:99:e2:69:
55:da:e1:fd:7a:06:c4:75:7a:d2:23:36:c7:ad:fb:
69:95:f0:28:a8:a6:72:f7:9f:04:d7:3f:e3:7d:b7:
6d:6e:3b:43:12:3a:6c:e3:6e:a4:04:cc:bf:29:98:
54:82:1b:24:d3:46:c8:60:a1:50:c8:4b:18:fa:30:
44:ed:c6:f4:57:2c:93:cc:74:38:04:90:16:12:c5:
bc:f5:90:e0:17:8d:62:e0:18:e2:6d:54:90:4c:0c:
35:84:6f:e6:cb:96:ef:3a:71:c2:ac:ce:04:a9:d1:
f6:ac:7c:b2:19:0d:d4:63:15:22:47:92:31:f0:41:
57:4f:e1:f4:d9:a9:d9:cc:49:78:08:a8:a0:66:e6:
1f:3f:c2:95:c1:05:f2:15:df:84:d7:5f:bd:fc:4e:
8a:ef:f2:3b:1b:b6:12:03:d9:f6:57:bc:9a:29:0e:
49:58:e9:92:c1:67:e8:09:c3:4a:6c:00:69:74:73:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:8E:6A:D6:0F:4C:99:F5:A6:0C:21:52:0F:CB:1C:A2:64:17:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TBmOatYPTJn1pgwhUg_LHKJkF0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:29:e0:de:e9:36:44:e0:73:2a:d6:91:40:b1:a9:52:20:0d:
63:00:f5:1f:60:9b:fe:32:78:c1:30:5a:5e:79:76:dd:8a:4d:
ab:5a:54:a1:fb:98:09:70:e1:a6:3f:e8:ed:10:50:cd:e7:df:
59:44:c0:c6:74:a8:b7:78:98:60:25:b1:23:ff:b1:d6:b2:78:
73:31:5d:ca:ab:21:fe:c7:74:64:98:84:3f:7e:c7:2b:ac:66:
23:d2:b7:4a:43:b9:26:81:bb:bf:65:b9:99:87:f5:22:62:05:
b8:d1:3b:e0:9e:b3:dd:cd:cc:1b:34:49:00:b6:af:25:8d:c7:
1a:c4:09:af:07:74:b9:d8:93:a1:fb:58:a9:7d:1f:27:43:c8:
81:83:1c:24:ff:f8:73:7c:af:ff:c9:97:79:9c:01:17:db:bb:
7f:79:36:09:39:b0:d5:e0:63:82:95:f5:30:4c:cc:63:9f:3c:
21:95:70:49:1c:1c:4a:0a:5e:19:76:6f:17:81:8a:0d:fd:9f:
3e:5b:44:76:d4:c0:d7:38:22:2a:e1:db:61:63:4e:8c:97:5a:
1a:e2:2c:ec:03:86:c1:cf:0c:05:74:bc:fa:7a:a2:41:fb:88:
01:99:f8:d4:38:f2:09:67:d9:ca:c7:09:1c:21:61:a3:d4:f2:
30:ff:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:48:07 2025 by rpki-client