Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TCNycWlN7X_mbWYOCtn6ex-Wr1o.roa
File: TCNycWlN7X_mbWYOCtn6ex-Wr1o.roa (raw, json)
Hash identifier: 25lH7C6WHz4biaNz2Z9QtnQTwukcsOBpQTp14pKLFc4=
Subject key identifier: 4C:23:72:71:69:4D:ED:7F:E6:6D:66:0E:0A:D9:FA:7B:1F:96:AF:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8504F25D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TCNycWlN7X_mbWYOCtn6ex-Wr1o.roa
Signing time: Wed 18 May 2022 02:11:29 +0000
ROA not before: Wed 18 May 2022 02:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231693917 (0x8504f25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 02:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c237271694ded7fe66d660e0ad9fa7b1f96af5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:cb:39:f0:6d:36:b5:b6:71:5e:8b:e4:5b:
9f:80:6f:af:71:0d:fd:8a:d0:90:e8:46:28:51:1c:
82:cd:47:c3:18:9c:38:0e:5c:0e:58:ba:7f:8b:38:
e4:3b:45:4d:5c:0e:47:aa:cd:b7:48:ea:1e:67:1e:
c8:82:f4:5a:eb:d2:da:a9:27:52:9c:44:ae:06:46:
d3:79:3d:87:2e:ea:c4:bd:a0:15:61:59:24:56:02:
5f:dd:31:0a:5d:47:0f:4d:cb:37:6f:92:d3:8e:06:
5a:d9:d5:94:5e:50:79:3a:eb:53:97:2f:e2:03:c8:
a7:60:14:64:db:f4:ff:68:e2:53:5b:31:7c:85:21:
f4:ed:8c:45:27:53:d9:b4:8f:4b:a6:ac:21:a2:52:
42:ba:5c:ce:12:bb:86:22:a7:3d:3e:ec:45:32:db:
28:87:87:39:eb:21:f6:11:85:8d:c8:f6:cf:f7:f3:
5b:e0:84:9e:91:fd:3a:e0:8e:22:b1:3b:e6:31:22:
f3:17:01:0c:87:db:1d:73:92:fc:e8:b7:b1:2f:38:
78:4c:83:95:ba:30:a4:38:6c:14:9d:97:8e:97:5c:
9f:03:69:31:f3:6f:47:31:b2:ee:a5:c6:07:5f:e1:
98:f1:a1:42:74:c2:5f:04:6b:19:2c:5b:56:6b:61:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:72:71:69:4D:ED:7F:E6:6D:66:0E:0A:D9:FA:7B:1F:96:AF:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TCNycWlN7X_mbWYOCtn6ex-Wr1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:fb:1a:e5:f8:dc:d9:40:1f:51:7f:73:9d:7e:e2:69:d9:ce:
14:27:38:1f:dd:6e:3f:5a:ba:f4:f4:13:d1:1a:64:e0:a6:65:
20:25:f6:ef:d9:8b:49:19:a3:18:03:9e:da:5b:e3:cd:c4:7e:
69:b8:a9:0b:fa:cc:8d:aa:c3:7c:34:ad:46:db:55:a0:23:4b:
98:82:37:22:fa:0b:40:d0:4c:b2:2c:86:47:b9:df:fe:a5:29:
e8:66:ac:e5:28:d0:e7:dc:26:60:38:a7:d6:77:d1:fd:17:77:
70:cd:81:95:58:03:48:89:46:8d:08:84:c2:f4:3f:07:a9:10:
67:2f:c4:fa:13:b1:96:8c:20:e8:ff:af:4b:c9:a6:dc:f3:d3:
49:ca:09:3f:b9:d9:ac:3f:3a:9b:b1:20:af:c7:ff:48:c4:65:
4b:58:0b:1c:e2:fe:1c:81:6f:f6:50:18:c5:11:c7:c9:d2:d0:
da:ea:42:1a:53:df:1e:0d:57:e3:0d:48:9c:33:af:dc:8b:0c:
fd:a9:11:f2:6d:a9:f8:db:75:9e:db:0a:4c:64:21:0c:ed:4b:
77:31:2d:2a:f2:87:16:a0:39:86:3c:6f:3e:19:ac:80:68:e5:
ce:fb:45:0b:53:41:53:42:a2:4a:bf:ac:58:90:b3:f4:c2:ab:
c9:e4:53:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:48 2025 by rpki-client