Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TDWWC3TrnejcXUj1n8881b96A_8.roa
File: TDWWC3TrnejcXUj1n8881b96A_8.roa (raw, json)
Hash identifier: oSPsSD92am/Rs8KskrYEy1tAQaxufmn/1wsfJk/iDik=
Subject key identifier: 4C:35:96:0B:74:EB:9D:E8:DC:5D:48:F5:9F:CF:3C:D5:BF:7A:03:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E9AB0714906682EA2BFD754E58E9A51B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TDWWC3TrnejcXUj1n8881b96A_8.roa
Signing time: Fri 05 May 2023 02:08:32 +0000
ROA not before: Fri 05 May 2023 02:08:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e9:ab:07:14:90:66:82:ea:2b:fd:75:4e:58:e9:a5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 02:08:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c35960b74eb9de8dc5d48f59fcf3cd5bf7a03ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:cc:a9:44:15:ef:68:7b:54:38:b2:60:a6:
a0:f0:03:b4:f4:2f:05:3e:90:14:97:6d:ed:44:c3:
88:e0:d8:8e:38:2f:55:de:ea:ff:34:dc:c7:d0:ea:
3a:d6:35:90:12:74:44:88:02:ee:fd:10:48:db:70:
ff:7f:f8:7f:bc:89:ec:f6:47:be:e4:7a:96:ac:55:
e1:33:f3:86:f0:6d:1c:7f:51:ac:9e:5b:7e:3a:7f:
ae:fb:32:4c:10:57:5b:7f:fb:b0:1b:88:ea:ca:58:
35:80:d2:38:71:09:c5:3a:1a:ed:bc:48:05:07:10:
6a:f6:e0:02:62:b9:71:2d:56:67:93:49:bd:27:81:
15:19:22:f8:90:74:02:78:01:f4:91:c0:2b:23:0a:
03:32:54:52:dd:6a:ce:5b:9f:28:99:f0:85:b3:0a:
32:c2:bb:dc:23:88:ec:77:9d:ea:63:0f:6a:d1:1d:
b5:40:a6:f7:7d:3d:85:6c:f1:f8:28:40:51:8f:3f:
0a:a6:8a:3b:e1:df:05:17:7c:dc:d6:d1:ad:85:4d:
a7:e6:17:c1:f8:24:f1:a4:28:b6:7e:7a:a7:0a:45:
a5:6d:a4:40:52:d7:e7:8c:33:b6:b6:ba:4c:9d:2f:
54:f7:3d:8a:81:ca:9f:11:c4:44:d4:40:9f:b4:0c:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:96:0B:74:EB:9D:E8:DC:5D:48:F5:9F:CF:3C:D5:BF:7A:03:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TDWWC3TrnejcXUj1n8881b96A_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:2c:a3:71:77:e2:ef:e0:d9:08:76:c1:54:1a:e3:3e:1e:cc:
a9:1b:a9:d7:bb:5e:7d:a1:c0:af:be:90:70:80:e0:74:61:13:
67:a7:5d:c8:f3:d5:dd:70:82:d1:99:26:96:d7:90:cb:4b:d2:
a2:3f:41:f5:db:5a:44:49:56:1a:78:3d:16:5d:23:cb:35:fe:
c4:6b:c7:f0:6d:e0:bb:3f:68:a5:e7:f6:2b:f6:28:20:2b:99:
38:82:9c:f0:c8:81:9e:f7:b9:ac:19:42:8e:d2:f8:d2:17:48:
7a:7a:e2:ce:f5:f2:fe:65:e8:89:f0:42:4b:1f:62:3e:89:70:
1b:f3:94:b7:26:d4:62:1e:92:34:01:7f:6f:3a:4c:bd:3e:e2:
da:21:5d:15:fd:24:a1:4a:72:9a:42:1e:36:51:e8:7e:60:cd:
3b:38:b2:1c:37:1b:79:f1:5a:18:bb:c3:9f:50:f2:c2:cd:28:
17:25:f0:da:16:5a:d9:87:ff:a5:2b:68:1a:d8:f1:e1:61:65:
b6:08:e2:71:c0:0f:54:81:45:cd:0e:c3:9b:87:2d:c6:31:29:
31:79:d1:7c:4c:a5:9f:e5:b9:f0:f8:d9:17:a8:46:57:65:85:
33:81:da:50:c7:3d:3f:a3:c7:6e:0a:21:70:41:a9:dc:9e:6f:
78:7b:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:34:18 2025 by rpki-client