Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TEE78jvL0-m4rb8JV7zcO_PSb4M.roa
File: TEE78jvL0-m4rb8JV7zcO_PSb4M.roa (raw, json)
Hash identifier: IFxLRKqu4Q6LeqfW9jd26M2n/OMDBPvn+rs/QLbl7+Q=
Subject key identifier: 4C:41:3B:F2:3B:CB:D3:E9:B8:AD:BF:09:57:BC:DC:3B:F3:D2:6F:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A21E4D8A0EA462065049468AC546AC172
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TEE78jvL0-m4rb8JV7zcO_PSb4M.roa
Signing time: Wed 23 Aug 2023 10:16:00 +0000
ROA not before: Wed 23 Aug 2023 10:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:e4:d8:a0:ea:46:20:65:04:94:68:ac:54:6a:c1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 10:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c413bf23bcbd3e9b8adbf0957bcdc3bf3d26f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:8d:54:35:23:6f:7b:30:43:02:2d:f0:8c:
75:d5:20:47:0e:b3:f9:46:f8:18:3d:6e:76:22:87:
4d:1d:99:90:e3:e4:30:e0:f5:2d:5e:43:ee:ee:7d:
53:f2:28:a9:c1:cf:ab:44:f7:42:f1:57:42:73:cf:
3d:6b:c1:54:dd:af:f8:af:29:9f:81:3f:57:53:36:
79:38:17:f8:78:b9:62:b2:09:8a:63:2b:95:59:7e:
04:e3:bb:c6:e2:ae:63:bc:5e:b6:8f:ff:95:0a:46:
8a:1f:b4:77:d4:9c:74:4f:e7:59:72:bf:be:c3:a7:
5b:07:7d:c6:1d:1f:27:c7:71:c1:a3:2d:25:07:91:
b1:f2:85:ed:92:56:28:30:01:d1:09:fd:b8:50:1d:
ab:b8:aa:8d:32:31:d6:20:33:f1:42:48:bc:58:8a:
07:7b:10:5f:10:60:bd:0e:a9:ad:d5:ad:d1:80:e0:
9d:ba:e6:ce:b5:8a:08:b6:f9:92:35:23:ad:30:7e:
64:81:24:4f:8d:e7:eb:5f:d8:b9:b5:0a:d4:81:e4:
c1:14:be:9c:16:11:91:0a:e2:22:81:3d:15:11:91:
f2:98:01:dc:36:94:4f:d4:16:66:cc:ae:a7:fb:07:
03:b5:3b:07:d9:e0:03:1a:c2:5d:fd:ec:8f:b9:57:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:3B:F2:3B:CB:D3:E9:B8:AD:BF:09:57:BC:DC:3B:F3:D2:6F:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TEE78jvL0-m4rb8JV7zcO_PSb4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:e3:2d:9e:ee:7a:17:2a:6e:55:2c:53:3a:75:d4:e0:6c:96:
55:c2:f0:13:02:81:89:6e:e6:77:47:46:26:5a:6d:ab:62:f1:
ed:f2:2c:19:1b:b6:03:6a:12:67:1d:9f:0f:54:e4:b4:17:28:
f7:87:a2:b7:ec:cf:10:30:d7:09:a4:3c:c7:f6:b1:9a:23:35:
48:99:8b:08:2e:7d:22:91:ca:a8:80:6f:1d:40:f8:fc:60:92:
0c:a3:49:b3:f7:45:84:32:6f:35:1c:cd:65:5d:53:bb:8b:9f:
2c:01:cf:68:75:a5:08:49:4a:d8:af:89:e6:b2:b8:26:08:47:
84:85:ad:fd:37:99:8d:6f:6a:46:4a:f6:19:cf:82:81:8d:a8:
4a:8b:40:44:a1:8f:ba:bf:a1:f0:fe:aa:9b:54:8e:23:31:dd:
87:1d:bf:92:a0:61:d1:f1:6c:6d:37:7e:fc:98:53:6e:75:83:
7e:5c:b7:d8:6c:7f:1e:ae:81:aa:a1:c9:f1:eb:97:98:5c:57:
f1:00:d7:f0:39:a9:5d:d1:67:57:7f:eb:fa:a9:2c:f5:d0:2c:
31:1a:2d:2d:05:e5:6b:6c:22:a4:60:ba:f9:48:16:e0:22:93:
80:7f:60:f7:e7:cc:82:7a:29:76:cc:72:b5:d6:ee:b2:09:f8:
f1:b1:98:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:29 2025 by rpki-client