Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TEpRKYkp3cbLq-RmBWav6s7QlyI.roa
File: TEpRKYkp3cbLq-RmBWav6s7QlyI.roa (raw, json)
Hash identifier: 04qz2XrnWjK0H6ZD13qYUJ5YL298qdRVirzVm0XDnyo=
Subject key identifier: 4C:4A:51:29:89:29:DD:C6:CB:AB:E4:66:05:66:AF:EA:CE:D0:97:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D8F0111E2DF29B0EA22503BB75852004
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TEpRKYkp3cbLq-RmBWav6s7QlyI.roa
Signing time: Wed 09 Aug 2023 06:15:58 +0000
ROA not before: Wed 09 Aug 2023 06:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:f0:11:1e:2d:f2:9b:0e:a2:25:03:bb:75:85:20:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 06:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c4a51298929ddc6cbabe4660566afeaced09722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:a5:db:93:bd:66:94:68:43:da:dc:30:35:
4e:c5:ab:be:5d:b1:65:33:6c:c1:3c:f3:cd:f7:1d:
b9:72:e5:99:24:85:3e:c7:ec:dd:79:f7:58:e6:80:
bb:10:b3:a1:ac:d2:76:42:15:6a:5b:1d:45:ce:8a:
b7:d9:1e:35:83:24:f5:62:53:48:3e:16:87:40:cd:
22:fd:87:34:c6:a8:7c:4a:11:a8:84:37:17:1f:fc:
a6:d3:56:19:52:16:4f:ba:75:01:05:d6:26:67:13:
18:22:91:60:5a:7c:c9:54:b9:01:39:88:3e:56:b9:
2e:08:ab:0c:f6:f0:0a:de:de:b0:12:b8:48:37:fd:
48:68:6e:15:79:10:b2:6c:54:ba:75:e8:64:cc:8d:
7b:c9:85:ef:19:ae:eb:6b:97:35:e4:91:4e:fc:22:
39:8c:fa:d8:96:f4:9f:5e:17:20:17:ba:79:0d:d2:
ed:83:66:80:bf:ec:56:6c:24:81:2f:04:30:40:49:
44:7b:a4:54:2a:35:b6:ac:b8:24:79:73:f9:92:1f:
74:0b:9e:1b:a4:1e:78:ed:bc:3e:0a:bc:a2:63:61:
bb:4f:74:12:e5:47:d6:06:3c:3e:47:18:32:5a:7d:
99:83:cf:16:97:3c:0e:6b:0a:fa:15:02:08:5e:31:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:51:29:89:29:DD:C6:CB:AB:E4:66:05:66:AF:EA:CE:D0:97:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TEpRKYkp3cbLq-RmBWav6s7QlyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:76:a1:9d:2d:de:83:2d:68:66:96:d2:e5:2b:65:a1:8c:54:
5a:dc:92:ad:43:60:ba:d2:ca:ef:53:5e:eb:08:d1:ae:20:b3:
99:95:82:ff:42:1c:02:12:77:1d:5b:82:a2:57:2e:f0:1b:d6:
fb:3f:6b:de:6a:d0:0b:9d:f0:e2:69:8a:04:17:ff:99:de:92:
b5:12:48:b3:2a:02:08:34:8c:41:dd:51:b0:01:c4:9d:38:b7:
74:a2:e4:7f:a7:1a:98:a9:d5:94:e3:f2:58:a3:7f:84:d0:f8:
46:bd:3e:b4:2e:3c:a0:80:fe:60:3b:94:84:9c:12:aa:27:86:
77:29:a9:50:a4:14:49:7d:03:63:db:5b:0a:e6:87:a4:7c:84:
2a:76:46:e4:65:5b:97:b1:22:9a:2c:9c:67:50:3b:cb:e6:e2:
5e:78:c3:a3:7e:67:4a:d0:6e:3a:21:11:1b:9f:ed:d5:c6:a2:
a4:a9:0b:73:da:1d:17:c7:50:5c:c3:b1:32:76:7e:fc:04:85:
b2:56:4f:31:cd:7f:87:e0:8d:46:b3:0d:e7:93:b8:25:67:26:
95:dc:8d:10:bc:c0:eb:48:f8:41:cd:17:07:c9:0a:52:a1:76:
d6:3c:ad:34:70:a0:b0:2c:27:d7:82:2c:03:6e:6b:2e:81:88:
4f:d2:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:52:35 2025 by rpki-client