Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TICCOjxPwkPUdi8b2LEUyHz7gKw.roa
File: TICCOjxPwkPUdi8b2LEUyHz7gKw.roa (raw, json)
Hash identifier: Ov8ilptrG0iUAqF5zOlRW8BBDUq1j3JXAP9jJa8Gbn8=
Subject key identifier: 4C:80:82:3A:3C:4F:C2:43:D4:76:2F:1B:D8:B1:14:C8:7C:FB:80:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F5119532E719976F4F9E0E5E5FA669BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TICCOjxPwkPUdi8b2LEUyHz7gKw.roa
Signing time: Fri 27 Jan 2023 21:10:48 +0000
ROA not before: Fri 27 Jan 2023 21:10:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f5:11:95:32:e7:19:97:6f:4f:9e:0e:5e:5f:a6:69:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 21:10:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c80823a3c4fc243d4762f1bd8b114c87cfb80ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:46:0d:2a:97:ec:4b:92:99:ba:1b:b7:dd:
53:a0:04:18:61:20:a7:18:2f:3f:0d:a9:96:1c:e3:
f4:5e:26:a6:95:c8:4d:37:9f:72:10:46:f4:96:d8:
d4:b1:c6:c3:b6:cf:28:23:18:27:fb:d7:53:f3:57:
e2:f9:13:74:5b:6e:a5:ea:ce:eb:60:d5:89:41:c0:
34:02:fd:df:88:61:02:50:67:94:e4:06:1e:e6:d4:
41:b9:e7:bc:55:30:9b:10:6a:ca:09:9a:54:6d:57:
c3:f6:26:8c:e8:f6:bd:f2:09:a7:1c:73:3b:1e:71:
c5:00:1d:4c:29:22:6f:aa:13:75:af:c6:09:54:78:
59:a7:5d:c5:16:73:cc:21:88:1e:79:6b:d9:e9:59:
d8:35:7f:ec:02:f0:5d:18:2e:80:03:d0:85:93:ea:
0a:fe:b0:54:79:ed:f7:07:34:bd:94:3c:ff:56:7a:
3a:40:8c:e2:16:68:03:7f:b2:bd:c7:c3:f2:e0:08:
4f:a7:15:3c:38:a8:a6:ac:bc:33:de:18:a6:b4:e4:
48:0a:0a:1c:b5:3b:7a:69:1d:42:f2:5a:72:f1:e0:
b8:cc:d8:ae:cb:de:3b:be:c4:db:04:a5:75:a3:01:
c0:e8:2a:b1:05:a5:44:b0:9a:ad:5d:65:df:ae:74:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:82:3A:3C:4F:C2:43:D4:76:2F:1B:D8:B1:14:C8:7C:FB:80:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TICCOjxPwkPUdi8b2LEUyHz7gKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:ce:8d:36:bc:ce:23:cd:87:65:6d:dd:0d:11:55:ca:e7:e2:
a1:18:0f:ec:a0:30:88:f6:a4:94:39:a9:12:52:ca:cd:9c:c9:
e0:0f:e7:55:cb:d3:e3:25:46:c0:f8:38:f7:3c:8c:b3:84:ba:
38:c1:40:74:0f:2e:a2:c3:29:12:eb:4f:3d:50:61:f1:07:25:
03:b1:9b:9c:16:75:27:b6:b4:1a:18:db:8a:ff:27:24:54:a3:
e9:d7:df:e9:13:ea:8a:13:0c:39:e9:0b:60:f5:4c:77:17:ed:
14:a8:32:02:53:11:cb:1d:d9:fd:e0:82:f1:5c:1b:f0:59:fd:
2f:e0:bb:f4:2f:b2:30:6e:a9:65:01:77:e0:cb:a1:24:c8:2e:
a4:4f:94:ba:cc:2c:6d:d8:e2:e2:e8:ea:56:89:90:24:3d:10:
34:a3:1b:21:3a:16:1c:10:31:df:35:58:42:f7:d8:6f:a0:e5:
5b:ca:1c:8f:9d:e0:19:67:8e:df:b1:ac:72:3b:95:b8:a9:09:
45:26:c2:71:09:5d:93:c0:08:b6:38:f7:a9:79:9a:83:7b:9a:
9e:8b:21:e1:22:88:f5:97:96:cf:f4:4c:6f:f1:20:bf:66:17:
74:37:e6:3a:0a:c3:1d:f9:ae:51:75:f6:f1:b3:5a:5f:fd:8e:
c4:fc:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:38:07 2025 by rpki-client