Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TIkHbwKky-scTDfByBHCmhQ7Usw.roa
File: TIkHbwKky-scTDfByBHCmhQ7Usw.roa (raw, json)
Hash identifier: WMRzPqc6NucbNtcAz1AaAImcn9cTghnuOGaMHGbxr6E=
Subject key identifier: 4C:89:07:6F:02:A4:CB:EB:1C:4C:37:C1:C8:11:C2:9A:14:3B:52:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BAE33FB9FF4C305A0570CE256B38C6E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TIkHbwKky-scTDfByBHCmhQ7Usw.roa
Signing time: Tue 07 Mar 2023 07:05:00 +0000
ROA not before: Tue 07 Mar 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:bae2:9e7b/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:e3:3f:b9:ff:4c:30:5a:05:70:ce:25:6b:38:c6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c89076f02a4cbeb1c4c37c1c811c29a143b52cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4f:4d:a2:69:b4:81:0f:c3:f8:ba:f2:87:68:
ba:35:21:8c:b7:dc:65:58:3d:86:fa:88:70:66:14:
3e:72:66:8a:5c:75:3a:61:e8:01:83:a6:d8:fc:c4:
bc:fd:96:01:fd:9c:ee:4c:6e:2d:e3:24:e4:67:7c:
6e:4f:c7:21:37:48:cf:85:92:6a:af:ab:8e:6c:25:
e6:09:f9:ab:37:10:36:6c:0f:e4:6d:56:8b:86:4e:
f1:ea:62:ca:ba:bd:21:d4:09:54:f2:96:5e:9b:08:
c0:fe:11:05:6e:a2:18:a4:15:5b:ac:7a:ab:c3:20:
8b:9d:e6:9c:4d:e3:d8:6a:0f:2a:21:ee:da:f0:d6:
25:05:7e:36:b8:6d:23:37:1d:e3:d2:f8:b4:88:63:
f9:a2:79:f5:04:e8:45:73:a8:fb:2e:7a:50:00:52:
db:df:76:41:8e:5a:7f:67:dc:90:46:7b:d8:ba:97:
1a:40:49:ce:33:82:71:18:65:e9:4a:90:7b:8b:42:
75:74:76:a7:7f:b3:4f:86:96:7c:3b:84:65:ae:b9:
f1:ea:4e:cb:b1:33:9a:20:4b:ac:49:bc:23:82:40:
d5:72:67:1e:a2:c2:a4:58:62:fd:d0:cb:5e:ae:3a:
df:d5:fd:f5:13:00:a4:d7:70:ef:20:5b:ce:d8:c0:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:07:6F:02:A4:CB:EB:1C:4C:37:C1:C8:11:C2:9A:14:3B:52:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TIkHbwKky-scTDfByBHCmhQ7Usw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:d1:64:e0:48:10:9c:83:80:6b:0a:d5:01:cd:fd:86:c9:6c:
00:b6:db:80:4b:3a:22:c7:ad:3c:e7:0e:e9:f2:e5:60:1b:40:
dd:4a:1d:ae:3b:b3:f6:83:bc:24:8c:5b:39:c8:1d:8d:80:d8:
63:f8:df:a5:f1:df:57:b7:5e:7e:70:7d:b3:f3:46:b4:09:99:
d9:8d:39:1c:fa:fd:b6:e5:40:be:7d:c5:a5:af:34:d0:64:46:
4c:93:48:b9:11:45:2d:15:67:17:58:2a:07:35:7b:61:65:67:
c1:e5:f6:ae:d9:a4:b8:b9:fd:93:bf:a1:fc:0e:38:de:6d:de:
bd:f4:a3:11:4f:eb:b4:cd:e7:39:a8:2b:df:33:71:88:18:c7:
b9:7a:97:ae:a6:76:a6:fe:35:bc:0f:7f:db:6e:98:f0:2f:b6:
df:92:27:0e:67:ae:ef:9e:28:d7:f9:62:be:84:5c:ac:89:ef:
57:98:6b:8f:ca:fc:52:ef:0e:b4:77:b4:79:17:6e:46:d5:8d:
57:a8:fe:24:ce:76:e2:f7:13:0c:83:95:3a:d9:c5:6d:0e:62:
07:0b:97:5d:07:d7:63:02:b1:9b:86:d3:45:69:20:1c:2b:5f:
9a:b9:62:70:fe:0f:68:f3:9a:a0:f1:7c:82:8e:47:e8:63:75:
ad:e2:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:20:11 2025 by rpki-client