Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJCRtWekluDzXpSnj0TqBhv6Dts.roa
File: TJCRtWekluDzXpSnj0TqBhv6Dts.roa (raw, json)
Hash identifier: O9mTC51cOLg2hVriNNabVs2Sy8WrOFUT4TAVdKkiJMc=
Subject key identifier: 4C:90:91:B5:67:A4:96:E0:F3:5E:94:A7:8F:44:EA:06:1B:FA:0E:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C89D7B467AB1140A757C904C02A2E7B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJCRtWekluDzXpSnj0TqBhv6Dts.roa
Signing time: Sat 17 Jun 2023 09:09:03 +0000
ROA not before: Sat 17 Jun 2023 09:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:9d:7b:46:7a:b1:14:0a:75:7c:90:4c:02:a2:e7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 09:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c9091b567a496e0f35e94a78f44ea061bfa0edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:40:a3:a2:a4:e4:f9:cc:fd:12:8c:31:f5:
a2:31:9c:f9:13:e0:89:02:bb:19:3a:00:f5:c7:c0:
80:cd:63:ba:19:5e:40:4d:5b:de:bf:49:55:94:a3:
dd:2c:7d:fa:b0:cd:62:b3:8e:1c:20:fc:3c:e7:01:
2e:3e:27:51:47:9d:ad:e8:75:1a:84:dc:3b:ca:14:
02:f8:b9:bc:27:ac:ec:a3:c0:8d:c4:6c:b2:6c:e3:
91:9f:2f:da:f8:af:e4:34:a9:1d:c8:c5:18:77:97:
cc:d1:12:c4:8e:cf:96:3d:70:d1:09:62:8c:9d:c1:
2d:cd:d5:d7:c4:96:6f:e6:9b:de:ab:70:80:c5:bf:
fd:70:39:46:81:32:98:4f:b8:87:89:5c:42:ce:f2:
e9:44:c4:db:2e:2a:c3:77:29:9c:3c:88:e4:2c:7d:
ad:50:b6:47:fd:54:4a:1b:dd:90:a5:61:b0:3b:8d:
09:b9:b8:1e:3a:21:3b:40:c8:0e:a0:12:5c:63:86:
08:e9:5b:07:56:b6:21:d2:c1:83:ae:99:b0:86:17:
b7:67:ac:7e:d2:a4:cb:54:a9:b7:c0:52:ba:16:4f:
70:10:9b:1f:40:24:76:ba:a4:9a:74:d7:3f:45:43:
86:56:64:d1:02:94:f2:08:98:1e:21:ec:65:01:6e:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:91:B5:67:A4:96:E0:F3:5E:94:A7:8F:44:EA:06:1B:FA:0E:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJCRtWekluDzXpSnj0TqBhv6Dts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c6:b2:42:62:93:48:5d:01:3c:9e:5a:0f:97:66:17:18:3e:
ca:71:a0:7b:46:f4:41:39:15:70:08:4d:e7:64:c2:c8:d7:ce:
b6:7f:27:fb:b0:1c:97:d3:86:40:b8:dd:0c:11:9e:2c:64:02:
d0:60:39:3b:e7:1c:69:32:ed:a9:e5:cd:6e:be:3f:8d:64:99:
16:f2:b8:8a:af:d4:1c:0d:c8:c3:6a:b6:b5:5e:cc:2e:68:17:
94:a3:cc:98:1c:58:31:69:05:d8:99:c4:c5:48:43:95:9c:11:
da:20:9e:16:65:38:f4:6a:96:c6:25:37:65:e5:09:1f:bd:40:
39:df:24:cf:87:99:e8:a5:92:3d:32:5a:5d:30:b3:0b:78:bc:
17:ad:3b:6a:49:92:ea:be:77:f9:a8:67:a4:13:ca:f4:b1:d9:
b7:6f:f5:9a:27:68:7c:a3:ad:ce:34:c6:5d:f2:95:b7:34:58:
dd:74:c4:db:37:6d:a1:44:55:55:89:42:7d:7e:9f:71:9b:3b:
66:d0:0a:14:f9:e0:47:de:fa:6f:82:f6:38:cb:10:78:4b:c3:
2c:60:bf:1d:77:1e:55:ec:e0:81:f9:6c:9d:5d:1a:2e:f2:1a:
54:60:37:d2:5e:b4:07:8e:9a:6b:40:d6:f4:c3:6d:ad:70:ad:
d1:e8:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:08 2025 by rpki-client