Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJKl5OwBEaWwCBOT6_W2mUcbehs.roa
File: TJKl5OwBEaWwCBOT6_W2mUcbehs.roa (raw, json)
Hash identifier: 0FbLc6U8wQztky01XB+5hlhAr3nk/o1N3zt9FnBsy68=
Subject key identifier: 4C:92:A5:E4:EC:01:11:A5:B0:08:13:93:EB:F5:B6:99:47:1B:7A:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850E64ED03132648832DC858C0243D212F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJKl5OwBEaWwCBOT6_W2mUcbehs.roa
Signing time: Wed 14 Dec 2022 02:09:33 +0000
ROA not before: Wed 14 Dec 2022 02:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0e:64:ed:03:13:26:48:83:2d:c8:58:c0:24:3d:21:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 02:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c92a5e4ec0111a5b0081393ebf5b699471b7a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:90:6b:c4:80:3c:c2:4c:7c:8b:ad:07:f4:
be:f1:ab:3d:36:8f:98:f5:25:ca:59:70:9a:e1:bf:
4a:48:69:31:d8:6f:29:82:a9:1c:a3:a4:77:aa:11:
27:1e:6d:46:d8:b0:88:c1:b4:0b:57:55:89:b9:90:
01:de:a0:5a:28:c9:e3:77:1b:d3:d3:b4:37:ff:37:
46:e7:10:40:53:08:90:37:09:c0:27:bd:38:5f:41:
5b:72:c9:0f:67:68:b5:17:73:7d:95:47:43:c3:c7:
66:b0:84:e9:7f:34:f3:d1:88:73:33:74:9d:43:7c:
2f:2c:c8:cc:ec:19:e7:ed:a1:f7:a5:78:d3:e4:d5:
46:3d:b7:7b:98:58:5f:b4:eb:e9:95:29:00:95:44:
99:61:f9:d4:56:e9:a5:1f:df:b5:2f:89:73:06:82:
57:a7:a1:c6:bc:44:81:b6:55:17:b4:e9:14:51:b0:
77:56:02:c8:a0:03:0d:e2:ea:56:af:77:f5:70:52:
98:9e:8c:4d:48:0a:71:7c:cd:0e:e3:6e:6e:a9:47:
74:f4:dd:b1:79:6c:5d:b7:99:4d:8f:7c:30:19:af:
df:50:a4:56:f1:3d:4a:18:e3:7c:b4:d8:e8:42:8b:
c9:74:50:e2:1c:66:01:e1:8b:a2:7b:39:cc:3d:97:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:92:A5:E4:EC:01:11:A5:B0:08:13:93:EB:F5:B6:99:47:1B:7A:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJKl5OwBEaWwCBOT6_W2mUcbehs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:4c:2b:2d:6b:b7:e1:3d:7f:14:f4:1d:df:0c:1e:74:ff:3d:
2e:9b:a9:aa:4d:eb:00:b1:93:8e:c9:7e:5a:9e:d9:c3:b5:29:
57:c6:a1:06:a3:62:21:62:cd:9a:b0:b9:55:fd:16:3a:c6:42:
f4:0c:3c:23:84:48:32:75:e4:74:b8:d9:7c:73:83:4e:af:00:
24:3f:a5:96:b0:7c:4b:7e:a2:35:24:8c:a8:62:24:8e:a6:65:
89:38:bc:cd:f9:1d:80:f9:89:46:f0:24:a0:cb:eb:1a:76:c3:
96:f0:b7:31:75:37:98:a7:63:5f:3d:18:ef:ff:20:eb:0c:91:
05:1e:eb:8e:41:78:b2:98:9f:8c:ae:c2:84:ce:46:0b:c4:39:
d2:56:e8:21:2f:73:79:ea:46:57:69:38:67:50:6d:07:3b:c6:
8f:c5:f3:65:db:c9:3b:13:52:d8:57:7f:d7:7b:fa:e1:f6:70:
05:51:e5:c8:76:62:a5:69:90:d9:83:ba:2b:b3:bc:04:45:bc:
47:da:88:19:9e:d8:cf:68:23:0f:8a:ba:84:b7:40:6e:91:5d:
07:45:a7:4a:f3:f4:73:6f:0d:08:55:d5:76:2d:2b:25:fa:ef:
59:76:b5:85:af:e2:4b:4f:b9:1b:0e:b6:4b:e5:44:be:7b:52:
6c:3d:1b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:13:29 2025 by rpki-client