Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TNsOS_LlzEau3R-VqKK0IK8O4EA.roa
File: TNsOS_LlzEau3R-VqKK0IK8O4EA.roa (raw, json)
Hash identifier: k7GxepmYxpBEhdRCfCVDcrpgdrLkY5646JlMV9KGe9c=
Subject key identifier: 4C:DB:0E:4B:F2:E5:CC:46:AE:DD:1F:95:A8:A2:B4:20:AF:0E:E0:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E67F3B536A17FB52808A88D4451A0956
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TNsOS_LlzEau3R-VqKK0IK8O4EA.roa
Signing time: Tue 06 Dec 2022 08:13:28 +0000
ROA not before: Tue 06 Dec 2022 08:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:7f:3b:53:6a:17:fb:52:80:8a:88:d4:45:1a:09:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 08:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cdb0e4bf2e5cc46aedd1f95a8a2b420af0ee040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:2d:05:0a:3d:7e:36:19:05:71:d4:4c:84:
29:4d:64:36:3e:9c:1d:7c:5a:1c:6c:7f:e2:7c:05:
e1:8e:10:4b:83:e0:c9:3d:18:7c:f6:40:e5:f2:64:
a2:0e:e3:ea:7f:24:a0:6b:14:da:4b:5b:fa:2d:f8:
98:d6:6a:33:0d:67:c9:65:69:aa:84:63:3e:0a:0f:
ea:01:42:15:f3:3d:0c:0f:c7:d6:34:3f:8f:aa:48:
d8:bc:55:07:f7:0f:33:5d:9f:6a:dc:03:9c:a1:e1:
f0:88:28:d2:3c:74:10:8f:88:a4:da:fd:14:85:22:
70:cc:38:d7:d7:99:68:a9:1e:73:ea:bc:6c:80:64:
ee:25:63:73:4c:e6:e1:21:ef:97:73:2e:e0:fc:81:
f8:11:8f:a7:cc:4e:57:e3:f4:5f:4e:cd:b2:d2:bb:
4a:6b:1e:2a:2d:36:81:5e:54:3e:cd:2d:66:04:1f:
3a:54:28:68:e8:72:79:4c:d2:74:05:8c:ab:8b:ea:
b6:1b:ab:95:39:7d:8e:ed:15:1b:6e:2d:48:10:58:
ed:b4:e4:af:2c:f1:4b:4f:1d:78:42:f5:bf:13:ef:
98:00:a0:86:9f:72:af:b4:04:27:3e:d3:d3:7e:b8:
de:ec:83:7a:fe:9b:fe:7e:23:68:37:34:6e:b9:94:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:0E:4B:F2:E5:CC:46:AE:DD:1F:95:A8:A2:B4:20:AF:0E:E0:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TNsOS_LlzEau3R-VqKK0IK8O4EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:47:58:eb:9e:20:17:8b:70:8e:70:30:07:6a:4e:54:d7:58:
93:2f:b6:6d:0b:05:46:26:8b:c1:c9:f5:10:0e:d5:b9:5d:7a:
73:18:80:0e:9e:b1:d5:e1:2f:6f:c3:48:6c:c2:35:85:07:7f:
8c:43:85:e1:20:0f:a8:b4:be:8a:21:fb:97:4b:c6:b6:7e:c9:
9a:de:81:6f:ca:8b:76:e5:1d:9d:85:da:f7:76:f3:7b:08:89:
d3:c4:e7:26:69:d6:d3:da:39:a4:7b:dc:16:c7:56:37:82:1f:
21:d6:92:ad:8d:b2:6b:3f:a4:76:06:06:d2:c2:08:54:43:00:
26:24:65:fd:11:a5:59:ae:17:16:ac:c4:e4:8b:11:93:50:07:
72:a2:2d:6f:a1:b5:42:56:0f:a9:fa:59:8b:22:eb:9a:e6:a7:
0b:1a:5a:52:0d:44:9f:d8:4d:d7:b0:d0:d7:75:e3:bc:a3:e8:
4d:93:48:ec:b3:63:46:74:20:ae:a2:1e:c5:17:83:2a:8c:8b:
e5:48:98:fd:fc:78:7a:62:e0:9f:79:70:d6:4c:07:1b:ef:be:
47:d4:c1:6a:03:39:c2:62:f6:8a:a3:d2:4f:07:8d:91:ee:28:
86:55:d6:6e:0c:af:af:8f:db:3c:c7:8d:b7:82:a3:82:ed:6d:
e3:0a:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:36 2025 by rpki-client