Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TOJz3ReTEpt1fOPY3UrkmCl13iw.roa
File: TOJz3ReTEpt1fOPY3UrkmCl13iw.roa (raw, json)
Hash identifier: UcIrBDNUQxYkoD5SKgc4xEJGZwhnY435VLAtwkJl6S8=
Subject key identifier: 4C:E2:73:DD:17:93:12:9B:75:7C:E3:D8:DD:4A:E4:98:29:75:DE:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018509B016A2FA85FA3D099288E9654F4BA7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TOJz3ReTEpt1fOPY3UrkmCl13iw.roa
Signing time: Tue 13 Dec 2022 04:13:33 +0000
ROA not before: Tue 13 Dec 2022 04:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:09:b0:16:a2:fa:85:fa:3d:09:92:88:e9:65:4f:4b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 04:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ce273dd1793129b757ce3d8dd4ae4982975de2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:51:74:8f:ca:cc:7b:64:7a:29:20:b0:94:6f:
47:90:a6:b9:04:eb:ee:3b:b1:08:4e:f8:4d:ed:40:
4a:6e:53:1d:cf:60:52:20:c4:44:81:f6:9c:c7:8d:
e9:ab:b3:d6:a2:de:27:d7:8c:49:92:a3:de:1a:fb:
41:76:ec:83:f5:03:21:9a:0d:da:78:70:3a:cf:82:
ba:1e:4c:9c:40:e7:e2:c2:de:fb:11:68:69:f0:9a:
21:fb:dd:33:f7:d8:95:58:44:ed:47:34:04:42:cc:
bd:e1:e5:31:a9:f2:91:b4:fe:d2:4d:92:fc:bd:66:
cb:b1:7c:58:10:b6:5e:0f:a0:7c:38:6d:20:d4:01:
b8:8f:3c:3e:6b:73:22:cc:38:54:8e:04:b2:bd:9b:
60:ec:6f:5c:b0:ac:fb:55:0e:e4:34:5b:ae:35:ae:
f7:46:47:64:ce:55:3a:11:e1:74:14:26:5e:d5:88:
0e:23:eb:b0:2b:91:8b:d9:94:64:45:9e:3e:ea:d3:
d0:b5:6c:94:e4:8c:98:d0:51:b8:98:39:80:33:ef:
cd:df:56:1a:36:7b:d0:8d:2f:dc:2c:77:1b:e9:fe:
43:5e:95:ec:23:34:7c:c7:2f:1f:d5:8c:6f:7f:77:
da:58:1d:ea:4d:16:28:b2:13:e0:86:b5:bb:e7:78:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E2:73:DD:17:93:12:9B:75:7C:E3:D8:DD:4A:E4:98:29:75:DE:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TOJz3ReTEpt1fOPY3UrkmCl13iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:79:c2:42:c8:77:ab:45:7b:c2:11:37:0e:32:3e:63:ea:d3:
c2:85:ca:8d:75:20:1c:be:65:31:3c:00:82:eb:dd:45:4e:26:
ca:7d:d4:31:a5:f5:11:07:00:4e:a6:3e:1f:3a:5f:b3:b4:33:
99:42:b7:43:c6:c7:22:c9:07:e7:7e:b0:54:5f:43:0a:3b:3b:
7d:bc:8a:7f:11:7d:3b:4b:70:d7:60:59:1f:ef:36:ca:3b:86:
d7:c1:f3:4f:73:86:9b:56:c5:16:12:3d:6d:e9:f5:94:c3:c5:
9f:7c:43:33:8d:78:74:aa:df:87:41:75:ab:f0:33:6b:99:a3:
e3:b0:a1:5a:ab:fb:b7:03:39:d1:f9:0c:76:ce:d3:a2:f1:21:
ac:0b:a8:05:f5:cb:b2:f3:9c:26:43:9d:32:9f:1c:e6:dd:01:
4f:49:5a:bc:52:b8:1b:2c:d0:94:18:28:01:ef:5e:38:7b:11:
df:a7:2d:c5:0c:56:7e:13:8a:46:3d:04:bc:1a:03:69:90:70:
e7:10:23:2e:a7:0d:6f:76:03:db:bf:76:2f:65:28:07:f7:74:
45:f9:ce:44:f4:9d:44:58:99:3c:b4:22:04:32:3b:69:c2:ed:
a1:91:b6:42:01:41:66:e2:4c:d0:62:1e:10:24:9b:3f:9d:c1:
a3:19:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:04 2025 by rpki-client