Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TOf-k5txAAdJhUO58uSXhVcAZDs.roa
File: TOf-k5txAAdJhUO58uSXhVcAZDs.roa (raw, json)
Hash identifier: ta0mm0IPkM+k1HuioNqcU0qczKalPXIHpZNeDzIVkmg=
Subject key identifier: 4C:E7:FE:93:9B:71:00:07:49:85:43:B9:F2:E4:97:85:57:00:64:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7565FE5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TOf-k5txAAdJhUO58uSXhVcAZDs.roa
Signing time: Thu 24 Mar 2022 22:08:55 +0000
ROA not before: Thu 24 Mar 2022 22:08:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969618527 (0x7565fe5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 22:08:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ce7fe939b710007498543b9f2e497855700643b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:5a:ce:91:55:be:09:7a:b5:c7:a1:70:d3:
ab:3e:e8:d3:ce:97:41:d0:97:97:e7:09:ea:4d:d8:
6f:6f:c6:0c:08:18:71:7f:d9:6d:a9:43:5b:ba:a9:
f3:f3:a6:d1:b2:9b:46:1d:e0:ed:4c:e8:ca:fd:09:
30:e0:f6:43:d7:ee:84:f1:57:4c:d9:24:58:fa:8f:
41:9a:45:69:03:4b:ac:83:d3:5e:93:e4:81:30:a2:
92:46:7f:a8:e8:b5:f2:a2:bb:3a:e2:07:9d:b5:bd:
6c:0d:67:0b:4f:cc:94:69:e5:cc:78:91:6b:1e:4e:
fd:18:33:85:59:b0:5e:26:9e:7d:f9:c6:71:c8:68:
49:e0:90:9f:d8:a2:cb:57:fc:9e:c1:24:58:f8:88:
82:22:d4:9d:36:a1:fa:0f:13:6d:d0:5e:6a:53:df:
79:f3:c1:9f:00:4b:02:54:39:7e:22:94:ab:f9:72:
f4:1c:6b:ab:c2:10:29:94:4c:df:f8:fa:42:a1:38:
18:0f:7b:de:88:55:a3:f8:7b:fd:01:27:6d:0f:5e:
20:f8:6e:48:04:3d:99:93:5a:c2:3e:21:85:d3:6e:
6e:96:bc:15:8a:6c:85:01:29:02:a3:e3:86:99:89:
52:4c:22:97:3f:23:e0:97:81:a2:a1:e6:50:b0:a7:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E7:FE:93:9B:71:00:07:49:85:43:B9:F2:E4:97:85:57:00:64:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TOf-k5txAAdJhUO58uSXhVcAZDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:30:d0:19:3a:a7:52:58:e1:d0:78:95:01:85:8f:85:91:80:
d9:45:64:54:cf:be:2d:3a:39:69:67:9d:2e:de:27:e5:5b:11:
e6:2b:dd:ab:a4:fe:54:69:3c:2c:69:e8:c2:23:a0:2b:9a:15:
cd:4a:0d:28:ee:07:e4:e3:bc:9f:ec:27:f2:54:c2:22:d9:f9:
9c:ac:fd:2f:db:3f:2f:4f:d5:7a:cb:4a:21:f9:6d:68:dd:e8:
2f:eb:9b:04:dc:78:0e:2a:23:c1:9d:a8:1b:d9:31:43:28:52:
9c:b4:59:2a:e4:b8:18:9c:2a:3c:a9:21:6d:9b:24:1c:b8:30:
27:ad:c6:de:8c:90:5e:05:49:e9:4f:0c:52:3d:f8:7a:a8:fa:
7f:41:42:5a:3c:54:69:fb:c4:24:34:6b:65:d9:ba:8a:7c:cc:
c0:bf:88:8a:a1:e8:c1:63:c8:fb:dd:a3:a0:7a:14:45:a7:0b:
ea:2b:04:f3:d2:02:24:54:18:82:a0:02:d8:42:a8:7a:f5:84:
37:04:72:43:d8:e4:84:51:bf:12:a5:b9:f9:30:bc:a4:2f:8d:
d8:d6:5b:61:ef:55:63:78:da:01:ff:7d:16:9c:b0:29:ed:d6:
07:6b:b9:36:da:df:1f:13:bf:48:d8:87:66:48:fc:86:6a:ca:
1c:e7:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:24:02 2025 by rpki-client