Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TPCzul6jWZysRT_ffgMd7kMx8kM.roa
File: TPCzul6jWZysRT_ffgMd7kMx8kM.roa (raw, json)
Hash identifier: yqDtnEN5NzcLoRik3w5CW13CHpUShM3JPQcwI5gNVXI=
Subject key identifier: 4C:F0:B3:BA:5E:A3:59:9C:AC:45:3F:DF:7E:03:1D:EE:43:31:F2:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899C341A58C833AB974DBE6378BF43E26C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TPCzul6jWZysRT_ffgMd7kMx8kM.roa
Signing time: Fri 28 Jul 2023 11:13:27 +0000
ROA not before: Fri 28 Jul 2023 11:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:34:1a:58:c8:33:ab:97:4d:be:63:78:bf:43:e2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 11:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf0b3ba5ea3599cac453fdf7e031dee4331f243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:3e:1d:3c:d3:00:d2:77:12:49:61:f9:3d:
38:84:be:61:5e:f2:02:0c:10:03:60:52:10:e7:d0:
75:66:ed:cd:b6:81:c2:1c:a7:7d:7a:75:f5:8d:81:
9b:9a:71:87:ef:fb:7d:36:e5:5c:74:50:cc:46:7d:
45:bc:0e:a9:ba:95:67:1f:20:d4:f5:53:2b:cb:3a:
7b:ea:c6:00:57:f4:6a:84:d7:32:74:cf:86:d1:84:
ea:65:2b:43:ac:70:1e:08:d3:8f:1d:1f:e5:19:aa:
a4:0a:91:d1:e2:f8:00:38:7d:98:32:1f:8f:20:93:
00:20:43:55:34:dd:ed:39:4a:9f:2b:69:f6:54:9b:
3f:75:9d:e0:04:01:a2:f2:a0:a9:48:1d:fb:b3:1a:
ab:09:a3:89:12:0e:58:a4:f7:53:ea:46:d6:23:54:
a6:5c:0c:ab:6c:33:63:74:a0:af:c6:62:fc:58:b1:
a5:b1:72:a1:c2:da:8b:74:7c:e8:7a:8e:08:f7:f3:
38:c1:d9:f0:d4:54:fe:b5:b4:bb:46:c2:eb:c8:83:
4c:5c:ae:93:cc:91:0e:d0:05:d3:67:20:ea:66:87:
28:99:94:66:a4:fb:86:55:30:c1:54:8d:52:23:87:
d8:6f:4a:f8:02:23:c2:f6:98:46:0a:9f:89:b0:30:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F0:B3:BA:5E:A3:59:9C:AC:45:3F:DF:7E:03:1D:EE:43:31:F2:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TPCzul6jWZysRT_ffgMd7kMx8kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:16:db:5a:20:63:0c:69:1f:aa:c5:59:d8:64:76:ea:e2:3e:
63:98:44:bd:24:69:7d:20:87:b4:7b:33:d3:a3:e2:31:ac:e2:
92:fd:a3:3c:d2:61:8b:68:0a:26:15:7a:08:b6:71:8e:a2:33:
27:ce:f9:97:4b:0a:bb:78:36:b5:0d:03:d2:6f:8c:95:93:37:
d1:1e:04:e6:7b:73:e7:d6:a2:07:8f:95:cc:3b:da:1b:fa:88:
f7:13:30:36:23:67:b1:ad:45:78:40:db:44:9a:44:3a:65:7c:
f7:61:70:7e:7f:6e:62:39:c0:e4:b4:d6:5a:f4:8e:49:08:32:
0d:ff:42:ba:7c:a0:38:b6:f2:88:4a:86:fc:49:12:e9:ca:73:
76:75:ab:f2:e6:64:73:6a:1d:bb:a1:31:6b:00:d8:ca:bc:d9:
1d:fa:f6:16:8a:ba:ba:06:4c:51:e2:c4:6a:72:cd:f4:98:e1:
a5:3b:94:fb:fa:1a:cf:38:63:1a:1d:63:30:b6:8d:c8:76:67:
c7:18:3e:6b:64:2d:29:d7:4e:e6:a8:77:95:57:5e:e9:4a:00:
59:c7:23:c4:4b:04:10:55:1c:16:ed:d0:a0:2b:1d:b8:45:fc:
4f:7f:c0:16:cb:79:9d:40:54:d9:8c:a6:61:d4:81:28:b7:7a:
90:d0:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:23:41 2025 by rpki-client