Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TSliaSncChEkJSum-CVOkgSxvT8.roa
File: TSliaSncChEkJSum-CVOkgSxvT8.roa (raw, json)
Hash identifier: zqMEpdTr1M7db5mQHBAIWoL9KGUfMT9b0aFD2dI0rqs=
Subject key identifier: 4D:29:62:69:29:DC:0A:11:24:25:2B:A6:F8:25:4E:92:04:B1:BD:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889CA0DFB8747954C045FC088A59A6C1A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TSliaSncChEkJSum-CVOkgSxvT8.roa
Signing time: Thu 08 Jun 2023 20:09:28 +0000
ROA not before: Thu 08 Jun 2023 20:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:a0:df:b8:74:79:54:c0:45:fc:08:8a:59:a6:c1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 20:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d29626929dc0a1124252ba6f8254e9204b1bd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0c:21:60:09:80:fb:f3:5c:d3:9a:ae:9c:f5:
1a:d6:94:38:07:1e:5c:aa:c8:8c:ca:17:49:94:55:
25:e2:29:61:22:7d:d5:8c:57:75:b3:3b:61:2d:aa:
6d:19:fd:35:16:10:9f:95:bb:aa:9c:5a:da:c0:72:
2b:af:d5:08:f0:7c:0e:6b:43:35:2e:3a:ec:9c:d9:
72:d2:ea:68:9e:89:8c:74:f9:67:64:9b:cc:d1:47:
0f:7f:1d:05:e3:b7:74:a4:63:91:63:b4:18:ff:d6:
71:14:4b:3c:29:c4:2a:0d:86:ee:3b:9a:12:74:1e:
20:22:1e:a0:3a:60:db:08:b4:ee:70:da:d5:90:fa:
e7:de:fc:53:d8:a3:87:31:00:37:a0:41:c0:f5:d5:
dc:55:f7:13:e4:b4:45:17:d4:9d:45:c8:24:62:29:
aa:ef:21:31:42:50:1e:c0:65:1c:fd:07:60:41:f3:
c8:28:c7:6a:f4:6a:37:f9:76:12:a3:e1:4c:56:1d:
af:22:31:15:b4:5b:9c:ca:e5:d9:20:62:2c:b3:45:
93:c9:3a:56:6a:44:20:89:36:32:9b:33:53:2b:fa:
31:96:3d:df:c8:80:33:e6:af:c3:98:80:85:b3:14:
79:18:e8:0f:2e:8a:89:50:71:73:cb:51:68:d4:59:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:29:62:69:29:DC:0A:11:24:25:2B:A6:F8:25:4E:92:04:B1:BD:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TSliaSncChEkJSum-CVOkgSxvT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:7a:a4:56:06:5c:bd:9a:8c:d7:64:80:08:cc:87:6d:ee:cb:
cf:fb:86:e0:70:5b:5f:35:e3:37:d8:62:4d:17:ac:dc:b8:98:
4d:e1:2c:06:2a:68:0f:2b:1b:c6:41:5d:d7:7c:8a:06:23:24:
7c:a6:a6:d3:0a:08:3f:e5:2c:c3:fb:cd:88:02:82:c5:ed:05:
9f:6d:1b:b5:04:7b:be:49:db:4b:cf:c2:11:3b:b8:26:00:db:
3b:02:2d:7f:81:5d:8a:00:f9:8d:c4:5a:a9:00:2b:bd:71:67:
3b:48:9a:7a:c6:e0:72:b1:5b:f0:b4:ae:1a:54:8b:61:2b:6f:
d7:b7:79:29:26:b8:4c:79:70:aa:47:29:aa:17:2b:fd:00:c4:
15:c3:f8:2d:1b:ec:ae:b1:d4:69:bd:67:ba:bb:c4:15:da:6a:
fe:77:59:3a:68:f6:d2:45:4e:60:94:ff:ff:72:4a:1c:6e:37:
11:42:d7:22:d4:46:c1:c5:48:a3:f7:dc:3d:06:db:e5:2b:4e:
10:38:f2:1d:9b:9e:3b:31:50:5a:db:2a:83:94:4a:ac:92:2a:
01:1a:f8:65:2a:9d:67:09:34:d2:ff:28:d4:b0:73:bc:58:07:
68:a5:cb:14:e8:e5:17:b8:8d:ef:83:e1:d3:4b:c3:38:77:cb:
34:1e:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:17:09 2025 by rpki-client