Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TSpeq4eAgCdvmiyrROdoBk1zcRM.roa
File: TSpeq4eAgCdvmiyrROdoBk1zcRM.roa (raw, json)
Hash identifier: Ijmf88ssfCsJGsg8Q8sOu6cN2AdB52D0Y8dVeut5Nxw=
Subject key identifier: 4D:2A:5E:AB:87:80:80:27:6F:9A:2C:AB:44:E7:68:06:4D:73:71:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FF5F1833295F7646BB57AA6778E1C052
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TSpeq4eAgCdvmiyrROdoBk1zcRM.roa
Signing time: Mon 20 Mar 2023 14:14:27 +0000
ROA not before: Mon 20 Mar 2023 14:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:5f:18:33:29:5f:76:46:bb:57:aa:67:78:e1:c0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 14:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d2a5eab878080276f9a2cab44e768064d737113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e5:cd:2f:82:32:3c:bc:9b:dd:a7:2c:e0:66:
72:85:30:d9:c1:b2:3e:29:49:3d:1c:b9:95:96:e0:
3c:be:36:54:8e:7a:9b:27:33:71:42:3d:f7:fc:f2:
3a:b7:9a:a9:e1:b7:fe:d7:ed:c6:ee:51:de:6f:b3:
67:b4:8e:ad:de:53:04:dc:02:02:18:a1:de:26:a5:
fd:f4:60:09:ec:c1:0b:26:26:d6:10:df:0e:2b:1d:
a2:b2:e5:c7:37:0f:ce:3b:67:fd:ae:f4:81:ed:71:
9e:5b:d7:0e:9d:e0:78:7e:61:75:a7:24:15:c9:ba:
63:9d:29:06:89:a5:0d:dd:60:61:f4:2f:74:f4:d9:
58:ff:f4:9f:56:3a:ae:3c:b7:b4:ea:76:3c:91:84:
92:2c:14:b4:65:ac:c6:3c:fd:06:00:24:dc:35:34:
66:ec:a3:e2:1f:c3:48:1a:8c:53:47:cc:02:01:1a:
e1:72:a7:d8:c6:1b:f3:b3:52:47:1b:5e:54:95:8a:
59:b6:10:9d:d1:60:70:a3:ca:cc:63:67:44:56:40:
b8:59:94:c8:71:11:7e:81:e9:e7:04:21:59:95:10:
c5:a2:4d:4c:c1:b6:db:be:ab:5e:24:63:e3:3a:cc:
b8:d1:88:4b:4a:bb:4f:97:18:38:a7:22:94:3b:d8:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2A:5E:AB:87:80:80:27:6F:9A:2C:AB:44:E7:68:06:4D:73:71:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TSpeq4eAgCdvmiyrROdoBk1zcRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:8f:93:c1:b4:c0:72:ee:ac:2f:1f:39:52:2d:1f:12:2a:7d:
3f:58:8f:42:4c:52:c6:d9:57:86:8c:85:d0:c1:0a:0f:87:84:
db:c4:ea:ef:a8:73:8d:05:53:3e:92:6b:6b:a3:4a:cc:49:c8:
33:c5:8b:2b:8d:78:7a:1a:8e:f1:d8:56:c3:20:0d:0d:88:3b:
e0:9b:58:4d:f9:91:ed:29:2d:c0:9a:4a:d5:cb:53:c9:03:7f:
5e:43:cc:d6:cb:97:fb:d7:02:5a:cd:3f:1d:ce:6d:ca:36:c9:
1f:3b:5a:05:e1:88:43:26:60:3c:88:ad:6d:77:67:aa:36:ce:
31:a0:75:e2:00:91:2b:9f:1f:fb:e8:d8:39:1d:d7:29:f4:fb:
1c:d8:bd:42:0d:20:be:33:44:57:d4:23:67:c8:e6:37:f6:11:
7c:2d:f6:67:30:12:58:e3:12:39:f4:35:0f:67:6a:ee:a3:c6:
f1:9e:33:1e:c3:20:2e:2c:b1:11:62:c5:98:71:28:f8:a9:57:
ac:c5:c3:10:64:ab:28:6d:6d:af:6e:7d:6d:b8:2a:3e:4a:22:
36:21:df:d5:b3:b9:7c:c6:71:01:7f:71:ce:3c:47:80:d4:30:
5c:80:0c:7a:53:fc:9b:01:b8:75:17:a8:ea:8c:68:43:be:10:
a3:da:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:50:08 2025 by rpki-client