Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TVpaljTqIPsZ3rh481HHfqHM_tQ.roa
File: TVpaljTqIPsZ3rh481HHfqHM_tQ.roa (raw, json)
Hash identifier: NkMMeKdj4h4gjJiUHCcnP0HGMChjFr2wBshbYFG4O8g=
Subject key identifier: 4D:5A:5A:96:34:EA:20:FB:19:DE:B8:78:F3:51:C7:7E:A1:CC:FE:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871F1F70E0A2D4C3DBD40ADA36250D2398
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TVpaljTqIPsZ3rh481HHfqHM_tQ.roa
Signing time: Sun 26 Mar 2023 18:12:46 +0000
ROA not before: Sun 26 Mar 2023 18:12:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1f:1f:70:e0:a2:d4:c3:db:d4:0a:da:36:25:0d:23:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 18:12:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d5a5a9634ea20fb19deb878f351c77ea1ccfed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:08:8d:ac:26:68:b2:25:d8:6e:08:ec:f2:
94:89:2b:4d:31:d3:6c:02:02:83:6c:5d:87:79:5a:
53:9e:02:62:10:69:0a:88:62:39:d6:d0:06:fc:76:
65:5e:3e:e9:10:7f:f3:b9:eb:8b:23:1f:07:3d:f0:
16:fd:35:83:0c:a6:15:5e:5c:03:97:8c:ca:eb:35:
a2:dd:83:01:18:ed:7e:d4:c1:96:95:f6:7f:d8:4a:
c9:cf:37:5c:eb:df:25:f1:5a:35:e3:e9:df:fd:58:
85:6a:77:26:9d:07:f0:6c:0b:5b:72:45:1c:4f:9a:
77:ef:f4:5b:e9:77:16:0e:e3:92:51:0e:eb:74:cb:
a0:7c:52:37:b8:6c:60:d1:6c:06:3d:7b:45:c8:fe:
52:29:6c:01:df:bd:e6:4b:f6:a3:ed:68:ae:ae:89:
c2:25:0f:5c:2b:cf:a3:a2:f4:5a:9b:66:c9:3e:99:
0f:5c:77:5e:f5:fd:f7:b6:e4:dd:6f:ed:1c:4b:54:
81:35:4a:f0:b9:7b:ad:5d:ed:dd:67:c3:16:c3:28:
63:23:a1:44:2b:ac:69:41:46:89:ef:7e:fe:cd:b7:
0b:ae:58:e8:0f:8f:b9:53:05:c8:ef:06:90:ae:27:
fe:10:d3:36:8c:25:74:ab:50:96:b4:49:4c:9d:1c:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5A:5A:96:34:EA:20:FB:19:DE:B8:78:F3:51:C7:7E:A1:CC:FE:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TVpaljTqIPsZ3rh481HHfqHM_tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:e7:7d:cd:6c:e2:7c:25:6d:2b:65:45:62:da:79:31:68:1d:
a5:82:ea:e9:6d:e3:1f:1f:a2:3f:97:ff:bf:66:ca:e9:01:b0:
fc:95:2a:3c:62:d3:bb:44:6e:04:f0:95:83:32:af:2d:ad:71:
27:c6:6c:86:d5:b0:45:32:11:14:f5:29:75:76:b7:63:72:8c:
12:19:07:ab:e0:33:67:95:0f:d9:f8:b6:08:00:d0:a8:53:4c:
58:8e:4e:fd:ac:48:b4:da:a2:63:bb:fc:2b:5f:f6:55:d1:75:
92:51:0b:ef:f3:2d:90:5c:e9:08:6c:d8:d8:1f:b2:5d:d6:bb:
d2:50:a0:35:52:ae:d2:c3:77:05:36:46:40:88:b9:45:37:9e:
b6:3a:98:37:f0:63:64:49:ef:97:b0:9f:d4:29:29:34:68:56:
17:cc:d4:e0:07:6d:8c:b6:c9:22:7e:1b:08:2b:8f:2f:5d:8c:
b1:44:0b:e3:df:be:84:d7:e6:cc:86:73:55:d5:81:e9:da:d3:
94:33:b4:99:a2:36:a7:65:27:5b:95:09:cd:06:5f:26:40:fc:
09:6b:d9:67:2b:b8:74:13:17:6a:f6:98:c6:9e:e1:ac:b1:1e:
a1:29:41:cd:20:c4:4d:8a:5f:f1:bd:34:0e:bf:10:39:60:6e:
4d:71:63:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:28:20 2025 by rpki-client