Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TWW_DAVnA4ByXLfQ8SYdhxb0BLs.roa
File: TWW_DAVnA4ByXLfQ8SYdhxb0BLs.roa (raw, json)
Hash identifier: JiTf8yAnPXX1AxX5qkI9Ch1mvAbXjspxvr6csEvAPe4=
Subject key identifier: 4D:65:BF:0C:05:67:03:80:72:5C:B7:D0:F1:26:1D:87:16:F4:04:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018276BC87E2565F7FE9C57CF8FA59582868
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TWW_DAVnA4ByXLfQ8SYdhxb0BLs.roa
Signing time: Sun 07 Aug 2022 05:17:23 +0000
ROA not before: Sun 07 Aug 2022 05:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:76:bc:87:e2:56:5f:7f:e9:c5:7c:f8:fa:59:58:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 05:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d65bf0c05670380725cb7d0f1261d8716f404bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:7a:e7:0d:44:68:95:a0:e4:72:4d:09:29:
72:69:e8:18:43:88:35:18:db:15:d1:68:4f:8c:18:
99:6f:35:37:06:b6:34:97:4e:9d:de:8d:68:9d:46:
a6:f6:34:ca:b4:82:83:7f:99:63:d8:93:d7:ee:f7:
42:df:b0:e9:09:c8:6a:4d:f2:98:a7:b0:62:7e:0a:
c0:85:5c:55:e6:c6:18:95:50:fc:42:78:06:79:9f:
09:77:6f:c3:c7:01:b2:e7:f9:93:3f:eb:b4:c1:e1:
1b:71:7c:37:bb:f2:40:d9:4e:3a:2d:68:f7:11:e9:
d8:44:27:d9:6a:5c:d2:7d:1d:db:ff:0e:74:91:ff:
91:bb:cd:29:1b:41:6b:01:b5:d1:e5:64:33:16:8a:
16:9b:1d:5a:07:66:fc:d8:65:98:d9:62:bd:e3:76:
37:e4:c4:46:39:b7:7f:da:a5:8e:af:31:f2:16:9b:
41:00:22:ff:fc:54:09:bb:56:c5:b5:9b:b8:28:78:
90:bc:4e:5b:5a:70:e8:6e:17:a4:94:56:1d:44:12:
f9:87:1c:fe:64:60:5a:58:4a:51:59:4d:19:e4:28:
d2:a7:99:76:cb:03:15:f4:05:f4:6f:05:1b:de:cd:
5e:f7:27:52:15:ec:2b:90:ea:c2:7e:54:61:a7:bf:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:65:BF:0C:05:67:03:80:72:5C:B7:D0:F1:26:1D:87:16:F4:04:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TWW_DAVnA4ByXLfQ8SYdhxb0BLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:7c:49:08:55:6b:5e:33:ad:09:3d:40:56:98:a4:2a:b5:6b:
95:68:01:2a:2b:e6:92:76:50:c1:c4:0e:56:71:a4:a2:5b:8a:
9d:1f:1e:98:17:1f:25:92:b3:fd:09:15:9f:eb:23:8c:79:19:
0c:60:00:7e:f4:65:61:0d:a0:4e:84:a9:c2:77:af:09:65:da:
8e:f6:18:a6:ce:85:60:bd:fe:7a:35:90:94:88:5a:1d:2a:5a:
11:92:74:86:8c:99:03:c2:2c:05:96:4b:20:b4:71:2e:cd:ba:
fd:62:64:17:bc:61:97:29:91:82:6a:65:3b:57:14:14:df:95:
76:ba:93:1d:f2:db:6e:52:29:24:ed:e9:bc:21:cc:67:6b:47:
bc:27:1b:3d:a6:b7:38:b2:a1:12:42:c9:c3:30:19:b9:90:f3:
0a:e2:95:d3:2a:23:ad:ea:d1:e6:e8:7f:4b:f0:47:fb:fd:eb:
f5:cc:61:4f:e7:71:87:01:b5:90:c8:8d:ee:7f:ce:0f:a6:0c:
62:2d:cb:db:62:8c:f9:1e:05:3d:5e:4f:72:f7:a3:42:f0:57:
d4:89:71:ae:a7:e0:b7:c5:28:54:65:38:f3:ae:20:0a:81:7e:
78:57:c4:4c:d4:64:43:53:6f:fc:9a:81:c1:2b:d6:46:53:d3:
08:8c:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:51:08 2025 by rpki-client