Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TWhqDmhfBDJ4QRV9Hq2tkUT5bXM.roa
File: TWhqDmhfBDJ4QRV9Hq2tkUT5bXM.roa (raw, json)
Hash identifier: LmA5kCmJ10xpLuFlzIwxXNbVbsFjgRLlSvvp+4yeUqs=
Subject key identifier: 4D:68:6A:0E:68:5F:04:32:78:41:15:7D:1E:AD:AD:91:44:F9:6D:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B6984142235FCE3AF075FFD650C2CA9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TWhqDmhfBDJ4QRV9Hq2tkUT5bXM.roa
Signing time: Wed 02 Aug 2023 14:12:58 +0000
ROA not before: Wed 02 Aug 2023 14:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:98:41:42:23:5f:ce:3a:f0:75:ff:d6:50:c2:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 14:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d686a0e685f04327841157d1eadad9144f96d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:53:28:3a:9b:97:cf:7f:c4:6a:8a:bc:24:
d4:64:11:96:d8:ae:69:79:aa:9b:fc:9a:cc:14:22:
29:51:48:66:99:18:2e:04:76:10:99:14:36:ff:b3:
3f:1b:38:4c:ff:68:13:dc:d2:3a:1d:5a:92:8a:c3:
ee:de:9a:29:b7:d8:42:fd:98:dc:6d:27:78:09:a0:
50:e4:1b:ab:33:92:f4:ad:e3:79:16:20:50:bf:02:
40:c2:b4:65:68:12:bd:90:d3:97:33:a6:f8:cb:21:
ef:b5:f9:e8:b5:48:68:66:ac:c5:0d:df:87:2b:9e:
34:40:b9:9e:fa:7a:e4:42:59:a8:4a:ab:e1:88:dd:
3f:14:9d:bb:d8:b6:32:54:e2:dc:d3:cf:64:a9:70:
f2:8e:5f:ac:e2:b5:d2:03:e1:22:f1:18:64:0d:67:
1e:05:fc:b3:bd:61:eb:c2:c2:53:5f:ac:51:b2:dc:
1b:c6:79:67:26:00:9d:e2:3d:37:6a:5d:aa:93:4b:
57:82:99:81:11:20:c0:39:51:fe:b4:9b:d7:30:d0:
00:10:f1:ad:86:58:70:3c:40:d1:aa:e6:8b:db:7c:
aa:ea:0c:c5:5f:ff:52:c8:11:fa:f7:11:1d:75:32:
ed:89:db:15:31:99:2d:79:ed:2a:2b:08:f6:54:ff:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:68:6A:0E:68:5F:04:32:78:41:15:7D:1E:AD:AD:91:44:F9:6D:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TWhqDmhfBDJ4QRV9Hq2tkUT5bXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:60:15:e7:c8:f6:b6:3a:e0:74:70:6c:dc:28:a8:a4:c0:67:
55:cd:bb:fb:b1:62:0a:b7:fe:e9:44:9b:b8:92:10:65:46:d9:
13:63:07:f2:f1:e3:77:74:7f:9c:ab:bf:0e:ac:cd:8c:9f:06:
57:8b:82:4f:ba:af:97:89:1c:82:ce:51:7a:b2:06:e2:eb:7d:
6b:f2:51:a4:c6:db:16:9c:5d:d2:a8:a8:2f:ad:6d:49:41:f6:
18:f8:fd:1d:7f:c6:fb:25:b0:6d:0f:31:42:4e:8c:7f:3b:4d:
46:da:a4:d1:da:fd:02:07:37:a3:08:be:cd:42:cd:e2:cb:e8:
62:9e:a4:ef:bd:6e:f2:d6:e9:a8:37:f2:af:d5:16:85:e4:08:
d1:94:1d:ae:62:27:8f:e5:0b:6a:e1:19:9d:7f:e6:1f:e3:ee:
dd:88:47:3d:68:f8:84:87:e9:86:73:c9:4a:dd:f9:e8:89:44:
25:15:3b:08:a8:d6:6a:8d:41:18:d2:5a:8c:7f:3f:6c:95:68:
ce:f2:0b:3b:2b:5e:6d:df:aa:ae:d3:04:4c:ab:78:3a:35:25:
1d:35:25:6a:69:77:df:72:0a:c5:f1:5b:7e:c2:d8:38:27:2b:
c2:7b:5b:c7:06:27:bb:07:0e:75:d6:cb:61:ef:44:cd:1c:3d:
ed:36:a9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:22 2025 by rpki-client