Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYY8xvyGOw-lVM9s_TvUAX9oo4Y.roa
File: TYY8xvyGOw-lVM9s_TvUAX9oo4Y.roa (raw, json)
Hash identifier: RnQy82Qv/U5yUJcPYSFfiz31YbAKw+sNW7CImdsxIbg=
Subject key identifier: 4D:86:3C:C6:FC:86:3B:0F:A5:54:CF:6C:FD:3B:D4:01:7F:68:A3:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C0B3BC8BF4A88BF4492E59AE26C6E091
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYY8xvyGOw-lVM9s_TvUAX9oo4Y.roa
Signing time: Tue 17 Jan 2023 17:08:02 +0000
ROA not before: Tue 17 Jan 2023 17:08:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:c0b0:4848/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:b3:bc:8b:f4:a8:8b:f4:49:2e:59:ae:26:c6:e0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 17 17:08:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d863cc6fc863b0fa554cf6cfd3bd4017f68a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:f3:8f:fa:c8:8a:2b:f2:97:ec:98:92:38:
9a:c9:e5:cc:9f:4c:e0:89:63:98:f9:80:20:d2:92:
08:db:46:79:a8:c3:a8:fa:60:a1:04:5d:bb:88:07:
2e:99:4b:70:9e:08:ba:26:b9:c6:b7:f9:ad:e7:d8:
13:c5:3a:b9:62:b7:c9:64:de:fc:a0:a9:0b:aa:d4:
8c:d2:23:c1:b1:74:ba:e9:40:3d:42:4e:89:3f:2e:
fa:38:0d:bd:97:d1:fe:30:4c:3c:3e:f6:b5:44:e9:
c7:71:5e:5a:44:bc:37:e1:35:2c:a8:ab:32:2c:bc:
4b:84:90:b2:a1:c9:8f:cf:80:d8:ef:e1:3d:91:9a:
95:6c:84:ce:a4:4d:51:a0:bd:0c:dc:86:d9:3e:0d:
72:18:77:ba:d5:0b:58:eb:11:2c:49:a9:f5:ad:70:
40:38:2f:42:d5:12:bc:37:60:78:a9:7f:35:7d:56:
c2:2c:a2:52:5e:fb:79:a7:f6:b6:a7:73:b3:b5:11:
de:ec:c5:fb:e5:cf:b4:19:34:9c:28:7d:cf:25:43:
9a:c4:f6:aa:25:cf:78:d0:f8:e7:60:f3:db:52:27:
86:78:75:5d:21:d1:11:a7:19:d3:e3:56:28:59:cf:
58:d6:a1:8d:a3:03:d2:b7:15:a5:d4:55:99:25:10:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:3C:C6:FC:86:3B:0F:A5:54:CF:6C:FD:3B:D4:01:7F:68:A3:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYY8xvyGOw-lVM9s_TvUAX9oo4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:2c:de:c2:01:e3:12:fc:0e:ef:1e:25:99:27:74:48:33:b7:
b4:c4:d3:25:58:12:ce:49:6f:a4:d9:db:c9:e5:bb:69:cc:49:
47:f7:e6:af:a8:7b:2f:d7:6b:5b:ba:23:7c:be:55:ad:6a:91:
10:e4:bd:e0:19:47:16:13:a0:da:57:7a:12:68:40:db:74:b7:
74:39:6c:64:9e:93:25:bb:0b:ad:c5:08:57:a3:60:a3:37:5c:
a8:6e:61:e5:2e:0e:84:92:c7:b5:6a:50:39:8f:bc:7e:8b:d9:
0c:b9:62:14:14:86:5e:25:6a:f3:aa:70:04:89:3b:34:a7:64:
98:b1:d7:ea:74:94:0d:10:ce:04:a0:0d:92:64:aa:92:59:77:
6f:cb:33:5d:5e:b4:68:df:b4:11:e2:70:c5:9b:a9:66:91:c6:
cc:90:f1:5e:61:00:69:62:a1:f9:72:1e:75:17:e4:3b:56:49:
38:ea:54:6e:05:d1:9c:9d:3e:4f:b2:d0:f2:d6:fe:54:23:be:
a2:ce:8f:1e:4e:bd:ae:fa:2a:e2:1c:73:83:50:38:44:29:29:
14:3f:83:79:d6:de:61:3d:c4:82:8c:ad:b2:f0:e2:dd:ce:9e:
64:81:a1:ae:64:97:5e:9f:17:bf:6c:ad:0c:2d:66:d3:5f:4f:
45:22:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:07:52 2025 by rpki-client