Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYg_MHvMIsw6wN_lUFl9Jb7rXjg.roa
File: TYg_MHvMIsw6wN_lUFl9Jb7rXjg.roa (raw, json)
Hash identifier: a0QVtVl7nK3Z5epQtyGeJ2B9pOLWA0d/qGsPbvJQJc8=
Subject key identifier: 4D:88:3F:30:7B:CC:22:CC:3A:C0:DF:E5:50:59:7D:25:BE:EB:5E:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186887FB1A1E7C6A26B8BD74EE35A43C4C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYg_MHvMIsw6wN_lUFl9Jb7rXjg.roa
Signing time: Sat 25 Feb 2023 12:15:15 +0000
ROA not before: Sat 25 Feb 2023 12:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:88:7f:b1:a1:e7:c6:a2:6b:8b:d7:4e:e3:5a:43:c4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 12:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d883f307bcc22cc3ac0dfe550597d25beeb5e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:3f:83:86:54:26:60:05:9f:ac:d1:eb:d6:
4a:a2:e5:a8:4c:4d:b8:4a:59:48:b0:4e:ad:e7:bd:
6f:a0:f1:0a:b4:52:3e:24:d4:ab:57:7a:c7:fb:e5:
c8:02:b2:97:c5:e2:06:d8:dd:33:a5:a4:15:de:24:
eb:0e:78:8e:a8:67:fc:0a:31:b2:51:d4:f1:f7:04:
c7:cc:e3:9e:df:92:ef:73:67:6b:70:e5:4e:b5:22:
28:bf:d1:8b:f3:46:ab:71:9a:ec:84:6a:2d:26:04:
d3:8f:3e:6a:a6:2a:bc:2a:38:62:4f:76:70:23:2b:
00:ec:1b:bd:ba:7c:bc:38:68:ee:1b:22:7a:98:75:
b6:d8:d9:57:8f:97:3f:8e:2a:cb:71:67:3b:d2:66:
e2:96:b9:71:9b:7c:7c:26:22:a6:59:15:b1:db:db:
71:4d:74:bf:0f:c4:52:19:21:7f:7e:cb:a3:6c:29:
de:0d:80:e8:fc:32:74:84:c9:03:1c:8c:20:1b:e3:
14:c1:5b:a6:46:69:06:20:ac:23:60:5d:88:b2:96:
9c:4b:69:94:15:9b:ef:61:f2:a0:0b:dd:4c:87:b3:
64:e2:d2:45:02:2f:c7:0d:e7:4a:a2:9e:96:96:2b:
f9:51:8d:93:18:7b:6c:12:fc:fe:5a:2b:ba:3f:7a:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:88:3F:30:7B:CC:22:CC:3A:C0:DF:E5:50:59:7D:25:BE:EB:5E:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYg_MHvMIsw6wN_lUFl9Jb7rXjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:34:29:f5:fc:69:f0:97:6f:c3:e9:8a:4c:52:80:0d:db:be:
03:5d:cf:0f:28:dd:ff:b1:9f:11:c5:d4:d0:c3:cd:6b:35:e9:
91:a4:8a:7b:f1:10:b4:4b:26:a2:87:81:02:d5:a5:20:c8:39:
16:8b:4e:16:26:8f:4d:14:7a:53:bb:11:f8:7e:25:1a:b9:21:
06:dc:43:f2:90:01:fa:c8:b8:45:94:16:9a:2f:07:b5:18:04:
8c:28:04:9f:97:8d:11:fb:6f:f7:4f:d3:e3:f7:89:f8:ae:23:
49:63:64:95:ab:05:0b:c7:3e:e6:fd:49:63:2c:89:42:02:23:
61:32:7e:80:9b:9b:6b:16:f4:80:e8:81:c9:fb:11:32:54:4a:
b7:55:00:cf:3f:49:6b:4c:ac:8c:b6:36:6b:11:c6:e9:b8:86:
a9:f2:28:64:c0:72:09:f0:e0:df:d9:e8:d0:2c:39:8b:46:f2:
dc:cd:65:23:e5:dc:47:2c:a2:cf:fb:76:ae:bd:55:ae:4a:12:
bf:b5:b0:92:45:c0:7b:29:9c:d1:31:35:3d:28:7e:8a:e6:84:
11:d1:47:64:a8:eb:49:c2:44:6c:fb:4d:69:ba:64:63:6a:dc:
f5:bb:c4:d7:4d:0e:33:f3:48:4f:bd:92:6e:dc:7c:12:78:c3:
df:f6:ae:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:19:15 2025 by rpki-client