Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TaZCc8G77iFV2FTNz2OlXv0OW1c.roa
File: TaZCc8G77iFV2FTNz2OlXv0OW1c.roa (raw, json)
Hash identifier: 9miabmmTRBN/faNTiZ+D+q9gEUN9Y0+6CEdwlAgXiZU=
Subject key identifier: 4D:A6:42:73:C1:BB:EE:21:55:D8:54:CD:CF:63:A5:5E:FD:0E:5B:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868A6D5664F5A37332BDA0A5EF8812CF24
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TaZCc8G77iFV2FTNz2OlXv0OW1c.roa
Signing time: Sat 25 Feb 2023 21:14:26 +0000
ROA not before: Sat 25 Feb 2023 21:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8a:6d:56:64:f5:a3:73:32:bd:a0:a5:ef:88:12:cf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 21:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4da64273c1bbee2155d854cdcf63a55efd0e5b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:bf:7c:7e:bf:ab:eb:04:4d:46:48:55:15:
80:de:01:64:e3:69:90:6c:46:45:35:09:bb:63:13:
36:3a:69:58:fb:74:89:68:26:1a:e4:92:f3:6b:25:
b6:43:e6:00:88:b2:d5:f6:d5:24:2c:ff:ce:0a:df:
18:9e:69:b5:bd:fa:ae:61:15:6c:ca:7c:d6:c3:d5:
01:99:10:4f:78:bb:3e:a0:d5:d5:ed:48:aa:5e:87:
0f:ee:34:a1:20:63:ee:94:80:fa:74:45:2d:f7:85:
42:82:ec:5a:a4:47:f8:44:4a:3d:c6:a9:50:a6:d9:
b4:58:6f:07:65:a3:34:e1:7a:03:18:bc:f0:26:41:
9a:ef:71:02:42:db:a1:fc:5f:8b:4b:53:33:88:46:
09:2a:32:f4:99:69:db:75:58:b5:ab:89:41:9e:65:
f9:d5:d1:16:34:90:39:60:36:b4:6a:63:53:d7:17:
63:b0:1a:3e:79:fa:e2:5c:bd:18:bc:99:ab:d4:90:
c2:76:8a:a3:3e:96:04:7a:07:f7:84:96:27:ae:49:
9f:07:c9:68:43:6d:2b:ec:96:9a:ea:92:f2:e3:dd:
a6:f3:1f:5a:d3:c1:2e:b9:02:f9:9f:4a:7f:26:e6:
16:0b:63:41:9b:4f:66:ff:fb:f2:72:c9:6a:d9:b9:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A6:42:73:C1:BB:EE:21:55:D8:54:CD:CF:63:A5:5E:FD:0E:5B:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TaZCc8G77iFV2FTNz2OlXv0OW1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:d0:ed:c5:39:d2:4b:08:ce:dd:07:d1:fb:88:64:f5:91:f8:
a9:05:65:44:5a:40:6a:0d:c1:8e:d6:64:a9:d9:bf:e2:23:d7:
9d:87:48:54:12:ad:45:4c:4e:95:fc:23:d4:5e:87:1d:e1:41:
fc:1f:bd:87:2d:da:16:5f:01:0e:b5:d7:3b:c4:14:a2:10:60:
36:cc:60:a5:3b:9c:b8:85:5f:75:2e:6a:f2:34:50:37:73:23:
1c:6e:9b:a3:ef:b3:87:e1:37:c5:5c:0a:48:26:6e:c0:4a:5b:
1a:dd:da:da:8a:5c:70:8c:92:67:a8:e3:ed:5b:48:a6:df:6c:
1a:12:2f:44:10:46:e7:9a:8f:1c:63:da:1a:67:72:7f:24:37:
f7:f9:00:89:89:b2:bd:2f:0f:e1:98:8b:d4:48:6e:f6:14:1c:
0f:9c:8a:13:ce:9d:f2:6f:c2:7e:0e:b3:f6:95:80:49:79:54:
a2:69:7c:6d:ad:1f:d6:a9:57:0a:c3:e5:fc:02:46:c0:d5:80:
8c:f1:d2:af:65:35:8c:f3:83:19:d7:c9:8f:f8:43:88:34:bb:
14:0c:15:50:72:e2:3c:50:56:47:dd:8c:e2:3e:a6:bf:5e:57:
25:21:12:df:b8:15:90:8a:b2:e8:3a:8e:8c:47:aa:c5:db:4b:
bf:5d:da:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:22:32 2025 by rpki-client