Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tc0lH2zDEmCthZLqXaLzRz7-378.roa
File: Tc0lH2zDEmCthZLqXaLzRz7-378.roa (raw, json)
Hash identifier: EsPiBCto1zPH7VJyCdJKKcOI6qbmTXC5EoO+C67gCLQ=
Subject key identifier: 4D:CD:25:1F:6C:C3:12:60:AD:85:92:EA:5D:A2:F3:47:3E:FE:DF:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D289DD6A5B1FBF2BE4E732BCEC2A5761
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tc0lH2zDEmCthZLqXaLzRz7-378.roa
Signing time: Fri 02 Dec 2022 11:12:41 +0000
ROA not before: Fri 02 Dec 2022 11:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:89:dd:6a:5b:1f:bf:2b:e4:e7:32:bc:ec:2a:57:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 11:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dcd251f6cc31260ad8592ea5da2f3473efedfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:58:45:a8:4e:c7:d3:0b:d7:6d:c5:bf:04:
bb:60:8e:28:40:fb:5c:a0:48:4e:16:cb:4a:c6:16:
45:ae:10:53:ca:92:b3:eb:bf:ab:73:da:ba:52:7d:
36:75:05:db:51:9d:81:de:65:1a:c8:c3:c3:da:d3:
97:fc:cc:5d:30:6d:29:0e:a8:6c:53:69:19:d2:da:
17:98:20:fd:69:66:d0:54:25:fa:ef:d1:db:94:9b:
fc:58:04:c1:32:5d:d6:a9:6c:fb:52:2e:ba:b8:19:
09:2c:ea:f0:e4:76:40:a6:6b:77:cd:35:a9:7c:e1:
f9:9a:36:85:fb:21:2a:ce:79:d8:41:80:4f:70:6f:
32:15:85:44:e1:d0:b7:65:06:c6:70:56:3f:53:93:
37:89:70:ca:b7:cc:2e:09:74:46:6f:ae:03:db:03:
40:e0:30:57:63:a6:91:10:c0:0a:50:10:62:10:8d:
cd:c8:e5:08:4a:4c:80:10:54:0d:b6:74:34:53:97:
d9:eb:db:e7:55:36:60:27:02:45:1d:e4:b9:b6:51:
96:68:22:4d:8d:43:74:ca:0b:f4:67:68:90:a2:90:
8d:d2:a9:cc:64:75:64:fd:3f:6a:a5:db:2a:2d:e1:
6c:34:04:6a:f2:21:80:23:1e:13:6f:37:65:44:67:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:25:1F:6C:C3:12:60:AD:85:92:EA:5D:A2:F3:47:3E:FE:DF:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tc0lH2zDEmCthZLqXaLzRz7-378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:c8:25:23:85:2f:12:14:02:ca:3a:8b:d9:7a:87:82:32:bd:
06:aa:c9:c6:6b:25:55:a8:f7:5f:62:98:2c:4c:d7:c4:bd:25:
8c:36:2b:de:f6:bf:74:41:69:b0:78:8a:6d:2c:24:d6:ae:22:
84:17:c8:02:70:4f:9d:76:e4:cf:a2:ac:f1:43:0d:de:3c:c0:
18:94:c3:ae:90:6d:b5:38:25:71:1c:62:21:86:1a:eb:71:0f:
0a:97:f9:bd:f3:c5:d3:d6:09:ca:b6:07:a0:e1:bd:82:16:ae:
7c:d6:22:9d:7c:a8:f3:60:6a:ea:76:7e:15:c6:d1:6f:65:06:
1a:ab:12:01:71:48:d8:54:91:ee:02:28:66:40:5b:f3:0a:73:
44:25:4a:7c:3a:54:c2:c0:ee:24:7d:2c:ac:54:96:12:5f:df:
2a:a2:2d:9c:cf:c9:6d:42:ef:d1:3f:5b:8d:03:19:1f:de:b4:
dd:8d:ba:75:f1:c2:44:4a:3a:03:67:93:56:18:c9:1e:2d:41:
9f:59:f5:2a:91:58:08:d7:eb:5b:99:88:56:a1:39:27:7e:48:
94:6d:26:e3:43:62:d6:84:f7:29:8b:51:ce:17:1d:bc:f4:41:
76:da:71:a0:a1:06:b6:85:3a:08:1f:d3:19:b0:a7:02:4f:8f:
a5:4b:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:00 2025 by rpki-client