Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tc3i-SPgdcpEDwwGqtmLLMFIee8.roa
File: Tc3i-SPgdcpEDwwGqtmLLMFIee8.roa (raw, json)
Hash identifier: 52oL4pd2sVA6u9irM7k69Q9rwMq34h0UMN5r7AfQ704=
Subject key identifier: 4D:CD:E2:F9:23:E0:75:CA:44:0F:0C:06:AA:D9:8B:2C:C1:48:79:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826D47E09DB85904C897D84FC0828089BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tc3i-SPgdcpEDwwGqtmLLMFIee8.roa
Signing time: Fri 05 Aug 2022 09:13:23 +0000
ROA not before: Fri 05 Aug 2022 09:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:47:e0:9d:b8:59:04:c8:97:d8:4f:c0:82:80:89:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 09:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dcde2f923e075ca440f0c06aad98b2cc14879ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:7b:f0:39:ea:52:aa:c1:97:5d:2d:11:19:
bc:a8:ea:ae:68:91:47:b9:4c:46:b7:07:d4:c4:f6:
79:ee:77:c3:21:cf:f1:c7:a7:7f:2c:1c:45:a3:9d:
70:43:3b:5f:32:4a:1b:06:3f:1d:74:4e:c7:1b:bf:
66:32:7b:17:b2:8a:c1:6e:a3:73:84:f7:a1:2e:d4:
96:1c:51:f5:4d:3e:e4:74:aa:2c:64:7a:ad:89:f0:
51:9f:e2:da:e7:bd:a7:dd:83:64:7e:5b:85:db:b7:
37:4a:4a:a3:e4:76:55:87:b9:a7:a0:01:f9:06:e3:
7b:8c:dd:8f:a8:63:87:be:6c:da:37:a6:69:94:52:
34:26:d8:34:24:46:33:73:3a:e6:bb:d8:45:09:42:
ad:1b:c4:fa:01:6b:89:6d:29:45:1c:0f:eb:96:2a:
05:09:e0:f0:02:98:16:ac:a0:30:f5:e9:5f:a2:c3:
9d:28:a1:fc:d0:be:61:9b:ec:8c:c0:ed:97:7f:d4:
2c:d2:e8:4d:e3:f5:93:41:cc:be:de:aa:84:ab:ce:
d1:e2:4d:87:79:89:04:23:bc:54:46:6f:65:69:b5:
ad:41:82:c0:f0:c2:d7:23:bc:0e:aa:04:22:a8:99:
df:dd:ec:1b:31:ec:f3:04:d9:19:e6:52:98:2e:86:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:E2:F9:23:E0:75:CA:44:0F:0C:06:AA:D9:8B:2C:C1:48:79:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tc3i-SPgdcpEDwwGqtmLLMFIee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:01:df:35:63:24:5a:64:58:3a:f3:e9:ad:40:6b:9d:6a:be:
08:03:c6:69:8c:14:eb:89:27:c9:7c:fb:28:98:4d:db:50:47:
3f:20:d3:b8:3d:38:43:3e:6f:35:e7:05:a0:c8:d8:d5:b6:89:
0d:10:14:1f:a3:f1:bd:de:68:24:1d:ed:02:65:2c:3e:e9:37:
b5:fe:51:8d:d0:df:c5:ce:17:0f:38:27:2b:13:5b:92:3f:2e:
78:11:19:c0:05:00:78:6f:4f:bb:c4:05:1c:cb:df:82:79:7a:
cf:ec:07:12:dd:f9:da:fb:a6:f9:d4:2a:69:09:b4:09:82:b4:
e8:38:db:a3:e8:e3:d8:83:ea:c7:e2:1a:54:54:c8:23:01:f1:
96:d9:c5:53:45:01:77:e7:22:54:16:21:a1:30:b4:4e:ca:00:
c5:43:b3:91:bd:73:27:cc:74:fc:cd:92:75:68:69:8b:40:ac:
02:b7:e1:fd:02:ff:36:91:e4:de:73:6d:37:b4:76:6a:b7:b7:
f5:7a:b8:a3:bd:cc:c1:31:15:51:72:17:26:b0:7a:82:bc:36:
99:e5:92:6a:b2:8f:72:2a:90:95:b2:3d:c8:c4:99:20:d7:18:
8a:ba:d1:41:21:eb:4a:de:e7:82:7a:e9:77:b4:e5:d4:8c:5e:
de:0b:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:26:39 2025 by rpki-client