Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TdwcVokU2DkRAAiiS0Tqoi8dA28.roa
File: TdwcVokU2DkRAAiiS0Tqoi8dA28.roa (raw, json)
Hash identifier: +wGX72u4LvflYmKC7C68CfiGI3S6sR0fMHJAh8/xiNA=
Subject key identifier: 4D:DC:1C:56:89:14:D8:39:11:00:08:A2:4B:44:EA:A2:2F:1D:03:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FE1495C3893E1F8FCBC72A9B5DC570A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TdwcVokU2DkRAAiiS0Tqoi8dA28.roa
Signing time: Mon 20 Mar 2023 08:13:27 +0000
ROA not before: Mon 20 Mar 2023 08:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:14:95:c3:89:3e:1f:8f:cb:c7:2a:9b:5d:c5:70:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 08:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ddc1c568914d839110008a24b44eaa22f1d036f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:e0:8e:1b:9b:34:cf:60:1f:c9:f7:4d:1b:
9b:b6:70:1b:7e:a2:33:d7:a2:82:3d:69:2d:45:a5:
24:c8:41:45:cf:2b:12:35:cc:e9:4d:e8:59:de:7d:
18:55:6b:42:cb:c5:b7:bf:72:2f:4e:5a:02:c3:dd:
17:7d:3c:06:5f:44:6e:77:a1:fb:55:3e:4f:50:72:
d8:51:89:b1:f1:0e:8b:3b:e2:4e:23:fd:14:a2:80:
4d:57:07:49:e9:88:a1:51:4f:60:f2:64:d6:fe:b3:
ad:bf:71:50:81:0b:bd:b9:70:d0:b4:08:d8:fb:59:
8e:5b:05:a1:5e:70:f4:01:35:d8:4d:3f:1e:31:d9:
1b:9d:d6:dc:f1:bc:59:b0:68:89:ff:82:45:5c:d8:
37:98:9b:0b:b6:6e:b9:2a:90:f0:14:1b:96:9f:dc:
e3:d7:76:df:6f:b1:17:a6:51:78:43:89:aa:8b:5c:
60:63:86:41:25:00:a1:0e:18:33:26:c6:7b:af:fd:
20:c8:e8:44:cc:40:b2:d2:c5:8a:6b:d6:6e:8d:38:
86:f1:bc:1e:93:0e:c2:55:94:45:b0:d3:a1:6b:70:
37:9a:f7:77:1d:ee:44:b1:ef:02:c9:14:48:9c:5b:
29:32:d8:68:31:72:7d:41:ed:07:eb:85:d6:d4:ec:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DC:1C:56:89:14:D8:39:11:00:08:A2:4B:44:EA:A2:2F:1D:03:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TdwcVokU2DkRAAiiS0Tqoi8dA28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:16:2d:f9:e8:74:08:fc:8a:bd:17:0b:48:03:2d:c9:94:33:
2b:0e:26:70:18:e4:f6:39:8c:f7:38:59:2f:13:65:ae:e1:f3:
ed:e3:bd:4a:79:ab:49:40:e7:f7:b5:e1:1f:bb:db:58:bc:1e:
56:1b:d6:4e:6b:ea:85:f3:01:34:e6:d2:6b:b3:99:32:7d:bb:
c2:4d:c1:fb:93:cd:10:eb:1b:42:40:c4:ac:03:06:42:a2:b9:
bc:c1:57:08:a7:24:c7:8c:c3:a5:28:d4:4e:72:ba:af:d8:6a:
0c:13:06:19:c0:6b:c9:07:61:fb:a2:5b:d0:29:85:c3:f8:c5:
97:c7:8a:49:23:73:13:12:ad:d1:d3:24:d7:9f:82:69:c2:1a:
d8:c4:8e:de:84:75:77:37:d8:ef:ed:95:89:c6:6a:a4:0c:d2:
7c:10:d8:a7:30:c0:f4:44:0a:7e:5c:c6:cc:91:10:40:51:49:
ba:26:b7:36:cf:36:5f:42:a4:39:4b:9c:da:a9:21:98:8a:43:
74:31:b8:9f:48:e3:e1:74:d1:1e:82:a6:64:c6:31:f2:ba:1c:
32:3a:0f:d0:7f:e4:88:e1:35:06:f3:5f:e3:08:1e:af:56:ef:
5c:4a:a3:40:48:dc:3b:f2:ff:48:78:1c:aa:66:3a:af:da:a9:
5f:c0:d2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:45 2025 by rpki-client