Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TeYX7PuMjS7W_uFXskotX3sR-KU.roa
File: TeYX7PuMjS7W_uFXskotX3sR-KU.roa (raw, json)
Hash identifier: T7ZBG7mtXPZl2shHzkWtI/R8b5Jn7Zxq1qoa9HDtcSk=
Subject key identifier: 4D:E6:17:EC:FB:8C:8D:2E:D6:FE:E1:57:B2:4A:2D:5F:7B:11:F8:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E94B5565C769A6C19F6534E8F6E90E09
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TeYX7PuMjS7W_uFXskotX3sR-KU.roa
Signing time: Tue 18 Oct 2022 04:12:51 +0000
ROA not before: Tue 18 Oct 2022 04:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:4b:55:65:c7:69:a6:c1:9f:65:34:e8:f6:e9:0e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 18 04:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4de617ecfb8c8d2ed6fee157b24a2d5f7b11f8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:23:3c:c7:ba:13:3b:55:9b:ff:66:0b:cc:
8c:42:ea:f7:60:09:bd:4b:04:e3:2d:b5:e0:59:5c:
70:e0:6b:ed:67:c5:b1:12:c5:0b:dd:cf:4d:41:62:
84:37:6a:83:e4:7c:45:f4:d1:fc:af:ff:ef:da:a5:
5d:e2:9d:0a:ab:c6:b8:ff:c5:13:55:f2:d0:79:75:
da:03:27:69:93:bd:78:e9:2e:2a:c2:d2:98:52:33:
f6:bc:76:85:51:6d:d5:fd:1a:7e:93:c0:53:dc:b5:
58:0a:b1:6d:46:a8:8b:6c:97:97:30:b8:c9:dd:50:
cb:0a:ed:0d:3f:7c:57:fe:19:a2:e7:77:04:68:37:
e0:5e:16:29:42:aa:a0:f9:c0:21:00:30:51:58:c5:
9d:0a:29:9b:2b:e4:91:0c:5d:c5:0f:f2:e4:b0:64:
ce:37:51:28:74:80:41:d6:0e:b7:e3:c8:e3:6e:2a:
e1:af:32:42:e0:55:7f:2d:85:f0:93:ef:c6:3d:09:
3c:35:7a:3b:ff:f5:c0:81:b7:87:d1:68:6b:3f:30:
7f:04:2b:53:6a:78:ab:5e:d5:33:c1:5b:d1:4d:82:
f0:75:a7:4f:b4:17:89:ea:29:c8:6b:2d:d6:ba:4c:
4a:37:03:b2:0a:4b:33:49:90:15:bd:6b:b9:47:8a:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E6:17:EC:FB:8C:8D:2E:D6:FE:E1:57:B2:4A:2D:5F:7B:11:F8:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TeYX7PuMjS7W_uFXskotX3sR-KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:18:73:71:f4:c1:5e:34:3c:c0:2a:9c:69:d8:62:77:62:b8:
89:9d:af:cb:4e:87:2c:8f:06:c0:f4:2c:7e:85:e1:28:a6:cd:
35:5b:27:04:57:85:c2:51:98:50:5e:c5:49:18:c3:87:13:d3:
a0:9c:7d:48:ef:ca:5c:0f:d6:19:6b:ae:30:0e:ea:84:ec:3d:
af:c8:d6:ba:f1:3d:2f:73:74:b1:99:eb:29:61:eb:70:6e:77:
3c:f6:f0:1d:80:16:ae:f3:dd:44:1b:7a:72:84:4d:fd:22:b9:
a2:3c:98:63:83:22:01:3e:ff:88:5a:45:09:59:19:c0:16:41:
7b:3c:c7:07:8c:31:1f:85:bf:56:6d:8e:86:03:1b:fd:b6:b2:
8c:32:1f:08:81:1c:f7:66:09:55:6f:5b:6c:ce:fd:98:8c:07:
10:34:f1:3c:9b:c9:c0:a8:6e:14:88:5d:49:78:ce:8e:d7:0d:
46:8d:ef:74:ef:28:a9:b4:ad:cb:de:f2:19:2b:86:18:a2:e6:
64:81:03:08:32:b5:81:cf:b4:36:56:f2:02:3a:aa:42:07:d9:
54:43:6d:41:ab:29:ff:14:e8:3f:e9:64:69:94:99:d6:a7:8d:
37:78:ca:40:5a:9c:90:32:02:75:9f:fd:ae:46:7e:e0:06:1e:
74:a3:59:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:29 2025 by rpki-client