Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tih4X-M4L3PZEBTrZNGpj_gifyQ.roa
File: Tih4X-M4L3PZEBTrZNGpj_gifyQ.roa (raw, json)
Hash identifier: M8/8ji4JIra9vd+B1l0aJD7gCx+QvX5C6RNaLOf8WVQ=
Subject key identifier: 4E:28:78:5F:E3:38:2F:73:D9:10:14:EB:64:D1:A9:8F:F8:22:7F:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1379D049DDEB5E86A2521E18CC021AEA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tih4X-M4L3PZEBTrZNGpj_gifyQ.roa
Signing time: Sun 20 Aug 2023 15:04:24 +0000
ROA not before: Sun 20 Aug 2023 15:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:1379:bd05/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:13:79:d0:49:dd:eb:5e:86:a2:52:1e:18:cc:02:1a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 15:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e28785fe3382f73d91014eb64d1a98ff8227f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:12:bd:97:75:a6:f2:91:ae:04:46:e8:80:
85:b9:43:fd:a1:d6:b8:07:d6:ca:84:59:b6:9b:79:
5f:a0:6c:0d:0d:9e:25:fa:7f:0e:3d:9b:6e:2a:6f:
8c:26:f7:86:35:ea:fe:2e:d2:8d:cf:a0:dc:3d:42:
08:54:c1:83:23:f6:d4:0e:9f:fd:fb:f4:a1:5a:71:
f1:fa:ea:d3:05:53:94:64:da:b7:24:39:85:9a:a4:
8b:63:a4:b2:34:9a:60:2c:3a:ff:96:d0:ec:6d:a1:
d8:10:99:00:53:d5:02:43:4d:00:aa:54:ed:a1:d3:
df:cd:05:98:01:f4:bc:a4:57:81:52:80:3f:d3:02:
eb:1e:f4:1b:4f:7d:a4:98:9d:67:bd:4e:59:1e:1d:
6b:ad:2e:26:0c:48:93:e4:c3:53:8f:bc:ad:6f:4c:
47:4a:98:af:ed:b9:d1:6d:20:bf:e0:ba:5c:64:f6:
32:8b:cb:93:a9:01:50:75:cb:94:92:89:53:3f:bc:
dc:0d:02:63:d3:dc:da:7f:5a:3b:0b:68:56:34:99:
68:ad:3d:e3:53:67:c8:b9:af:f1:40:ad:1e:e7:ef:
63:64:21:3f:5b:9d:af:d3:bc:39:cc:89:79:5b:db:
02:00:0d:d6:01:6c:1f:0a:ab:a3:ea:f9:25:cc:9a:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:28:78:5F:E3:38:2F:73:D9:10:14:EB:64:D1:A9:8F:F8:22:7F:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tih4X-M4L3PZEBTrZNGpj_gifyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:f4:9b:a3:c5:d3:5b:80:53:d2:21:22:a3:3f:31:ba:9f:35:
b1:2f:47:de:e1:70:6c:48:a4:a6:a1:f1:32:4b:9a:7c:e0:b3:
0f:19:5a:79:0e:73:d5:29:2f:bc:18:1d:20:10:9c:95:b2:bc:
6c:93:c2:aa:1e:66:9a:fa:68:56:a6:d8:b3:e0:d1:c2:fb:69:
2d:10:4f:46:23:6d:78:60:89:1e:ca:23:20:d5:35:73:a3:3d:
ff:70:3f:c5:ee:45:9d:31:12:e9:0a:2c:b7:2d:30:7c:c9:34:
34:05:3a:73:fe:70:d0:d3:ac:5c:36:65:31:ca:de:a9:fd:e8:
2b:13:2c:46:cb:a3:e3:03:98:ad:48:6c:b7:a1:36:39:fe:bc:
5a:76:50:76:d9:d4:cb:80:d1:40:60:e7:bc:ca:1c:ba:bb:8d:
db:7c:64:46:f2:c1:88:73:9d:fd:29:e1:50:13:3f:84:2c:81:
94:9f:ba:0c:74:a2:65:ed:67:0c:f4:d2:20:f1:44:ee:c2:0f:
0f:50:f3:76:f9:ca:1f:63:27:11:1b:93:2f:46:38:d1:09:15:
2b:55:72:2e:ba:79:be:d8:7b:41:ea:48:14:5e:7f:11:b1:7d:
5f:cb:b1:87:9f:65:c5:6c:f2:e4:9f:f1:57:7c:87:19:23:c2:
65:b2:e2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:26 2025 by rpki-client