Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tjkp7agaJZ_XJtTxkm-2yoxlJDY.roa
File: Tjkp7agaJZ_XJtTxkm-2yoxlJDY.roa (raw, json)
Hash identifier: FeK4eZr3vKzxIcWCp61mS/3D8kNESXgklCOgx9vhBi4=
Subject key identifier: 4E:39:29:ED:A8:1A:25:9F:D7:26:D4:F1:92:6F:B6:CA:8C:65:24:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867F44BFBB9AC127ADD35F3A9B6EA947C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tjkp7agaJZ_XJtTxkm-2yoxlJDY.roa
Signing time: Thu 23 Feb 2023 17:14:17 +0000
ROA not before: Thu 23 Feb 2023 17:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:44:bf:bb:9a:c1:27:ad:d3:5f:3a:9b:6e:a9:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 17:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e3929eda81a259fd726d4f1926fb6ca8c652436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:92:18:8d:ee:a0:de:a2:f7:65:bc:87:25:
2b:1c:ce:43:4f:df:d4:ce:7a:c0:34:fd:47:a5:fc:
33:04:28:f1:27:2e:ae:4d:1e:17:44:d6:ba:d9:28:
22:64:37:09:6c:5e:23:95:40:c3:2f:02:c5:f0:b4:
e1:61:cf:6f:83:6d:a5:8a:c2:ce:24:2c:d8:ee:ab:
f4:e0:25:04:8f:34:1d:b3:39:a9:4d:30:b8:af:af:
15:ca:3f:03:f6:e8:d8:0c:0f:c9:21:f8:4b:6e:f4:
74:2e:e6:b5:93:93:30:b5:ee:80:65:93:2b:d4:c0:
d6:15:2c:f8:24:f2:a2:87:4c:9d:2f:8a:8a:e7:42:
b5:ae:7a:72:15:b7:c7:13:07:02:4c:0c:16:11:a2:
a0:55:c8:b1:6e:61:8b:1e:29:b8:b7:9b:7c:7a:de:
ef:03:b0:48:6a:8f:8b:f1:34:fc:2a:04:6d:68:60:
0a:db:a0:30:40:9d:3d:62:c0:c4:a5:52:8e:40:8e:
2f:3c:9f:c7:40:ca:f6:2c:58:45:f4:0c:e5:60:5b:
18:6a:9a:02:d6:d0:28:32:07:90:54:ab:5e:35:7e:
65:a6:b9:75:5c:1d:e8:25:58:89:ed:4d:71:bd:0a:
66:51:35:e2:aa:12:ab:f4:f2:0d:63:14:6f:fa:9e:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:39:29:ED:A8:1A:25:9F:D7:26:D4:F1:92:6F:B6:CA:8C:65:24:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tjkp7agaJZ_XJtTxkm-2yoxlJDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:64:b9:a1:b8:8c:59:44:e4:60:3f:c8:6e:25:09:16:29:ef:
63:39:ef:7a:f4:3b:72:e5:4d:45:19:d6:10:08:30:51:0a:d1:
b3:64:a7:ca:09:28:4f:d2:62:0e:87:1e:54:54:d0:93:07:71:
40:c1:b1:5a:79:c2:96:0e:02:04:18:5f:2d:f8:3f:b3:3d:56:
f0:78:d3:bc:12:dc:81:cc:93:66:e8:ab:09:77:73:f1:1a:d2:
cf:1d:58:e9:43:28:3e:8b:93:2b:77:f7:18:c4:b4:b7:cd:6d:
97:bf:e0:65:f8:27:fb:d8:b1:91:66:a3:86:a5:ad:25:8b:57:
31:e2:cd:bc:2a:f2:ba:cb:26:24:c7:f9:0c:21:21:7f:f8:bc:
87:f6:96:68:07:3a:88:8b:53:6e:7b:c1:f2:d7:47:36:48:f9:
d6:eb:17:54:49:6f:3a:73:55:2d:53:c3:6a:c0:7e:8a:02:93:
35:72:2f:6e:1c:3d:12:55:37:cd:b7:0e:15:fb:34:29:b9:42:
cf:c3:46:f4:9e:dc:a6:bc:17:48:1e:f2:f1:20:16:23:78:17:
99:63:63:87:6a:02:d0:81:a9:b6:2b:ab:3b:2b:db:84:31:42:
49:d9:8f:8a:73:5b:33:58:f1:d6:b1:49:8c:b4:f7:bf:f3:80:
12:7e:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:25:21 2025 by rpki-client