Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tjvq9YURy-jowxkthUcK1uUiFY0.roa
File: Tjvq9YURy-jowxkthUcK1uUiFY0.roa (raw, json)
Hash identifier: kkSZTsjYzvj3p0D2p+H3MWUuqdDdmnf3f8qkHkjgw+g=
Subject key identifier: 4E:3B:EA:F5:85:11:CB:E8:E8:C3:19:2D:85:47:0A:D6:E5:22:15:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7F9399AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tjvq9YURy-jowxkthUcK1uUiFY0.roa
Signing time: Fri 29 Apr 2022 13:11:35 +0000
ROA not before: Fri 29 Apr 2022 13:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140379562 (0x7f9399aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 13:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e3beaf58511cbe8e8c3192d85470ad6e522158d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:39:17:ce:78:92:dc:b0:7e:37:8b:b2:e6:
56:c1:e1:5f:b0:09:21:23:e0:4e:05:1f:03:e4:90:
cc:fc:b8:0b:f0:72:ee:09:95:c8:65:82:2e:4c:3d:
c8:59:bd:a1:98:c5:ec:25:50:3a:5d:f1:e8:6c:0c:
89:e3:da:81:da:94:07:01:89:60:68:8e:e5:81:5b:
35:e4:2d:3b:e9:16:cd:55:cb:50:e3:c9:3a:dc:70:
02:03:15:31:59:98:50:3e:5c:0a:a9:54:4e:a9:66:
79:20:b8:a5:7c:bf:4c:0c:ff:76:ce:c8:cf:fe:41:
10:29:42:a9:dc:0e:b2:05:65:63:7c:3c:0e:08:9a:
54:6e:8e:49:92:8c:87:28:c8:9e:f4:9a:7d:79:49:
c6:52:a2:73:72:5e:88:fd:78:6a:47:f2:53:30:03:
c3:68:8c:f4:4e:38:35:35:91:a1:bc:ed:34:3b:1b:
ed:e8:cd:53:12:7a:8b:61:a0:f8:22:cc:1e:f5:a3:
5b:8a:fb:ca:24:34:26:80:cf:a6:fb:c6:49:37:23:
e7:b9:4e:c9:90:8e:05:7d:a8:0c:06:48:17:b7:2a:
6e:56:66:ab:cc:08:6a:55:29:8c:1d:6b:6e:b6:9b:
40:b5:3e:ec:fb:ce:d4:8e:ad:06:eb:4e:88:9c:65:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:EA:F5:85:11:CB:E8:E8:C3:19:2D:85:47:0A:D6:E5:22:15:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tjvq9YURy-jowxkthUcK1uUiFY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:5d:03:b0:50:30:88:9d:f6:31:bc:dd:e6:62:4f:ca:50:5b:
3f:bf:67:70:5c:14:b1:29:23:f0:fb:1e:0a:89:dd:18:44:57:
06:b1:08:ce:da:fd:50:4b:07:b0:f4:0b:ef:df:ad:7e:9b:10:
58:a0:6f:11:04:42:44:2a:5b:94:a4:a9:7b:32:66:8a:02:93:
57:27:79:43:83:c7:a1:db:7f:74:b9:83:16:1c:80:fa:23:df:
0f:9c:6a:ea:8d:ad:9a:31:d0:d5:cd:48:9e:e0:bd:0c:99:e3:
cb:26:02:d6:f3:bf:07:c9:2e:4e:d2:cb:88:d3:0a:20:f8:8f:
69:9f:40:2b:dd:95:0b:97:89:50:c5:0b:34:aa:29:95:c5:4e:
68:81:fc:e5:ea:c7:ce:c2:ec:65:e1:3c:93:e4:08:a3:5a:b2:
45:57:f9:30:b1:56:cf:55:1a:0d:97:f5:a2:19:c8:aa:ed:c4:
b0:49:29:c2:62:3f:9c:ba:ae:9f:80:7b:18:f1:6a:ab:49:62:
c6:8b:6e:43:da:cb:7a:17:35:09:e7:7f:48:93:23:73:5c:1d:
cb:de:35:4f:a5:58:7e:5b:f9:94:15:0c:55:ba:07:fb:7d:12:
74:76:91:c2:80:ec:27:2f:2f:e8:ae:4f:38:7b:fc:e7:cf:b0:
50:c8:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:57 2025 by rpki-client