Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TkFB0RMLy4xLlzZYlPf4iLBIIQs.roa
File: TkFB0RMLy4xLlzZYlPf4iLBIIQs.roa (raw, json)
Hash identifier: kmWWItsygPuslcDURHdpOxyY1BrJy8rZgCykT6fh6Ao=
Subject key identifier: 4E:41:41:D1:13:0B:CB:8C:4B:97:36:58:94:F7:F8:88:B0:48:21:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C0E4F8068108DD13C987130B32DCA504
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TkFB0RMLy4xLlzZYlPf4iLBIIQs.roa
Signing time: Fri 04 Aug 2023 14:12:58 +0000
ROA not before: Fri 04 Aug 2023 14:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:e4:f8:06:81:08:dd:13:c9:87:13:0b:32:dc:a5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 14:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e4141d1130bcb8c4b97365894f7f888b048210b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:77:a7:3f:0b:4e:92:3f:dd:e6:c6:4b:af:
51:7f:fd:b9:33:d9:7b:f3:1c:6a:17:e5:4a:10:40:
4e:07:2a:b9:2f:68:16:14:89:13:7b:15:fb:cd:f8:
3f:c8:ac:00:b4:69:c5:a3:97:b0:9c:d8:ad:fa:3f:
79:47:30:a8:80:26:1e:10:ac:af:d9:b6:a1:dd:3a:
97:a6:3f:f1:cb:c6:94:0e:25:b6:ac:3c:6b:f3:aa:
68:02:18:66:77:0c:d0:b7:b4:e0:cb:43:e4:3d:f7:
0f:56:af:80:c3:63:dd:1d:84:cf:a7:b4:b4:cd:33:
50:19:ba:d5:29:88:b4:c0:d0:83:32:75:b6:49:e8:
33:09:cc:68:01:d0:10:58:d3:26:29:b6:88:bf:17:
73:59:a7:3a:31:9a:14:55:be:57:af:db:b7:27:39:
11:cf:0d:96:a2:db:41:1f:82:c5:9f:a4:30:de:72:
ec:87:7a:f3:d1:d1:73:05:ab:8a:c7:09:bf:25:d1:
54:ec:3d:8c:2b:aa:05:41:c4:0f:1f:48:63:82:e9:
b4:fd:7c:78:06:42:1a:f8:ba:cd:3e:65:5f:28:60:
9f:44:18:df:22:d3:36:12:16:b1:ab:ec:30:81:88:
7e:60:97:91:80:3b:11:d7:9e:9e:2d:da:f7:f5:42:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:41:41:D1:13:0B:CB:8C:4B:97:36:58:94:F7:F8:88:B0:48:21:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TkFB0RMLy4xLlzZYlPf4iLBIIQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:5e:0a:11:8e:e3:a6:8c:7e:1b:0d:03:ac:3a:cd:79:0f:3e:
9b:7f:11:43:cb:32:58:33:e5:c1:e9:5f:7b:4e:75:4a:92:b8:
f8:c3:6e:54:32:05:4d:1b:98:78:36:48:75:29:78:0c:b4:64:
51:30:b1:3b:0b:1b:da:ca:f7:92:af:cf:5a:59:88:db:39:57:
d9:6e:3b:aa:fe:31:3f:72:a5:0d:e9:69:88:ba:d1:17:27:d3:
7d:27:da:9a:50:ea:63:1b:da:ad:b3:6c:2a:1a:26:41:2c:04:
6a:4f:f4:28:81:78:75:5f:97:63:70:7c:de:94:08:f5:97:1b:
bf:bc:18:c3:d0:d7:42:d8:b3:8e:c3:54:71:a4:2e:6b:33:97:
8a:f0:12:4d:ed:43:0b:cf:1d:65:a0:7f:3c:71:ea:1b:d9:81:
b0:65:0a:6c:8d:11:92:b3:51:ee:91:d6:29:fc:98:e0:cb:c8:
de:6e:18:7d:5f:84:e7:64:5b:3f:6d:81:69:a8:a1:01:c1:1a:
85:49:2e:bb:f5:db:02:ff:18:a4:f1:8d:7c:60:d3:8c:f8:6f:
8e:75:f9:4d:4d:33:08:97:f5:a4:82:3f:ea:08:7f:11:43:c3:
8d:f5:ae:97:6d:94:ad:44:81:47:ca:df:a9:af:33:72:fb:d7:
47:14:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:05 2025 by rpki-client