Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tld-xn5eClZKxzPVD75GnCz_siA.roa
File: Tld-xn5eClZKxzPVD75GnCz_siA.roa (raw, json)
Hash identifier: Cdl44Dl6kcZ9J2Bm6o4rm5KacvNgINAN9CtPj8s9kO8=
Subject key identifier: 4E:57:7E:C6:7E:5E:0A:56:4A:C7:33:D5:0F:BE:46:9C:2C:FF:B2:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873427C694A32B7116C381EF9D6DE621BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tld-xn5eClZKxzPVD75GnCz_siA.roa
Signing time: Thu 30 Mar 2023 20:13:54 +0000
ROA not before: Thu 30 Mar 2023 20:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:27:c6:94:a3:2b:71:16:c3:81:ef:9d:6d:e6:21:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 20:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e577ec67e5e0a564ac733d50fbe469c2cffb220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:df:bc:e1:1d:99:28:37:56:10:31:c6:b4:
d6:4d:0a:dd:9a:16:68:74:08:47:48:13:43:f3:fc:
c1:4e:e1:52:44:89:71:3f:d2:a9:8a:7b:58:d7:0d:
c8:37:fe:83:91:6f:52:80:23:72:3d:71:26:7c:35:
ef:d4:d1:d3:3a:8f:b9:0b:c6:d3:96:8d:a1:0b:60:
96:96:5f:db:12:99:3c:d5:f0:44:b6:d7:e8:ee:e2:
0a:9e:8a:d4:f0:c7:f4:65:fa:be:f4:c1:a0:86:02:
50:20:62:3d:59:0b:20:3a:45:c1:ad:10:ff:a0:9d:
7c:31:20:c9:cb:43:1e:91:31:34:0e:d8:25:29:2f:
8c:28:e9:b8:ec:f9:ac:ff:55:98:27:68:6a:9c:0b:
7d:b2:23:99:78:5b:af:15:c8:f2:62:6d:ca:91:d7:
fa:e1:17:c3:24:32:c3:2c:f5:31:0d:4c:9e:27:88:
6a:56:7e:48:03:a6:ff:33:d1:ba:3c:35:d1:61:f6:
8a:8f:42:11:54:b7:cd:fd:fd:36:7a:ba:64:95:27:
63:cc:32:36:5e:3a:04:db:db:85:fd:f9:6a:aa:fd:
4d:13:ed:82:59:3c:19:62:0e:22:00:96:57:c6:de:
73:3d:32:91:3a:d8:2d:27:13:eb:da:ff:68:55:44:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:57:7E:C6:7E:5E:0A:56:4A:C7:33:D5:0F:BE:46:9C:2C:FF:B2:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tld-xn5eClZKxzPVD75GnCz_siA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:a7:78:20:3a:dc:12:ee:31:1e:3a:21:d2:bd:6f:79:01:39:
c8:d5:5c:04:65:99:ae:43:41:3a:ba:90:db:d7:3e:1d:47:37:
f2:d5:a5:fb:2f:70:6a:82:b6:56:f1:1c:0e:30:94:f1:f4:74:
cf:5e:a2:ad:1a:e7:d2:0d:ac:e4:4a:b3:20:82:ae:b9:e5:25:
aa:b6:e6:c7:92:ad:54:a2:29:e1:c6:21:0c:96:f6:6d:43:15:
ac:d1:62:e0:45:45:82:4c:23:49:ab:61:67:e8:8b:54:84:4e:
50:97:b8:52:dd:73:e2:34:6b:e1:44:0b:78:39:7a:a2:b3:0a:
16:2b:78:93:3d:77:2d:a3:8e:0a:a8:f4:b6:cf:2c:23:d9:12:
7d:c9:5d:4c:83:ee:1b:24:d3:5e:a5:6e:b8:be:2d:bb:ca:43:
ba:a5:07:73:d1:a6:e2:81:7b:a7:92:1e:b0:29:f7:1c:6b:b0:
f7:6c:b1:4d:42:12:20:69:f5:81:ff:45:af:79:6c:5d:7b:08:
56:c1:47:3e:e5:84:64:69:90:86:4f:91:9d:5f:fd:3d:19:b9:
4b:69:1c:38:fa:16:28:1b:67:b0:be:78:ac:ef:8a:34:e3:68:
98:fa:66:61:23:7b:33:ad:ba:c8:14:4c:af:d3:fe:0f:d9:5d:
e3:66:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:24:28 2025 by rpki-client