Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TmCm0o0R0bBv_lDpTehmfonY6Tg.roa
File: TmCm0o0R0bBv_lDpTehmfonY6Tg.roa (raw, json)
Hash identifier: GbtG7kTO0/d5EMUfQmepNKhPEx902Dsr0s8E431xgb4=
Subject key identifier: 4E:60:A6:D2:8D:11:D1:B0:6F:FE:50:E9:4D:E8:66:7E:89:D8:E9:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01830E0335CB04402FD2A316AF99B5FAAF5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TmCm0o0R0bBv_lDpTehmfonY6Tg.roa
Signing time: Mon 05 Sep 2022 14:17:14 +0000
ROA not before: Mon 05 Sep 2022 14:17:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:03:35:cb:04:40:2f:d2:a3:16:af:99:b5:fa:af:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 5 14:17:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e60a6d28d11d1b06ffe50e94de8667e89d8e938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:54:b8:12:c3:f3:d1:ca:b7:a3:f8:fc:f7:
d0:39:15:9b:42:09:d6:70:68:5c:9e:fa:28:e5:b7:
e2:ea:97:3c:75:99:2b:a2:2b:e7:44:f0:ac:eb:70:
13:cc:f5:9c:c6:c1:65:5c:ef:cc:75:a8:9a:a7:c8:
6c:ca:1d:e5:11:21:2d:a7:42:81:56:5a:e9:65:68:
db:42:d2:ba:fd:96:89:97:d3:dd:a3:4c:35:a0:1b:
33:d4:49:bc:a2:9d:ba:50:df:19:39:36:41:03:94:
67:0a:b1:c4:46:23:86:81:bc:a9:8f:25:08:ed:23:
f5:61:b3:02:4b:07:ce:5d:25:0e:5b:66:c1:6c:64:
91:88:28:e0:7c:f9:1c:99:a7:30:65:35:9e:42:22:
f8:9f:7e:60:98:84:79:02:89:5f:d5:f7:79:0d:d4:
85:16:62:c2:8d:d0:d7:4e:2a:1e:2d:dd:aa:56:d1:
56:6b:4c:f0:b9:86:de:95:9a:39:c3:04:e5:20:c4:
8c:30:d4:60:25:fe:4d:39:6d:e0:4f:bc:e8:b1:f8:
13:35:79:bf:34:0a:c5:d6:db:df:06:1e:22:97:65:
41:8d:a9:e9:85:8c:81:4c:95:1c:7a:ba:0b:3e:5f:
db:12:88:38:f1:6a:04:91:7a:67:ac:29:04:94:39:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:60:A6:D2:8D:11:D1:B0:6F:FE:50:E9:4D:E8:66:7E:89:D8:E9:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TmCm0o0R0bBv_lDpTehmfonY6Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:8f:be:18:9c:99:1f:33:01:91:83:de:6d:1e:ae:0a:3f:1f:
9b:ce:71:6c:24:b3:e3:12:a3:04:7f:7a:3c:2f:d7:9c:52:6b:
16:8b:32:58:52:80:2d:2f:a8:76:ac:a6:d6:aa:fe:4e:a1:3a:
ab:35:b3:70:25:83:9d:f8:a0:cc:bb:d1:15:c7:f4:b6:72:19:
75:16:4b:97:64:0c:aa:52:3f:a6:1d:bb:a9:8d:c7:8f:7e:f3:
b2:88:a8:a0:6a:ac:0f:a3:55:d8:04:c1:25:c9:da:20:5a:8d:
6c:a9:2e:d0:0c:20:0b:0c:d7:46:2b:18:f2:e7:24:18:e4:ab:
24:54:7e:f5:b9:0e:1e:44:ce:60:82:23:78:33:7e:f1:6f:39:
8c:46:8f:11:9a:56:52:40:b5:a6:0d:5c:16:9d:87:87:4f:fe:
ba:be:6c:4f:38:7b:20:09:e7:87:84:86:2c:af:62:99:a0:6f:
29:b0:93:8f:6f:9f:4e:a7:cf:f7:f9:b6:ae:3d:3f:02:ad:16:
76:93:bd:25:b8:4c:80:af:e1:91:7a:a0:b9:fa:b5:86:1a:20:
57:61:07:81:c0:1a:79:aa:08:dd:b0:80:4c:d2:36:79:d0:c1:
3b:34:dd:4c:a6:d3:cf:47:1b:86:5c:20:84:c2:84:f0:b4:66:
24:4d:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:51:53 2025 by rpki-client