Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TmzlFuwi6G6BNSULoFqujYwe1IY.roa
File: TmzlFuwi6G6BNSULoFqujYwe1IY.roa (raw, json)
Hash identifier: teNVc/AsWCjm+NTdPAKesRgN7zciVRZWKCCTUy66naI=
Subject key identifier: 4E:6C:E5:16:EC:22:E8:6E:81:35:25:0B:A0:5A:AE:8D:8C:1E:D4:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01849C3EDF0908CD8AB87E415EB9850DE351
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TmzlFuwi6G6BNSULoFqujYwe1IY.roa
Signing time: Mon 21 Nov 2022 22:11:16 +0000
ROA not before: Mon 21 Nov 2022 22:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:3e:df:09:08:cd:8a:b8:7e:41:5e:b9:85:0d:e3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 21 22:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e6ce516ec22e86e8135250ba05aae8d8c1ed486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:28:4e:bc:0b:eb:77:15:24:96:9b:00:73:
d4:12:3a:2c:0f:99:57:f6:69:20:08:ba:e1:46:c0:
01:6d:5a:ed:87:0c:0d:8f:f0:f7:a9:d2:52:7d:47:
46:43:45:fa:80:50:aa:11:8d:2f:6f:c1:67:94:b0:
d3:b1:b6:61:32:31:86:83:96:f1:7b:fc:d0:4a:77:
b1:ab:48:cb:e2:63:0c:21:7f:39:9b:b2:30:89:2c:
78:3e:7e:58:25:f6:8c:a5:6b:52:61:e6:6d:d3:98:
6c:30:23:39:c2:72:75:98:eb:4c:a0:af:65:51:d6:
e2:e6:e9:3f:15:63:ab:7e:10:b0:47:c5:80:59:d4:
ae:64:17:9a:75:00:94:06:71:79:fd:83:52:9f:43:
3e:b6:81:9b:7d:38:2b:f4:20:af:6e:05:ab:f6:e5:
57:45:06:64:6f:50:eb:52:29:0c:b5:2e:b2:96:8b:
43:8a:c0:86:07:15:7c:da:79:98:ea:b9:45:61:74:
41:3f:88:2c:02:ef:fb:53:97:1e:ef:9d:2d:66:d8:
70:31:f0:a4:5f:07:8d:f6:b7:a1:aa:81:ad:e3:fc:
15:ca:e1:65:c2:85:d8:01:c3:4d:63:34:ba:87:7e:
85:76:e6:ee:62:7f:bf:8a:a9:aa:00:a5:0c:57:cb:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:E5:16:EC:22:E8:6E:81:35:25:0B:A0:5A:AE:8D:8C:1E:D4:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TmzlFuwi6G6BNSULoFqujYwe1IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:14:51:b7:60:87:95:c1:f9:2f:2b:8c:12:da:fa:98:9c:d1:
f4:16:eb:9f:7e:3b:42:57:8a:f0:75:d6:69:22:b7:f9:19:cd:
b6:4d:df:a6:a1:ef:57:48:46:c9:50:5c:3c:1e:78:f6:f4:04:
c6:6d:ec:5e:bb:fb:6c:77:67:a3:4a:00:2e:5a:51:a4:f4:26:
f5:56:d7:9c:4f:1e:ce:a4:90:45:1d:bc:7d:39:44:31:53:d2:
cd:0e:31:63:bf:86:61:15:9c:18:63:95:19:30:2d:80:fb:59:
d2:22:3f:27:3d:c2:a7:0b:52:8f:dd:b0:82:26:f0:ce:b1:c9:
02:69:0e:cb:d2:31:c8:b2:01:5e:17:de:18:9b:55:bf:9f:ab:
26:53:d5:03:d6:45:f2:25:9b:37:e2:a1:9b:db:2f:75:77:00:
65:f7:28:8d:29:6f:aa:e6:e8:87:4c:01:13:0b:e5:df:70:ea:
1d:77:62:49:c3:95:a9:4e:94:d9:47:b2:01:57:d5:20:89:70:
f7:67:74:7e:f3:72:2a:4f:94:db:3d:5d:26:a0:75:46:4a:15:
d9:74:66:68:95:3d:ea:9d:5c:9e:2a:60:87:9b:df:71:d0:8c:
2f:37:4e:ef:d8:ad:bd:21:e3:41:d7:13:06:98:d5:54:20:06:
9e:52:11:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:53:09 2025 by rpki-client