Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TrMNKyyNS74R-ZUdm8dcb39fszw.roa
File: TrMNKyyNS74R-ZUdm8dcb39fszw.roa (raw, json)
Hash identifier: almF9Zg32fOexagK+YplT7bGmvBvGRebnaeaexdkqao=
Subject key identifier: 4E:B3:0D:2B:2C:8D:4B:BE:11:F9:95:1D:9B:C7:5C:6F:7F:5F:B3:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852F03A56AEB6B4C6EF929CA622AAE0A86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TrMNKyyNS74R-ZUdm8dcb39fszw.roa
Signing time: Tue 20 Dec 2022 10:10:46 +0000
ROA not before: Tue 20 Dec 2022 10:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:03:a5:6a:eb:6b:4c:6e:f9:29:ca:62:2a:ae:0a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 10:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4eb30d2b2c8d4bbe11f9951d9bc75c6f7f5fb33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:c5:a5:6b:aa:05:53:45:30:58:e2:f0:05:
1c:e5:ed:bc:16:59:e3:2e:a7:d5:de:b2:46:3b:0d:
85:62:25:3a:e3:bb:b9:02:e0:92:50:4a:c8:81:d6:
69:ad:85:76:26:1a:ca:72:36:8a:a9:cc:93:34:11:
8e:ff:fd:ba:82:93:bc:08:a9:2f:ac:3d:39:46:b6:
a2:dd:6f:7e:cc:da:f6:79:75:60:ed:17:8c:aa:69:
30:77:d2:b3:6a:ad:1a:c7:74:8f:ad:26:26:88:0f:
dd:c9:a1:aa:0b:9a:14:bc:8b:f6:a7:cc:28:7e:0d:
99:66:31:8c:58:5c:63:dc:9f:9a:a7:fc:76:b1:dc:
b6:aa:2d:dc:63:4e:57:5b:4e:8d:9b:dc:a6:25:35:
81:69:b1:13:a8:43:fc:26:11:79:1c:7f:35:7e:6d:
ce:53:5b:1a:50:58:e7:73:a6:f4:a7:8c:9c:88:9a:
5d:a0:ea:0e:20:5b:5b:99:fa:2a:72:d4:aa:97:1f:
41:e3:3c:85:f3:fd:f4:98:aa:b3:14:1f:46:22:c2:
7a:f8:ef:86:c2:7e:b8:b1:c7:f0:3c:c1:a5:a2:69:
f1:26:f6:f0:0b:7a:50:a3:1d:0e:fc:68:68:eb:41:
2c:9b:b6:49:08:d1:31:cc:39:07:3c:07:f4:6f:9a:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:0D:2B:2C:8D:4B:BE:11:F9:95:1D:9B:C7:5C:6F:7F:5F:B3:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TrMNKyyNS74R-ZUdm8dcb39fszw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:5d:37:1d:33:62:de:60:db:fd:ae:44:dd:52:32:a4:c6:9a:
1c:0f:24:b2:a4:53:9b:6b:10:77:6c:62:fa:70:92:c4:21:36:
5a:b7:0f:8b:24:d8:4f:04:06:a1:6c:d1:95:17:f7:9b:60:a0:
24:2e:92:0a:a7:e1:53:83:44:a5:ad:23:9f:92:8b:79:94:70:
91:6b:84:37:7e:62:2b:f9:bd:8e:22:17:48:4d:a4:a8:9c:12:
73:18:c5:46:e2:b7:fb:24:c4:3e:e5:ff:32:78:b0:bb:a1:0b:
9e:a6:e2:3c:20:34:f1:60:57:3f:ee:ce:c6:41:28:93:30:3f:
7c:d2:98:1c:fb:8e:27:ed:1e:32:53:32:17:17:ec:e8:59:33:
c7:bf:b3:f4:1b:e5:8c:9b:52:da:a4:52:1b:a9:4a:c8:d2:af:
33:ee:f7:c8:61:3b:77:f8:6e:36:d2:28:b4:4a:ff:bc:d0:18:
23:22:e9:57:82:e0:09:a9:bb:ce:c0:67:a8:dd:4f:19:b6:02:
fc:fe:94:84:b5:28:ae:da:f6:8d:36:a0:23:b1:9b:37:80:19:
4a:7f:35:5e:ae:39:5c:10:50:df:30:47:27:4a:c5:db:3e:6f:
fc:a6:e2:b1:f9:83:81:5d:8d:e7:dd:9b:24:26:11:5a:d7:ea:
7e:55:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:24:02 2025 by rpki-client