Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TrireWh35nLVWMw5gyuPK2qbnSc.roa
File: TrireWh35nLVWMw5gyuPK2qbnSc.roa (raw, json)
Hash identifier: miEeippA8TwsXInF4JC7UUGV3CuMP4ZzcEKGJOHaXAo=
Subject key identifier: 4E:B8:AB:79:68:77:E6:72:D5:58:CC:39:83:2B:8F:2B:6A:9B:9D:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018835007EA3A9944B35AA9775EC694573A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TrireWh35nLVWMw5gyuPK2qbnSc.roa
Signing time: Fri 19 May 2023 17:13:24 +0000
ROA not before: Fri 19 May 2023 17:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:00:7e:a3:a9:94:4b:35:aa:97:75:ec:69:45:73:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 17:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb8ab796877e672d558cc39832b8f2b6a9b9d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:76:d1:7c:bd:38:70:55:0d:3f:a1:2b:ea:
13:37:64:a9:0b:0e:33:6e:d9:cf:41:3f:e7:7d:e4:
16:10:88:6e:0e:f3:e7:c3:d0:c6:4c:92:0c:87:70:
88:97:9d:80:1a:fc:48:31:de:8b:6d:c0:c2:8e:a8:
79:5e:7f:a0:31:c0:c6:98:8e:6e:35:56:1c:ec:06:
9e:ca:83:dd:cf:a9:cd:6d:a5:d6:90:6a:e4:f9:58:
c9:12:db:3e:fd:c3:41:2b:1d:73:da:16:cb:6e:65:
8a:f9:e6:1e:34:e2:7c:58:22:5a:ef:a4:09:72:66:
54:4f:60:cd:3b:af:8d:af:4a:f0:88:0f:87:67:4b:
f2:3e:cc:84:4a:49:42:30:5a:2b:03:66:32:4e:52:
2f:08:13:e7:cf:f9:3e:9f:ab:cc:14:7f:8c:75:5c:
b2:3c:b0:26:44:83:05:0e:39:9d:39:84:b3:f4:f7:
6a:18:e3:98:6a:98:27:1a:27:e9:11:be:24:b7:9b:
43:12:14:36:7d:a3:32:f6:07:0b:ab:4b:0b:d6:fc:
0c:ec:f0:ae:c3:ae:07:7a:df:ab:a2:4a:8b:ee:00:
bb:3a:99:f2:7f:3f:d7:b5:b0:38:e6:bd:29:14:4b:
e9:e6:ae:96:3d:c4:cb:88:2c:a1:4d:88:7b:f1:75:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B8:AB:79:68:77:E6:72:D5:58:CC:39:83:2B:8F:2B:6A:9B:9D:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TrireWh35nLVWMw5gyuPK2qbnSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:6e:2b:b4:d1:03:be:bb:15:da:ad:03:95:35:59:d1:ec:c3:
af:e7:22:8d:08:de:06:d5:c6:4e:d7:13:a5:78:f7:3a:86:d7:
d0:3b:33:3c:cb:9d:21:e0:b7:a5:38:cd:e1:f1:3e:20:93:4f:
e2:c4:60:ea:4c:d2:0f:2e:07:e0:ab:bf:11:b0:bb:aa:33:e3:
a9:ea:48:68:d6:fd:48:dc:75:61:d9:92:9e:bc:4d:ea:6f:05:
19:b3:39:28:24:e0:2d:bd:8c:a3:fe:ac:c3:6f:6f:d3:99:0b:
33:85:9a:18:96:93:3d:e0:85:91:5b:21:f2:be:3c:a5:e2:ea:
0f:b7:d3:56:70:07:b7:1b:cf:1c:3a:b0:73:08:c7:2d:74:66:
eb:c3:b8:82:e3:1a:be:0b:dd:9b:8d:e9:91:df:19:74:e6:54:
f8:23:4b:60:34:21:bb:5f:9d:b8:4f:94:d7:5c:32:27:77:6a:
83:d0:cf:b4:ca:50:4f:59:3b:4e:19:54:55:a5:9b:72:4e:47:
8f:90:a0:de:18:27:b4:5b:09:55:8e:c3:c3:1c:63:80:14:65:
20:38:b1:eb:46:b1:e5:49:15:04:28:90:a3:ec:e0:c5:d8:fc:
73:f4:69:08:fc:5c:e1:6c:56:1e:2f:eb:57:fe:97:fc:4e:83:
79:d0:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:24 2025 by rpki-client