Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tt9eNLhW3iT84AIHV1G7t1q-Iy8.roa
File: Tt9eNLhW3iT84AIHV1G7t1q-Iy8.roa (raw, json)
Hash identifier: 3QUN/ksw96OCP1OMB4Kv9r0/4psOSw4hLQxjDpPdA1o=
Subject key identifier: 4E:DF:5E:34:B8:56:DE:24:FC:E0:02:07:57:51:BB:B7:5A:BE:23:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186699414C6EA57B3A2A55FA7986DB66B5E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tt9eNLhW3iT84AIHV1G7t1q-Iy8.roa
Signing time: Sun 19 Feb 2023 12:09:17 +0000
ROA not before: Sun 19 Feb 2023 12:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:69:94:14:c6:ea:57:b3:a2:a5:5f:a7:98:6d:b6:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 12:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4edf5e34b856de24fce002075751bbb75abe232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:88:a3:d3:fa:81:21:9a:78:1c:23:9a:1f:
5b:99:39:86:e5:5e:a7:4a:01:83:7a:0a:77:81:5d:
b1:5c:45:6e:60:43:4e:fa:25:3c:60:06:ea:9f:57:
2e:7f:52:99:92:36:fd:a3:40:4c:ff:5c:2e:7b:66:
cc:9a:31:7b:77:28:20:22:74:36:7b:b9:41:c1:db:
0e:0c:cc:ad:1a:02:dd:44:a6:57:12:c1:b8:ba:3b:
28:f2:60:34:9c:99:cf:4f:c1:a0:8d:4d:e1:38:c9:
fa:c9:46:a5:51:19:5c:c2:3f:06:63:a6:04:08:b8:
3b:d2:88:e8:bd:45:46:ab:25:ef:d8:6b:04:cc:49:
0f:74:57:46:8c:d2:09:e4:3a:fc:a2:28:81:7e:6d:
f6:db:04:8a:48:c7:fe:d4:cf:97:b8:8c:e4:9d:18:
a3:2a:5e:4a:bd:2f:b0:eb:9b:f0:d5:32:54:39:5b:
f9:4b:38:47:ba:14:e9:dd:27:30:4e:12:f8:4d:e1:
7e:cb:0d:50:90:64:ef:63:5d:86:e3:31:01:45:88:
6f:49:0e:5e:68:d7:2c:87:f7:a4:aa:10:f8:38:6c:
cc:37:ef:97:9d:b5:1d:81:1f:98:27:0b:28:9f:cf:
32:57:33:41:73:46:58:54:19:d2:f1:b8:ba:f7:9d:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DF:5E:34:B8:56:DE:24:FC:E0:02:07:57:51:BB:B7:5A:BE:23:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tt9eNLhW3iT84AIHV1G7t1q-Iy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:2d:c8:cc:5d:aa:f7:77:39:bd:7a:98:23:e0:66:b5:3f:87:
0d:dd:1f:58:b0:52:a3:6a:0e:b5:1b:2d:80:aa:fd:5b:50:d4:
f4:37:eb:2c:f8:d5:83:34:5a:07:74:1a:4e:53:9e:4e:a6:61:
1f:9f:02:48:74:09:7e:eb:3f:81:c8:5f:2e:fa:c6:3e:bb:8d:
58:0f:53:b1:8e:d9:6f:b4:ef:40:e0:c1:3d:a8:1e:d5:ce:83:
9b:bf:18:c7:f6:1d:06:6e:a8:aa:e8:70:54:0f:80:8a:7c:be:
a0:bb:67:3c:e9:d1:fa:52:38:00:06:24:54:08:22:1b:bd:32:
ce:28:d6:ac:b4:83:97:2d:39:6e:9d:a4:fa:54:47:14:5a:ee:
e1:fd:95:fc:f6:df:d6:51:96:5b:a7:5f:b8:de:98:af:bb:8a:
e5:b9:ec:fb:3e:17:5f:0d:85:94:f0:64:42:f8:0f:a3:35:57:
02:93:ab:56:e2:be:a3:8d:3e:e1:89:45:d9:10:29:d4:57:b1:
8d:84:db:81:40:b6:e2:64:48:e1:a5:2c:d4:3a:a0:fc:fc:f8:
35:39:fe:89:68:4e:76:96:19:b0:ee:ed:af:60:7a:2e:4c:fe:
f0:e9:ae:b0:7f:60:64:b8:90:38:0b:2f:b7:59:fe:49:93:d7:
5f:0f:1d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:03:20 2025 by rpki-client