Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tw7JLwAIELRjLZ9Qk9utV6YaZzw.roa
File: Tw7JLwAIELRjLZ9Qk9utV6YaZzw.roa (raw, json)
Hash identifier: xiVKdmf1pfm+3Ffa6lQAGmL9AIi83zpA5rCd1N2ZKxg=
Subject key identifier: 4F:0E:C9:2F:00:08:10:B4:63:2D:9F:50:93:DB:AD:57:A6:1A:67:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182DB26CD3ECFF8E69C4DB9A807C3233772
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tw7JLwAIELRjLZ9Qk9utV6YaZzw.roa
Signing time: Fri 26 Aug 2022 17:15:29 +0000
ROA not before: Fri 26 Aug 2022 17:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:db:26:cd:3e:cf:f8:e6:9c:4d:b9:a8:07:c3:23:37:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 17:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f0ec92f000810b4632d9f5093dbad57a61a673c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:a6:01:01:b1:fc:1f:d3:49:97:f4:6f:42:
d1:e7:28:9f:15:6a:a2:14:46:e1:e9:db:66:06:99:
8a:bf:82:09:c2:df:bf:0b:9d:31:f0:08:82:52:b5:
9e:05:fe:b8:bc:7c:dc:aa:5b:57:4b:8d:dd:d0:63:
89:16:97:10:25:a8:6e:c6:9b:ef:3e:ad:11:66:f8:
fd:70:59:79:b4:f2:8c:eb:fd:fa:a0:3b:4a:ff:2e:
a0:4f:17:6b:28:57:75:58:fb:af:4b:f8:af:7d:29:
75:08:03:cf:34:c9:96:6e:70:83:07:5d:1a:fc:bd:
09:09:2b:60:36:bb:c4:76:e4:91:29:0b:27:18:d1:
20:6f:64:a0:8f:12:a6:84:4d:18:3c:e7:a3:31:83:
43:03:91:fd:cc:c5:3f:79:c0:3a:60:2d:63:30:6a:
3c:89:82:9d:8e:bf:35:43:33:7f:76:a0:4d:81:d5:
2a:ab:e4:f2:02:9e:0c:6b:97:4a:7a:a5:f6:56:fb:
4d:12:81:75:78:03:05:41:0a:26:c3:14:4e:8e:8b:
c7:8c:45:ab:02:8a:5d:f0:46:ca:c3:64:92:c6:dc:
08:94:e1:60:49:3f:4d:74:41:51:84:ee:f8:c7:2e:
2b:b4:0f:be:5d:f8:45:05:be:5b:6a:fb:92:0e:c6:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0E:C9:2F:00:08:10:B4:63:2D:9F:50:93:DB:AD:57:A6:1A:67:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tw7JLwAIELRjLZ9Qk9utV6YaZzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:61:57:2b:6f:a4:6c:0a:00:42:92:cf:d8:59:3f:f9:28:04:
42:f4:22:84:6c:a3:24:71:c1:f3:5a:ab:92:80:a1:14:25:db:
34:bc:01:89:83:ae:ac:b7:3d:0f:8f:3e:96:86:ff:84:cf:fd:
13:a1:b5:cc:58:99:95:0d:ac:2b:cd:63:e2:8e:7f:b2:ad:28:
de:99:fa:d2:d7:7d:cd:db:05:22:4d:a3:2d:a6:3a:4d:31:a2:
26:a8:b9:18:15:b0:87:ce:ba:10:73:14:c3:36:ea:65:4c:76:
a9:cf:31:fc:1a:fe:48:f0:fd:f8:62:9e:bf:03:cf:68:5b:ca:
44:f1:dc:46:f5:38:63:73:6c:b2:5f:8e:51:96:ce:35:b5:11:
92:56:f7:96:5f:62:3e:53:87:15:37:9d:a9:73:92:1e:00:bc:
c1:d5:90:83:ff:e0:9f:a2:6c:59:18:e8:20:a3:93:96:fe:a0:
31:f4:ea:c3:28:63:3d:df:b6:63:fe:31:6f:52:2c:90:59:83:
4c:a5:0e:54:1b:ea:bc:c2:72:62:87:2a:8d:77:8d:cc:1e:a3:
e1:76:f2:ee:e3:ed:44:08:21:4f:77:38:5e:db:0d:a5:75:9f:
c4:d7:3f:5f:ac:bc:f8:ee:1e:f2:63:e0:b7:a2:2f:cb:6f:7f:
e6:4b:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:31:57 2025 by rpki-client