Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TwJ17jkCfAhNNSDDokMrwn1Nqxg.roa
File: TwJ17jkCfAhNNSDDokMrwn1Nqxg.roa (raw, json)
Hash identifier: kvD5ilgw/bChrc+wlmZtqLTjKeR8E6VcJi/ePBzuK6U=
Subject key identifier: 4F:02:75:EE:39:02:7C:08:4D:35:20:C3:A2:43:2B:C2:7D:4D:AB:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D3212189CF423710061910B60928ECEB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TwJ17jkCfAhNNSDDokMrwn1Nqxg.roa
Signing time: Mon 19 Jun 2023 10:09:03 +0000
ROA not before: Mon 19 Jun 2023 10:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:21:21:89:cf:42:37:10:06:19:10:b6:09:28:ec:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 10:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f0275ee39027c084d3520c3a2432bc27d4dab18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:d7:98:e5:e9:00:6f:63:e6:f8:96:01:61:
00:59:59:a5:e3:98:f4:5b:f1:ea:81:29:99:db:ef:
28:48:2b:4a:a4:9a:23:ab:b5:9c:f7:95:5d:c5:b9:
9a:a1:8a:10:6b:d9:58:1c:67:9c:8e:e2:db:6f:57:
8d:b1:f7:54:92:22:ad:e9:9f:aa:aa:b3:1b:1b:fc:
ac:6e:a7:01:1e:f1:40:0e:78:ae:65:63:4e:7a:02:
cb:63:60:98:d5:c4:84:65:10:47:02:8b:d2:6f:0d:
66:ae:26:36:ae:86:b4:7a:21:e1:bc:99:35:99:0a:
fd:19:99:4b:4f:07:b0:12:81:8a:ff:1b:7a:a9:02:
53:1f:71:d5:41:7d:57:c4:89:fd:b9:79:cf:c1:13:
05:71:06:6e:2f:2d:4d:a4:ab:f6:ef:df:35:ed:68:
7d:e5:99:0d:e8:3b:31:32:f8:ac:68:d4:8b:85:08:
5b:11:32:5f:1f:ac:ef:f0:cf:52:b7:c0:3b:97:2e:
56:38:43:ee:6c:b6:1f:e1:2f:28:64:fd:f3:e1:03:
e2:d8:6e:88:d5:ad:06:e4:ef:c8:d0:48:7a:fc:66:
98:db:2a:7c:c8:f9:78:6b:cb:f7:9c:0a:60:64:b5:
19:b7:69:3a:ad:3b:ba:c7:b3:d2:06:c1:2f:38:5a:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:02:75:EE:39:02:7C:08:4D:35:20:C3:A2:43:2B:C2:7D:4D:AB:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TwJ17jkCfAhNNSDDokMrwn1Nqxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:51:ba:88:5a:3a:c1:96:39:56:cc:39:9f:75:03:44:f3:cf:
d4:c6:12:4c:6d:53:28:3a:f3:66:1a:4a:7c:b4:96:17:69:b4:
11:1c:5b:09:d9:01:8a:f8:19:45:35:5d:87:62:a8:2f:dd:ac:
c7:a1:27:56:6d:54:8c:df:4c:20:a7:35:6d:e5:23:38:57:b3:
64:01:e4:df:f3:f1:43:8f:a8:ce:7d:46:6a:00:f7:04:39:43:
61:81:d1:71:d0:8f:0a:24:66:79:cf:0a:d5:55:4f:94:b7:9b:
62:41:6c:93:4d:fb:f7:11:26:2a:7a:98:ca:a7:58:a4:46:36:
22:14:13:45:03:2a:b0:fc:c9:3b:08:9b:07:10:6d:27:09:40:
57:d4:7c:da:06:2a:06:0a:9f:fb:f6:f7:9d:87:37:be:d1:74:
a6:56:ef:3b:fb:d5:ac:4d:43:03:f7:48:e5:42:89:57:90:59:
af:29:97:72:ce:ff:44:ff:df:00:17:dd:8a:b0:29:65:fb:ad:
0c:7c:6b:a1:83:b2:b5:01:e5:d7:8b:10:92:bf:50:e2:a2:b0:
7d:60:43:e9:ce:81:0a:09:de:cb:f2:8e:be:cf:a4:e3:34:9c:
0a:8c:62:ef:7b:f4:17:8d:2b:86:db:b3:ef:92:55:d8:c9:e7:
41:5d:b8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:25 2025 by rpki-client