Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Twx0qGvpSRH8nIb8HW39y5IvZuM.roa
File: Twx0qGvpSRH8nIb8HW39y5IvZuM.roa (raw, json)
Hash identifier: D0CZiCzYA6qKnYby2Nhkeob+8pIFlwspKqELQOv54kE=
Subject key identifier: 4F:0C:74:A8:6B:E9:49:11:FC:9C:86:FC:1D:6D:FD:CB:92:2F:66:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D7B8CF5B3782A3850E8B48F281ED2FBB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Twx0qGvpSRH8nIb8HW39y5IvZuM.roa
Signing time: Fri 26 Aug 2022 01:16:29 +0000
ROA not before: Fri 26 Aug 2022 01:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d7:b8:cf:5b:37:82:a3:85:0e:8b:48:f2:81:ed:2f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 01:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f0c74a86be94911fc9c86fc1d6dfdcb922f66e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:92:8c:25:a7:9c:21:38:b8:d2:5a:82:34:
7e:65:2d:82:31:0b:73:eb:72:c2:27:c2:6d:f1:90:
f9:63:8f:fb:87:f9:ec:2e:4c:0b:0c:80:66:9a:eb:
6a:12:b4:b7:d9:0d:8b:d8:58:e2:53:40:0a:71:98:
fc:78:65:e0:03:65:15:ab:94:ca:b9:eb:94:aa:c4:
34:13:d3:c4:02:73:d4:1b:2b:08:e5:46:a5:6e:80:
d1:d6:6c:49:c4:c9:6c:3d:e8:2e:f2:14:8f:f1:54:
53:de:c5:8e:4a:09:99:12:36:07:e2:ee:a8:bb:90:
59:6a:8b:e1:3c:b4:0b:a1:7c:46:44:c3:d9:32:56:
b7:f4:13:66:b9:05:2b:8f:e1:9d:8d:fc:e2:18:c6:
4d:0e:58:77:15:01:d3:21:f7:3f:f7:2e:46:41:39:
bc:7d:1a:83:10:43:a3:5e:64:24:41:29:8d:2d:ee:
b8:d2:99:b8:bf:c1:5b:a3:87:91:f4:d7:fc:31:72:
de:24:61:4b:62:a9:43:79:70:4e:e8:41:9b:19:81:
21:57:f8:05:15:2a:b0:7e:8e:12:88:f2:dd:67:a0:
cc:5a:f3:f6:62:58:94:0f:77:15:25:46:12:46:fc:
68:f9:6f:df:7f:0b:05:70:cc:0d:3e:a6:dd:23:e0:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0C:74:A8:6B:E9:49:11:FC:9C:86:FC:1D:6D:FD:CB:92:2F:66:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Twx0qGvpSRH8nIb8HW39y5IvZuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:d5:1c:4d:64:8e:5d:12:19:fd:55:50:1f:5c:eb:9c:8f:f3:
14:39:33:2e:fd:c0:1e:b0:77:56:1f:1d:89:ff:63:b5:44:26:
a4:7f:97:27:61:1a:fc:5f:8d:eb:f4:64:f8:6f:72:ee:75:80:
dc:d4:c3:94:3d:cb:b1:8d:9b:ab:aa:12:be:75:5b:b3:b8:0f:
57:f5:e5:1c:db:00:a4:81:f9:f0:9a:f5:da:8b:8a:b3:ad:c8:
4a:50:42:90:c4:7c:60:87:d8:49:de:8a:6e:a1:07:be:db:16:
22:4a:2b:fe:5e:2b:38:46:ba:e5:73:f4:c0:ef:f0:a8:fa:ee:
a5:bd:01:3f:87:c9:15:a9:64:81:59:1f:45:86:0a:bc:7d:b8:
32:45:e3:6f:64:59:9c:b6:a8:8c:f8:b6:3b:07:37:99:f1:c7:
62:76:e9:3e:14:30:1b:4d:40:95:be:4c:60:04:ef:7c:a6:f2:
95:e6:38:17:36:42:96:b8:44:49:ec:cd:d9:6b:bd:57:1c:05:
9e:2e:bd:14:3d:5f:5f:96:8f:4b:04:d2:27:e6:b3:03:af:bb:
b2:34:7a:5b:72:9d:54:6a:0c:05:cc:f9:b6:d5:12:1b:95:f0:
1c:02:57:c4:44:76:11:18:b0:f5:f5:34:57:ab:c6:d7:b5:fa:
b2:ac:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:00 2025 by rpki-client