Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TySZ5D3oNF_nmtA2DfYCYK8pk4Q.roa
File: TySZ5D3oNF_nmtA2DfYCYK8pk4Q.roa (raw, json)
Hash identifier: BX/VO8JKfFallDLCTC+u1ndhJxrl2sSlBFe70D6sONE=
Subject key identifier: 4F:24:99:E4:3D:E8:34:5F:E7:9A:D0:36:0D:F6:02:60:AF:29:93:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186835A3F37F1D613D062BBEDCC2FB543C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TySZ5D3oNF_nmtA2DfYCYK8pk4Q.roa
Signing time: Fri 24 Feb 2023 12:16:15 +0000
ROA not before: Fri 24 Feb 2023 12:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:5a:3f:37:f1:d6:13:d0:62:bb:ed:cc:2f:b5:43:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 12:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2499e43de8345fe79ad0360df60260af299384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:ba:59:cb:f0:dc:55:d2:f9:53:bb:2c:99:
fc:f4:6d:53:c1:3f:cb:a2:91:df:30:47:4b:bd:b6:
4a:f1:e1:b9:37:5f:a0:1f:58:2f:ff:e5:44:85:12:
82:06:75:63:51:d3:15:a7:a2:11:65:37:03:e2:0c:
f0:bf:ad:f0:5e:32:7b:0e:b5:ac:41:ba:08:5e:76:
15:77:03:b5:ed:ad:89:80:42:38:61:68:61:4a:16:
0d:49:85:64:9f:85:73:b8:25:58:4b:7c:ba:0a:a5:
fe:39:b7:79:2e:11:91:0f:1e:3e:c1:24:27:02:a2:
16:51:56:90:6c:68:1e:f0:b0:69:83:42:a8:a2:fb:
f6:73:a6:34:92:c2:bf:68:5c:3a:09:54:b6:61:f4:
19:cd:52:de:45:b4:41:86:15:9c:d0:34:7a:ef:b4:
f2:d0:0d:73:06:37:0a:0d:02:78:fa:94:05:ba:15:
3d:0e:2a:89:a7:da:74:2f:45:f6:53:70:6a:bd:a3:
21:46:dd:6c:52:0e:ac:2a:07:56:0b:1a:c2:4d:d7:
75:ba:53:ed:0a:69:0d:8e:53:72:99:3d:73:1c:01:
c5:78:30:15:71:99:8e:52:75:2a:7d:02:b2:16:18:
e2:c0:bb:13:14:2b:5d:8b:da:70:cf:31:df:78:be:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:24:99:E4:3D:E8:34:5F:E7:9A:D0:36:0D:F6:02:60:AF:29:93:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TySZ5D3oNF_nmtA2DfYCYK8pk4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:ef:52:39:6a:01:f3:84:7b:67:0e:d9:85:91:82:19:91:33:
ea:a8:21:ac:9e:97:0d:59:98:a3:32:55:2b:4f:c7:ca:f3:c9:
27:3c:b9:c3:e4:68:76:58:ed:9a:89:e4:3f:25:99:03:a9:a2:
f6:0c:da:2e:d2:2d:65:0a:9d:ee:d5:99:69:24:c3:d0:8c:45:
7b:e0:e1:7c:5f:0f:59:36:5a:31:c6:3a:47:6d:f2:29:5e:4e:
a9:ff:14:ea:eb:ec:d5:68:01:cd:7a:0d:69:f2:bc:68:bc:fb:
4b:bf:6c:fa:fb:a0:99:c8:a6:11:9e:bc:87:38:3f:e9:fe:48:
cc:e6:f0:5a:6c:6f:b1:1a:d1:c9:a8:1c:12:68:76:1f:2a:7f:
54:79:d9:62:13:7e:48:af:26:f0:bf:9f:b9:d0:b8:07:2f:29:
a7:64:a2:39:52:6b:d6:3c:a0:ab:8d:61:27:0f:30:f7:31:44:
e2:43:91:b9:a5:72:14:e2:04:0c:e6:b0:59:a0:70:27:3f:41:
6f:8e:d7:67:97:29:5e:de:dc:c1:65:fb:be:e3:79:e3:ef:1f:
d1:5d:e7:8a:eb:47:35:44:34:8a:70:2d:f7:1d:48:a7:5e:02:
eb:b0:0b:03:a6:86:35:fe:82:77:d2:db:50:d2:42:dc:b3:27:
bc:9d:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:57 2025 by rpki-client