Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TzGAilK5k6maiXs1bUBRtUbznk4.roa
File: TzGAilK5k6maiXs1bUBRtUbznk4.roa (raw, json)
Hash identifier: 9alShjxem6dvUV5krK/WSngQJ0nAKgH8zjf/EYoJLTE=
Subject key identifier: 4F:31:80:8A:52:B9:93:A9:9A:89:7B:35:6D:40:51:B5:46:F3:9E:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018813F20AE6F130D6C2574577F5091E709C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TzGAilK5k6maiXs1bUBRtUbznk4.roa
Signing time: Sat 13 May 2023 07:10:09 +0000
ROA not before: Sat 13 May 2023 07:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:13:f2:0a:e6:f1:30:d6:c2:57:45:77:f5:09:1e:70:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 07:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f31808a52b993a99a897b356d4051b546f39e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:83:67:83:f6:1c:21:dc:36:37:52:f5:ba:
71:d3:0c:ac:6f:3f:9b:71:76:60:a7:5b:b2:25:02:
4b:92:f7:81:e5:c3:f7:5a:f0:0f:e6:d1:41:ee:b4:
e2:73:1d:76:14:6f:6e:df:32:aa:96:2a:94:95:04:
1d:1f:34:5a:b3:4a:56:75:1a:85:53:84:f9:dc:15:
95:77:81:67:32:cb:2b:1e:3f:ab:65:60:67:34:3f:
c8:f4:31:12:24:6a:e9:2c:a6:16:16:03:74:2a:80:
be:a2:40:f8:5b:fe:54:7e:72:a5:14:a5:a4:7d:0d:
c3:14:25:ee:42:e7:a1:c1:a6:b3:e9:8c:3a:83:ab:
d7:64:e1:f2:a0:f2:b1:54:24:ee:06:25:c9:36:db:
c1:e2:c3:9b:b3:c5:77:80:47:e3:44:d1:5d:cf:15:
3a:da:fe:10:38:e2:b5:30:81:0d:04:d5:d3:51:c3:
d2:57:d2:d6:f0:4c:0d:9e:58:6e:ba:7c:76:9b:9b:
19:fb:a3:e8:93:f1:8b:f1:9f:d4:2d:9d:19:4f:15:
7d:3a:a5:55:3c:1c:27:57:64:e7:65:f7:83:e3:4a:
b7:cf:0d:50:5d:e6:80:f7:9c:58:f9:34:35:fc:00:
2d:85:7d:ca:44:82:55:a1:a8:62:72:4f:bb:7c:fc:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:31:80:8A:52:B9:93:A9:9A:89:7B:35:6D:40:51:B5:46:F3:9E:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TzGAilK5k6maiXs1bUBRtUbznk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:0e:22:eb:fd:7a:48:32:51:e7:b8:07:67:76:77:e0:3f:86:
c2:92:ab:9d:df:e6:a8:86:c7:a0:c1:8a:26:4f:97:a5:ad:73:
7a:4b:25:f1:4e:9c:6c:20:c1:fa:88:e4:2c:06:99:de:21:04:
ec:67:7b:9e:00:12:be:f1:1b:28:04:3a:43:52:82:74:65:7b:
af:2a:e1:1c:77:32:cf:67:37:70:1d:02:49:da:d6:83:1a:fd:
67:59:f3:18:f3:51:b4:c6:6e:69:69:f7:23:04:48:0b:36:2b:
c5:9f:ab:c3:a5:32:c6:29:20:9d:b6:59:cf:35:53:ce:e3:83:
c9:da:8b:51:e9:6d:e9:12:ef:7c:17:1b:08:af:cf:6c:ac:cb:
d1:50:57:3d:9a:6f:13:db:96:a5:d4:ca:cb:e5:f2:fb:06:6d:
71:de:4d:71:a8:45:9f:a8:82:3a:91:27:85:02:6b:c5:10:5c:
7c:c1:65:ae:18:26:57:66:ca:0e:36:12:5d:42:07:4b:ba:67:
8b:f4:ed:20:b1:ff:35:c0:8b:3f:ee:10:86:96:42:60:2b:69:
f1:5a:25:a5:1e:57:ae:ca:d3:3e:26:62:3c:01:7c:ad:b1:b7:
d2:ff:94:fc:6d:7b:93:ed:44:01:27:14:33:97:b6:cf:f0:36:
9e:c6:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:50 2025 by rpki-client