Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Tv-KllP6jvhbzoDLZS4R6FOYmo.roa
File: _Tv-KllP6jvhbzoDLZS4R6FOYmo.roa (raw, json)
Hash identifier: iVZ5jMTGBA9qUwTLDgZma8hgLTfivnu+hf8vRDlAeYU=
Subject key identifier: FD:3B:FE:2A:59:4F:EA:3B:E1:6F:3A:03:2D:94:B8:47:A1:4E:62:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D09A4900399B524D411CA8DF296F5B6D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Tv-KllP6jvhbzoDLZS4R6FOYmo.roa
Signing time: Thu 13 Oct 2022 09:08:35 +0000
ROA not before: Thu 13 Oct 2022 09:08:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:d097:6cb1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:9a:49:00:39:9b:52:4d:41:1c:a8:df:29:6f:5b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 13 09:08:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd3bfe2a594fea3be16f3a032d94b847a14e626a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:71:e5:f0:d9:70:eb:2e:cb:cb:a8:56:78:
94:d8:5d:39:03:69:28:5f:76:86:71:ab:b8:53:eb:
50:31:d6:98:27:9f:f2:ae:64:ef:ba:10:b2:59:a5:
30:b3:ae:70:cb:4f:2c:7a:61:a5:1e:24:5c:c5:d3:
41:f8:9a:2f:b8:75:a0:96:bf:55:3d:f4:e7:8a:48:
0a:15:07:b1:04:30:79:41:ed:25:76:db:f0:ae:81:
e8:a8:f6:a5:85:f3:eb:ba:2a:7d:e9:b0:a5:c6:e1:
ac:a7:b4:62:ec:e6:1e:ed:ed:45:9d:c4:48:44:a6:
11:a9:ba:8f:cd:70:09:d0:3c:60:8a:8b:1c:16:a5:
95:ae:0c:2c:81:58:bf:2c:af:67:ce:ea:84:ca:e8:
ba:f1:be:86:81:29:dc:45:2b:a4:71:bc:3c:35:aa:
2e:fe:7f:57:95:e5:60:55:b3:92:32:76:88:58:5e:
f5:86:0b:66:7b:4b:75:5c:44:df:fa:8e:0a:be:a8:
74:9c:f4:57:16:ab:ea:7e:07:b6:26:ad:db:9f:9c:
d8:53:6f:3e:8e:7a:4e:d2:df:62:e1:b8:b5:b1:61:
74:d1:5e:a0:1f:e3:89:cb:76:91:11:a2:b8:ec:66:
11:c5:89:f3:5c:32:05:b4:e0:d6:00:1e:62:fb:88:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3B:FE:2A:59:4F:EA:3B:E1:6F:3A:03:2D:94:B8:47:A1:4E:62:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Tv-KllP6jvhbzoDLZS4R6FOYmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:eb:f6:93:b2:1c:d4:db:d1:5d:fc:0d:5e:55:11:89:91:c6:
ea:0a:38:5a:0c:db:db:0f:ce:8c:f5:fc:52:5c:2e:a4:7c:c4:
76:01:c4:56:2b:ac:6c:1b:b4:bf:a4:3d:3b:9a:41:3f:90:dc:
4a:9f:26:a0:73:12:03:9c:cd:c3:01:67:1c:9e:f8:4d:d9:a2:
44:10:b8:70:37:b6:93:2b:b4:e7:1f:2c:c2:d9:c6:e8:b6:8e:
59:c8:bd:8e:16:89:e1:a4:59:15:07:f3:69:d1:69:6a:aa:24:
06:e7:a9:b6:52:d0:59:4a:1e:fc:c4:46:ba:37:e8:cd:35:b9:
f1:da:ab:b6:f0:1d:76:93:b7:65:28:7c:35:a8:e7:dc:1e:ab:
42:b0:0b:b0:ba:8a:9a:5f:6d:c4:96:5d:80:d9:e3:ad:5b:6f:
84:c9:ec:f1:c3:a7:49:85:1a:f5:d7:70:ad:be:40:82:62:16:
99:39:b5:e1:ec:09:2e:30:7a:5e:9f:ab:5b:03:a3:ba:51:c9:
8d:52:35:96:52:c1:ee:67:a4:75:54:12:31:42:4f:eb:68:fd:
eb:1c:d6:49:6e:ef:b5:7e:9c:37:0e:67:2b:b6:70:ef:6a:1f:
94:6b:a2:63:7f:b0:58:b2:77:b4:a2:0e:ea:62:b3:4b:9d:35:
f2:4b:ed:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:57:25 2025 by rpki-client