Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tA9scyDa-coIRsUsiXq5QE08MMU.roa
File: tA9scyDa-coIRsUsiXq5QE08MMU.roa (raw, json)
Hash identifier: p9g89oOjmZ6xUBaJU3t0E8fCqG7wSMUO6TozYDAq1Zg=
Subject key identifier: B4:0F:6C:73:20:DA:F9:CA:08:46:C5:2C:89:7A:B9:40:4D:3C:30:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018678D4CC98632251EECB09FCC9ECBB3CDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tA9scyDa-coIRsUsiXq5QE08MMU.roa
Signing time: Wed 22 Feb 2023 11:14:17 +0000
ROA not before: Wed 22 Feb 2023 11:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:d4:cc:98:63:22:51:ee:cb:09:fc:c9:ec:bb:3c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 11:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b40f6c7320daf9ca0846c52c897ab9404d3c30c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:64:8f:51:ef:5c:c1:7b:bc:82:bf:36:dd:
7a:f8:30:b6:17:58:dc:49:03:af:92:05:84:21:0a:
3c:be:3b:5f:c2:50:eb:80:e5:f3:84:9b:f8:99:d2:
89:15:9d:5e:fc:c7:51:9a:31:d4:09:03:20:e7:ef:
4c:79:90:7d:6d:6e:b7:60:7a:ca:df:ed:1b:40:4b:
e7:9f:f7:7d:6b:72:67:37:aa:3e:79:3c:d7:56:68:
d2:3d:75:8c:a0:88:68:5a:cc:cd:4c:ac:7a:44:83:
3e:7e:cd:91:d1:65:e5:31:cb:f7:9d:7a:cb:73:3c:
8f:83:d0:f4:c8:86:83:39:22:94:e7:ac:15:49:26:
b1:70:24:78:81:fe:43:e7:b8:9a:1e:d6:b1:e9:c2:
ea:e1:22:d9:b3:46:f5:74:c0:e0:5d:89:ab:db:c6:
e2:30:4e:6c:83:6f:7c:93:f2:5a:fa:40:d8:ed:50:
06:3a:f5:60:53:8e:79:be:77:22:ff:5d:fd:83:98:
3f:ba:11:c8:4f:d1:3e:a4:9a:bc:b0:47:1e:71:2b:
4d:39:03:b7:bc:e3:77:62:61:c1:e7:d6:2e:b5:d7:
4c:ec:2d:ce:f4:89:6a:de:4d:2a:66:12:f3:c5:6b:
9b:69:e0:01:cd:3f:5b:25:a4:da:bf:5d:00:44:d0:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0F:6C:73:20:DA:F9:CA:08:46:C5:2C:89:7A:B9:40:4D:3C:30:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tA9scyDa-coIRsUsiXq5QE08MMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:6f:c5:55:0f:26:3e:db:65:13:79:81:fb:82:2a:a4:b1:07:
78:22:fe:a0:4b:0f:91:cb:bd:fc:91:bc:a3:b5:c1:7b:cc:37:
b7:d2:2b:35:92:98:06:94:25:28:bd:6d:13:06:fa:95:c4:27:
88:fa:3c:88:81:75:d4:3e:11:d1:d7:ec:96:57:0f:cc:48:ac:
02:9b:a9:71:36:4c:2e:98:25:2b:e8:4d:39:5e:f5:e0:19:c7:
85:06:d5:09:95:92:7b:13:82:1e:13:27:47:7d:d9:9b:43:fc:
6e:4b:04:05:56:b9:11:12:02:5c:1e:fd:52:89:e0:18:9e:1e:
6f:5a:de:16:1e:7f:7a:2c:79:13:cb:4e:38:85:46:c3:61:b5:
91:46:54:4f:57:0a:98:35:aa:0c:e3:39:66:5c:67:3f:7c:fe:
66:a5:b8:7c:fc:21:fc:6f:13:a4:96:90:60:19:17:7f:f8:53:
d0:ff:69:de:a0:50:da:4d:a1:f7:5e:0a:e0:ca:0a:94:a1:65:
31:17:4c:e7:9f:68:4e:8b:d4:c6:58:7c:de:e7:eb:98:df:4d:
bf:73:cb:80:00:82:79:c7:c1:ce:a7:13:8b:39:75:d3:43:e7:
19:0e:0a:3c:15:00:11:76:ba:05:61:83:2d:3e:1a:08:65:df:
ba:ff:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:25:59 2025 by rpki-client