Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tClnkzQSP9CamV7wbt44aV5A4Fs.roa
File: tClnkzQSP9CamV7wbt44aV5A4Fs.roa (raw, json)
Hash identifier: NfFd7ZFs/Vvr67REbeL0OKnm/z39OLE+5roSisHdazI=
Subject key identifier: B4:29:67:93:34:12:3F:D0:9A:99:5E:F0:6E:DE:38:69:5E:40:E0:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CC7B482E2C83C38F484AA76065AC4268
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tClnkzQSP9CamV7wbt44aV5A4Fs.roa
Signing time: Sun 06 Aug 2023 20:12:58 +0000
ROA not before: Sun 06 Aug 2023 20:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:7b:48:2e:2c:83:c3:8f:48:4a:a7:60:65:ac:42:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 20:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b429679334123fd09a995ef06ede38695e40e05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:91:73:ef:1c:d3:37:27:fd:b0:50:2a:2e:1b:
01:09:94:7c:17:19:9e:a5:db:1f:d5:cb:ba:f1:d0:
df:dc:31:05:81:c5:68:48:42:d2:f9:fb:99:3c:5f:
95:e1:89:1b:24:6e:58:b0:d6:4f:79:48:a0:ed:e1:
b3:2d:c2:f8:4f:d4:fd:9a:b4:dc:28:ee:99:3e:53:
91:24:31:8f:73:72:a3:f4:9e:b6:ba:12:4c:57:53:
6a:34:a8:ad:5c:fd:20:b3:31:a1:5f:8a:7b:fb:99:
0e:a0:1f:2f:4d:a8:55:d8:b3:b2:64:42:0f:0c:56:
25:71:61:d2:8e:e7:3a:b2:e8:67:d4:a9:7c:43:9a:
77:45:60:af:b4:a8:97:69:d0:cd:7c:2e:ef:52:08:
b7:87:cc:7d:00:bb:b1:65:82:c9:c3:7e:dd:0c:1e:
8b:80:b6:ac:21:48:15:fc:6d:e4:ad:d4:04:37:e1:
ea:60:fc:d3:78:8b:4b:5f:e8:db:26:2a:f5:6f:ef:
9b:38:27:cb:8f:de:5e:66:b7:22:40:2d:18:2d:ad:
34:cf:14:6f:5d:8c:f9:be:64:c9:b6:fc:40:18:9c:
78:00:f4:53:50:9d:da:35:ef:44:33:2c:b8:cd:8b:
ee:be:08:a0:78:9e:ce:46:ce:8a:93:a7:a4:7d:30:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:67:93:34:12:3F:D0:9A:99:5E:F0:6E:DE:38:69:5E:40:E0:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tClnkzQSP9CamV7wbt44aV5A4Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:55:bb:00:11:13:bd:b5:06:85:df:9d:47:62:00:af:4e:fd:
64:bc:1d:c6:c5:94:bd:76:a7:95:a0:03:88:9f:80:ca:25:56:
ce:d9:0f:ab:97:94:40:48:00:41:62:7a:f2:51:81:05:9f:51:
2a:f4:5e:ba:48:c8:d8:fd:b0:da:c2:15:4a:76:86:27:87:e8:
24:a0:bb:d8:02:9e:34:64:4f:7d:87:c4:46:15:f0:56:68:02:
bd:cb:c7:29:0f:5a:88:f8:f7:a5:df:99:9f:34:dd:5e:23:7d:
4e:23:c6:eb:eb:8b:c8:a0:a8:84:48:fd:6a:85:bf:bf:88:ef:
b9:f3:69:fb:89:2a:e3:b4:e4:99:a6:9c:77:1b:99:0f:b1:8f:
ca:c1:a2:32:20:9e:57:3b:b6:c4:2b:f5:9e:26:ad:59:99:4d:
8f:49:0e:fd:42:34:f9:8c:67:06:f1:20:6e:b3:2e:15:0d:ef:
25:0f:4a:36:42:24:73:d6:64:93:e0:70:fc:62:29:a3:c6:44:
67:e6:a4:1d:85:12:b1:2a:53:b4:41:2b:7f:b1:39:d9:cc:6f:
8b:f6:d9:95:f9:7f:bd:e7:4e:b7:95:bc:6b:65:b2:8e:b1:5b:
1f:22:13:ae:ec:6a:83:48:b6:f9:33:ff:03:99:8b:93:d5:24:
42:9a:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:38:09 2025 by rpki-client