Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tDL-a3G5N4Vap09yCJm2kzCe2JE.roa
File: tDL-a3G5N4Vap09yCJm2kzCe2JE.roa (raw, json)
Hash identifier: pPwj9Oqhd45xaR+GmewXT7mDk2dNIq7x09qBz0wL/3I=
Subject key identifier: B4:32:FE:6B:71:B9:37:85:5A:A7:4F:72:08:99:B6:93:30:9E:D8:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018515E8749BDC7CA1440FC3E84FFB013C17
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tDL-a3G5N4Vap09yCJm2kzCe2JE.roa
Signing time: Thu 15 Dec 2022 13:10:33 +0000
ROA not before: Thu 15 Dec 2022 13:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:e8:74:9b:dc:7c:a1:44:0f:c3:e8:4f:fb:01:3c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 13:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b432fe6b71b937855aa74f720899b693309ed891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:85:44:b2:04:82:1c:84:a9:f3:c5:fb:7a:b8:
38:18:66:0b:6e:3d:a0:39:32:7e:51:a2:ee:fd:7e:
fa:06:f8:6e:0c:6d:1c:fe:eb:6e:eb:f2:f2:7d:41:
60:18:2b:1c:ca:95:51:68:5c:8c:b3:73:8d:9d:d8:
b3:fe:06:78:43:b3:4d:cf:20:cc:ab:c8:56:09:5a:
65:00:81:cb:f3:6d:57:10:09:a2:23:20:0a:8d:77:
c4:13:a2:e0:11:42:56:14:43:24:17:2c:5b:90:e0:
e0:a3:b7:ae:21:42:48:6e:c4:ac:ea:be:89:50:f4:
9c:ef:66:8c:c6:8e:fa:86:ea:b0:47:a9:46:31:ff:
cc:85:de:c8:f8:1d:ba:bf:b2:91:9e:e8:3d:f1:10:
b7:10:9a:05:d9:fb:17:0d:59:77:dd:21:f2:75:10:
e1:ba:8f:4d:ef:04:25:eb:be:3d:19:95:32:57:8e:
64:89:d3:75:35:16:c5:c9:3d:64:ef:aa:ee:f5:a3:
b9:9a:ad:e7:12:cd:e8:e3:d8:a6:d1:ae:4b:82:7f:
ab:fc:94:ef:86:70:9e:e8:1b:51:9e:e0:77:8f:54:
dd:43:42:ed:be:f8:e3:6b:79:33:e6:6b:a7:2a:01:
64:65:c7:1f:35:20:ed:8d:68:0d:76:38:b9:9d:78:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:FE:6B:71:B9:37:85:5A:A7:4F:72:08:99:B6:93:30:9E:D8:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tDL-a3G5N4Vap09yCJm2kzCe2JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:8b:9e:a0:7d:ed:1a:11:87:4c:8b:1c:1e:97:45:1b:52:5c:
0f:02:b9:db:76:f2:74:6e:df:e5:39:b7:56:fc:44:37:37:90:
ea:31:12:0d:bb:15:11:3c:f7:57:bd:1e:81:ff:d0:dd:ba:e8:
5d:80:29:8e:8c:2c:d8:20:02:c1:a4:c2:31:a9:60:eb:81:8b:
d8:2e:d1:69:4f:49:81:6e:c2:61:dc:07:bd:5c:21:7a:e5:dc:
41:99:fe:bf:f4:54:2a:de:23:dd:a2:5d:a8:c0:41:80:e8:8a:
20:3b:e1:0b:24:a9:e7:2b:9f:61:a7:4a:8e:64:d2:77:90:c0:
0d:96:cf:3e:49:a2:6a:d0:cf:3a:68:40:ec:85:40:e2:3f:2e:
4b:f9:21:fb:74:c0:8f:67:61:3a:11:f4:2a:4b:fd:6d:a9:90:
2c:c0:85:f8:a2:e2:05:b3:77:30:95:f8:d6:4c:ee:2c:62:84:
e6:5c:94:74:d1:13:72:56:0f:1a:8a:6e:fb:26:05:6a:17:b4:
0f:09:cb:51:d1:a8:d6:d9:54:b0:5a:b1:00:a3:9b:80:ac:3f:
54:a3:ef:dd:a4:b9:42:b5:40:84:22:3b:05:9b:ff:06:d2:56:
43:f2:22:8a:9e:b0:12:98:d0:5e:44:a3:dc:c6:93:ab:99:98:
7a:ab:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:17 2025 by rpki-client