Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tLTONnXryocQ4fH9HqQJ15OFo9g.roa
File: tLTONnXryocQ4fH9HqQJ15OFo9g.roa (raw, json)
Hash identifier: bDZ5Y3HD9iOfaRB+RIiupB0ZXEmFB56vXzxhMt8W+Vo=
Subject key identifier: B4:B4:CE:36:75:EB:CA:87:10:E1:F1:FD:1E:A4:09:D7:93:85:A3:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E013C8DC8AEF3EF6B9712C03FB03D6BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tLTONnXryocQ4fH9HqQJ15OFo9g.roa
Signing time: Sun 16 Oct 2022 09:15:36 +0000
ROA not before: Sun 16 Oct 2022 09:15:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e0:13:c8:dc:8a:ef:3e:f6:b9:71:2c:03:fb:03:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 16 09:15:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4b4ce3675ebca8710e1f1fd1ea409d79385a3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:86:ac:91:63:a3:28:d8:5b:84:3b:f7:97:4d:
ba:a3:b7:b4:6f:df:a2:ef:12:aa:54:a4:da:5c:33:
14:7a:79:39:7d:ce:64:ac:51:4a:32:8c:c6:c7:c3:
20:4f:6f:ee:6e:6f:7f:ca:15:af:a7:e0:53:ba:52:
e1:f5:25:07:11:59:44:ff:1f:ba:87:0a:6e:e8:94:
6e:2c:54:64:b7:de:19:c9:a9:3f:98:82:b5:04:29:
f9:1e:4b:72:6e:6e:63:e9:0c:e1:6d:95:dc:41:b9:
32:1c:f2:17:87:d7:da:fb:ec:a2:fa:06:28:10:58:
26:b8:14:59:c8:da:2c:d6:39:4c:1b:46:f7:1e:85:
a2:c8:32:c9:80:b5:b6:42:2f:2d:3b:ba:6b:e3:f1:
a5:d6:02:3d:05:22:13:a4:b6:fc:92:9f:cb:db:15:
37:bd:a8:7e:45:0b:65:c4:00:b6:1e:65:dd:9f:e6:
ba:51:0c:89:2a:ad:5b:02:de:b9:1e:84:ac:e8:15:
1c:cb:12:47:6f:8c:12:79:06:aa:c1:b7:7e:f1:1c:
97:3d:5a:1a:c4:5d:f4:1d:b3:5d:ab:c1:12:dc:e4:
e8:8d:2a:63:b4:7f:63:d0:b4:a2:5c:6d:fa:7e:6b:
48:92:5f:f0:7c:86:9b:cf:16:8c:cd:8a:e6:f5:ae:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:CE:36:75:EB:CA:87:10:E1:F1:FD:1E:A4:09:D7:93:85:A3:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tLTONnXryocQ4fH9HqQJ15OFo9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:80:01:e9:a6:48:7a:0a:45:80:de:8e:ab:4c:d1:87:10:54:
8c:bc:a6:88:8c:8f:66:a9:f8:73:75:c1:43:7e:df:86:ec:8c:
14:07:57:2e:01:af:ec:a4:31:77:5d:3e:0a:ba:f3:2e:60:79:
b5:6f:5d:30:d1:07:15:a4:76:c0:85:7f:bd:b2:39:77:ce:e0:
a4:de:cb:9c:3b:f0:7f:6e:86:86:63:c2:75:e6:39:ea:6d:8a:
18:6e:f0:19:0f:21:c7:42:2c:7c:49:50:da:60:84:c1:ea:06:
65:7a:40:dc:1f:72:68:c2:d7:cd:f1:fa:ec:6d:2f:00:43:9a:
8a:34:db:45:94:64:96:91:b3:e9:8b:19:71:f9:a8:a7:de:7e:
cd:fa:4b:03:82:cd:1f:59:72:4f:e8:4c:d9:2e:6c:df:ee:63:
6a:2f:f2:fc:fe:22:f3:82:a6:0d:43:56:48:e9:91:71:aa:18:
bf:98:48:9f:ca:37:f6:8d:d2:41:8d:ad:b0:12:4c:ce:2b:08:
ba:6a:1a:d7:44:14:8c:6c:b1:8a:94:52:d3:8d:d9:d5:d3:9b:
a1:bd:ad:3c:a9:86:27:13:31:0c:fd:47:60:fc:c9:e8:37:20:
89:98:d0:01:a2:a1:ef:6a:5e:b1:07:1f:99:32:7c:e5:45:f7:
65:88:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:41 2025 by rpki-client