Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tTgmcf2zOre9HXKX-lr4hYMrF5w.roa
File: tTgmcf2zOre9HXKX-lr4hYMrF5w.roa (raw, json)
Hash identifier: u+uPcGIsLoM40pl12bx9o/fWLNLw91+PudM/XNZTtIE=
Subject key identifier: B5:38:26:71:FD:B3:3A:B7:BD:1D:72:97:FA:5A:F8:85:83:2B:17:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184FD04CC546F74545086C01BB90B32DF10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tTgmcf2zOre9HXKX-lr4hYMrF5w.roa
Signing time: Sat 10 Dec 2022 17:11:00 +0000
ROA not before: Sat 10 Dec 2022 17:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fd:04:cc:54:6f:74:54:50:86:c0:1b:b9:0b:32:df:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 10 17:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5382671fdb33ab7bd1d7297fa5af885832b179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:d5:1b:3a:15:85:17:5a:54:02:80:2f:4a:
71:53:59:07:c3:26:53:a8:40:4e:16:da:96:2d:d1:
0b:5c:d1:25:80:5d:85:6a:89:a8:ab:20:cf:36:45:
6b:29:7d:79:61:14:cb:cb:98:4b:5d:40:a3:33:c4:
36:b5:ff:f7:7c:d1:de:91:7f:b5:7c:2d:2c:84:63:
0b:b8:c4:ef:c4:45:a0:c8:0d:2f:4d:a2:9d:e9:e8:
ac:99:2e:97:d7:41:7d:f8:08:92:e5:1f:b6:65:01:
7d:e6:01:5b:4d:79:12:0e:86:80:e5:16:8f:29:2d:
12:f5:74:b6:14:61:2a:e2:54:d7:a1:0e:91:ac:91:
16:7a:b4:f0:07:1c:c3:e2:00:d9:ec:f5:fb:eb:be:
dd:0c:c3:19:f3:d4:3c:f1:20:09:d8:15:e1:07:63:
db:30:23:fe:f2:f4:37:ab:16:39:ea:76:62:2f:8a:
2c:f1:31:8a:d5:c9:fe:4e:05:3b:9b:95:29:54:1f:
58:a7:dc:66:00:cf:e7:49:cc:0f:39:38:15:92:13:
4a:a4:32:1e:9f:db:b3:9b:0d:3d:46:6f:3d:d3:35:
e2:e7:f3:c7:b5:08:bf:48:99:cb:2a:1d:6d:58:42:
a7:35:ca:98:ff:20:10:d0:7e:96:ce:85:0a:38:1f:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:26:71:FD:B3:3A:B7:BD:1D:72:97:FA:5A:F8:85:83:2B:17:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tTgmcf2zOre9HXKX-lr4hYMrF5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:8a:00:f5:0f:d2:c5:96:07:87:1c:13:45:be:82:c1:26:e2:
e7:f7:4d:17:aa:9b:b5:9e:36:c2:ba:56:e7:1c:6a:9d:90:19:
b5:d9:a3:a4:44:d6:a2:e3:14:14:61:90:64:03:8e:ce:33:76:
58:92:f3:45:f6:db:79:0c:33:22:cc:78:88:de:ca:24:9e:33:
c2:a3:2b:27:b5:4f:0f:08:aa:a9:2a:41:af:65:01:7e:3a:29:
b7:89:8f:02:61:18:ca:82:d4:66:f6:16:68:b2:2a:b2:aa:af:
f8:dd:74:3c:0b:b0:67:21:69:23:e4:13:26:4b:31:b9:eb:c5:
b8:8e:92:4b:ab:ca:ba:65:a4:9d:6a:19:8d:78:aa:7d:8b:ad:
d0:0d:e4:6c:c7:e9:3e:9b:0d:d4:a6:8b:08:3b:1f:e7:04:1b:
63:1c:60:42:b5:6f:46:bc:4b:78:d9:b1:84:6c:2b:13:34:32:
59:65:c1:30:cd:18:1c:e3:75:fb:45:6c:ba:00:ad:9c:ac:8e:
61:85:b2:97:87:0d:bc:73:ae:51:34:25:41:d0:ac:ff:60:89:
41:a4:55:26:fa:06:3d:b4:53:e3:f5:80:26:16:87:6d:01:6f:
f8:4b:1e:d9:88:75:b2:58:ee:07:19:a7:ae:a3:18:70:8e:6a:
93:f9:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:15:26 2025 by rpki-client