Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/taLZFrd6rkOpbueJ6W-Z9zDwtsU.roa
File: taLZFrd6rkOpbueJ6W-Z9zDwtsU.roa (raw, json)
Hash identifier: +Y8fnm1Qc/xJNSAfxsP6kqjNrXPc1IZe24E6BnckMu4=
Subject key identifier: B5:A2:D9:16:B7:7A:AE:43:A9:6E:E7:89:E9:6F:99:F7:30:F0:B6:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E5E02ED992E78BC60AC8CFE3BD095B04
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/taLZFrd6rkOpbueJ6W-Z9zDwtsU.roa
Signing time: Sun 10 Jul 2022 02:11:23 +0000
ROA not before: Sun 10 Jul 2022 02:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e5:e0:2e:d9:92:e7:8b:c6:0a:c8:cf:e3:bd:09:5b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 02:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5a2d916b77aae43a96ee789e96f99f730f0b6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:95:24:1b:e2:2a:13:68:24:d0:65:ad:33:
d5:59:81:6a:42:e1:84:85:79:c3:36:94:7c:0c:9b:
20:e8:d3:f3:95:f3:60:ec:4a:39:34:06:75:ce:84:
10:d9:42:c5:b5:da:6f:98:64:c9:26:2a:c4:26:c5:
ca:7a:47:19:fc:1b:c2:1c:87:92:52:89:4a:f5:b6:
ab:5b:84:67:3e:8c:86:dd:e3:d6:1b:a5:c8:7d:1e:
a0:c5:5a:79:f9:b4:36:c7:f2:5c:91:35:ae:bf:71:
e5:30:03:14:d0:81:da:5e:ac:2c:11:fb:cf:9e:2d:
cc:b5:c4:70:42:f9:60:a3:ff:72:15:e7:1a:b7:43:
c9:1f:0c:c1:1b:1f:e8:82:a1:51:67:d5:ed:d2:4e:
64:0f:c4:8d:58:51:e4:d9:45:6b:59:97:96:ec:60:
1f:90:94:df:0f:36:3a:93:c1:70:ef:25:74:4b:14:
0b:70:17:63:f7:9d:c6:7f:7f:d3:29:c8:66:76:7a:
59:9a:a5:8b:86:95:a1:b0:3f:da:08:32:c7:7f:56:
e4:76:87:99:41:e3:4f:d1:f6:20:b5:b7:11:34:40:
a2:a0:d5:2d:25:16:e3:08:16:7c:06:ab:a8:90:4c:
2c:65:c5:b3:f9:a6:57:c6:b2:59:53:5d:61:bf:ad:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:D9:16:B7:7A:AE:43:A9:6E:E7:89:E9:6F:99:F7:30:F0:B6:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/taLZFrd6rkOpbueJ6W-Z9zDwtsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:83:09:a5:9f:4d:36:3c:92:52:f6:09:68:19:f9:ad:b4:ba:
f1:44:79:58:28:13:c9:55:e4:e2:df:f0:6b:46:04:b9:06:fc:
9a:45:94:0c:49:01:a3:28:b7:d8:b4:97:82:fa:f3:ff:37:34:
6f:2e:b3:16:5e:13:20:e4:d2:b1:aa:1f:a1:1f:67:94:33:43:
ec:68:7a:97:2e:72:ba:04:fc:93:9a:df:71:99:b0:b8:75:79:
2d:e6:35:db:b8:0e:9c:c3:8b:f6:9f:02:fa:f3:b6:42:3a:70:
22:6d:52:7c:13:f1:3d:33:ca:fa:ec:c1:b2:d8:42:13:cf:50:
9f:58:bd:c9:43:58:1f:17:e7:7e:8f:e6:8a:b9:aa:04:08:99:
f5:55:46:5f:dc:8b:eb:96:3e:5d:dd:13:5e:c9:03:e9:52:f5:
fa:d3:c0:25:ea:01:3e:b7:e0:8e:b1:05:d5:be:10:14:c7:ca:
51:f4:18:b3:71:ed:62:6f:7e:d5:52:14:dd:ec:d2:a6:29:45:
b4:4d:81:0b:04:1a:dc:a1:c1:0a:f2:f9:f6:98:1c:2b:2e:40:
0c:09:7f:df:41:15:2b:0a:9e:44:39:62:8a:56:1f:0d:99:18:
c0:c2:fb:ff:10:c0:90:25:cb:a1:6e:aa:1b:8f:c6:99:80:a7:
0b:8d:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:59:35 2025 by rpki-client