Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tcnCGkigbVFMIo1NEvOLZ217wSY.roa
File: tcnCGkigbVFMIo1NEvOLZ217wSY.roa (raw, json)
Hash identifier: BRCL9ws2a7ZzFpsmVHZUAnKaB8Wxt5wkMH1Dfg4tjlA=
Subject key identifier: B5:C9:C2:1A:48:A0:6D:51:4C:22:8D:4D:12:F3:8B:67:6D:7B:C1:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BC3313959F52601606090C7539E7FFB4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tcnCGkigbVFMIo1NEvOLZ217wSY.roa
Signing time: Mon 16 Jan 2023 20:09:01 +0000
ROA not before: Mon 16 Jan 2023 20:09:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:ba40:6692/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:33:13:95:9f:52:60:16:06:09:0c:75:39:e7:ff:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 16 20:09:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5c9c21a48a06d514c228d4d12f38b676d7bc126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:d1:12:4d:ac:a2:a3:4a:98:63:a8:f6:d9:
da:d7:d3:8b:1b:c5:1a:3c:32:06:23:f6:1c:22:6d:
29:93:39:80:46:bc:9e:a9:5b:21:93:b4:50:fa:47:
dc:02:f1:e0:ec:a3:dc:a3:4f:f8:37:fa:70:9f:64:
41:58:0e:9a:33:a5:6f:f8:26:87:d7:cb:14:85:f6:
7d:b7:29:11:ae:f0:78:99:07:15:e8:a4:c0:30:6a:
26:12:07:86:59:b1:7a:30:c9:79:f5:5f:15:74:e3:
58:78:a6:13:ec:aa:00:62:1b:cd:98:ec:f3:4e:f3:
2b:4f:41:3f:55:6d:b3:11:b6:78:e9:53:42:f2:76:
b8:ef:e2:4b:c9:a7:cd:07:8c:bf:4f:b2:34:42:4f:
ea:29:bd:1e:5b:c9:6f:6e:c4:14:ff:28:70:f7:eb:
bd:d0:17:20:7f:c1:31:93:9d:6c:b4:a3:ba:9e:f5:
ab:21:b4:18:f6:cf:dc:dc:2a:eb:83:94:55:ab:88:
da:9c:ab:30:71:b4:cb:12:11:09:5a:0e:9e:d1:a5:
48:e8:29:17:bc:13:b8:0a:17:ed:a3:a7:6b:8c:b3:
44:b6:a4:81:01:c5:23:69:03:ba:9b:9a:27:66:86:
35:a1:1b:76:33:0e:70:60:8f:28:4b:c0:7f:d5:47:
e0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C9:C2:1A:48:A0:6D:51:4C:22:8D:4D:12:F3:8B:67:6D:7B:C1:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tcnCGkigbVFMIo1NEvOLZ217wSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:4a:4b:5e:30:6f:cc:67:9f:e4:89:de:ad:bf:ec:8f:92:49:
6c:a3:fb:ff:cb:bf:5e:24:2b:b2:f3:17:9c:b3:fe:03:81:01:
c0:4c:d0:f6:ca:12:2c:f6:c9:8d:08:ec:95:94:6b:c5:ee:24:
8a:7c:27:54:94:4c:30:7b:73:f0:fa:68:41:d2:1b:71:fd:d5:
d4:e6:e9:43:8b:4e:1e:30:74:8d:58:c4:83:83:6a:d3:8e:c8:
cf:e9:ca:05:70:b3:7f:da:49:36:9c:15:3b:7b:5d:47:35:ec:
40:9a:d5:2b:91:7b:ef:9f:14:a4:fc:7a:82:70:34:3a:24:65:
67:3c:23:b3:58:b0:24:90:c0:7a:3b:b5:fb:dd:93:a2:63:98:
47:ea:bb:31:cb:20:4b:72:22:7f:03:b6:a1:74:27:00:82:7c:
b7:b9:5d:78:ce:44:af:a8:b2:fd:b9:c3:29:b2:ab:0e:76:b3:
c1:20:df:d3:56:99:54:0a:ee:d9:22:8b:61:1a:3e:42:90:fb:
f1:05:3f:ce:20:d6:66:44:cc:48:58:aa:f7:ed:3e:3d:0a:13:
1e:c1:f9:46:0f:86:d0:cd:39:5d:72:9d:c6:78:fe:10:c6:76:
ce:04:c6:35:1e:36:31:75:e6:f1:92:12:86:ab:ca:cc:f6:27:
2b:4d:9a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:57:04 2025 by rpki-client