Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tfkq_CPftZ3Ael6Qz95Jh7nR5Cc.roa
File: tfkq_CPftZ3Ael6Qz95Jh7nR5Cc.roa (raw, json)
Hash identifier: E8xazArJBlaNhf2A6hBOJRxZIgf/YGaSStaZaGd609c=
Subject key identifier: B5:F9:2A:FC:23:DF:B5:9D:C0:7A:5E:90:CF:DE:49:87:B9:D1:E4:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187CDC7E2B4F4E808CC4AACEF0633DD7A41
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tfkq_CPftZ3Ael6Qz95Jh7nR5Cc.roa
Signing time: Sat 29 Apr 2023 16:10:41 +0000
ROA not before: Sat 29 Apr 2023 16:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cd:c7:e2:b4:f4:e8:08:cc:4a:ac:ef:06:33:dd:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 16:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5f92afc23dfb59dc07a5e90cfde4987b9d1e427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:17:4a:17:a9:a5:63:1b:fe:d9:8b:77:c7:70:
b0:ad:a8:46:ea:14:c1:69:1b:63:46:8d:44:d0:84:
d7:9c:78:ac:ba:09:cb:18:87:d8:6a:58:c8:c6:cf:
d5:1f:61:93:db:3e:db:d7:d3:53:54:28:61:0d:d8:
e4:b2:f4:14:c8:30:1b:35:14:e8:ea:56:65:54:60:
7e:c7:d6:ac:d8:3c:9c:5b:06:86:fa:7a:cc:c3:86:
8b:40:44:18:f0:51:d1:85:7c:9d:43:5b:cc:d0:52:
c2:77:93:76:8f:fc:42:81:91:0e:f2:0f:35:91:04:
b8:90:20:7f:02:55:ef:8d:2d:b0:c4:68:d7:eb:bd:
36:01:0d:75:6e:d5:0a:5e:02:fa:63:ff:9b:ef:d4:
18:14:aa:c2:c9:3a:ad:dc:b3:fa:b6:62:88:03:b9:
a8:3f:ca:41:70:97:af:f8:1f:54:78:0c:76:59:97:
72:38:9b:43:b7:59:4d:33:5e:fe:af:3b:89:b2:48:
74:cb:6b:59:e3:23:69:e7:56:32:39:39:dc:c3:bb:
b8:3b:92:8a:74:d1:d9:6d:ed:92:e2:6f:3a:1e:3e:
c3:c0:39:73:e0:94:89:9a:08:c9:13:42:12:9f:cf:
87:c9:6c:b7:d6:65:24:4e:c9:45:ed:7d:9c:9c:ad:
86:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F9:2A:FC:23:DF:B5:9D:C0:7A:5E:90:CF:DE:49:87:B9:D1:E4:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tfkq_CPftZ3Ael6Qz95Jh7nR5Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:40:bf:09:35:62:32:a6:3d:fc:f3:37:5d:3f:33:01:c9:b5:
65:00:42:47:74:2c:c3:24:ff:68:9b:3f:18:0b:76:88:e6:ab:
8b:8c:05:a3:3f:62:59:f9:0c:be:77:93:55:58:32:1e:0d:e3:
58:c5:20:d8:a2:6b:30:9b:80:0c:03:ab:1b:71:07:f0:fb:c2:
64:b9:5f:8e:d6:5b:fd:88:89:29:d8:9f:32:7b:7b:58:a8:77:
64:b5:33:d0:a4:01:4d:41:19:f5:9f:ef:cd:b0:67:fe:25:a2:
82:69:e3:f7:10:d0:e7:94:c3:1f:70:40:f7:f8:6a:68:f7:ae:
fe:a7:d1:12:81:e2:6b:04:01:e5:7f:7c:75:ee:af:11:e5:c6:
95:dd:45:36:5a:fd:ec:59:19:5c:bf:93:37:d0:99:99:2b:0e:
6c:ee:85:5e:67:80:84:45:12:85:1b:b5:4b:ce:b5:5f:2e:55:
a3:bf:cc:f4:49:8c:16:f7:89:e5:91:60:33:9c:97:98:72:8b:
15:49:ea:f7:6a:e6:c3:b3:f9:7b:72:c0:03:5a:96:46:e7:13:
89:c1:f0:e0:81:d4:de:3e:97:24:2c:94:09:61:c1:e0:11:1e:
71:fd:7c:c9:87:bd:fb:eb:63:84:fb:f7:5a:5c:fe:d7:17:81:
6a:13:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:26 2025 by rpki-client