Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tgcn_Lvh-DncqDmQ1ZZcqH__imU.roa
File: tgcn_Lvh-DncqDmQ1ZZcqH__imU.roa (raw, json)
Hash identifier: 2UXbw+9xQjLXFPrcfcF8nBnfWZn8PFUP4LLVFNO+G6M=
Subject key identifier: B6:07:27:FC:BB:E1:F8:39:DC:A8:39:90:D5:96:5C:A8:7F:FF:8A:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C9B10E338C6A409A88D907033EA5FF7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tgcn_Lvh-DncqDmQ1ZZcqH__imU.roa
Signing time: Sat 17 Jun 2023 14:10:03 +0000
ROA not before: Sat 17 Jun 2023 14:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c9:b1:0e:33:8c:6a:40:9a:88:d9:07:03:3e:a5:ff:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 14:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b60727fcbbe1f839dca83990d5965ca87fff8a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:12:6a:e3:61:df:80:5c:ba:92:72:0d:1d:2b:
83:40:9b:15:65:3f:d5:c8:80:50:32:42:2f:1a:3c:
2a:a4:a1:4f:78:22:91:a9:a1:b7:b1:c0:82:13:24:
bc:ca:aa:f0:0b:f4:0b:7a:35:45:48:a4:b9:48:26:
a9:79:76:83:ff:4e:01:9d:1f:f3:2c:61:58:92:14:
75:67:73:5f:17:a8:c1:a0:36:e9:40:b2:4d:5e:c7:
7c:f7:69:35:c6:54:7b:b1:a3:21:e0:1d:c1:51:84:
56:02:de:ad:ce:88:a5:ab:0b:68:64:06:f1:2d:f4:
53:6b:3e:60:d5:7d:61:a9:b5:df:51:ec:5f:5a:96:
63:12:1d:24:8a:91:9e:b2:2f:43:90:23:02:9c:3e:
c4:9b:c0:c0:2a:64:68:7a:29:d8:a4:54:e9:1b:01:
5b:af:ef:c9:7c:ba:cd:86:34:83:0c:ab:d7:16:a9:
74:64:f1:f5:04:f5:bb:e5:4d:18:fe:e2:ad:1e:ad:
42:c4:e2:cf:c8:8e:6e:e2:f3:49:57:9f:eb:c9:15:
5b:ee:8a:24:c6:12:dc:77:f3:8f:31:fb:72:e7:2d:
1a:d6:ad:ed:ad:32:ce:f2:9e:31:f1:5d:d3:81:0f:
64:3f:b9:05:78:3c:77:44:f9:08:26:d3:fa:83:88:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:07:27:FC:BB:E1:F8:39:DC:A8:39:90:D5:96:5C:A8:7F:FF:8A:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tgcn_Lvh-DncqDmQ1ZZcqH__imU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:4c:43:28:f5:fa:95:76:c5:6a:10:4e:50:97:02:ec:3b:cf:
49:bd:e8:24:85:c1:40:b6:2f:9a:9c:4e:41:53:37:12:24:a5:
ec:4b:a1:d9:a2:95:da:28:7f:26:13:12:b4:af:60:cd:8e:98:
d3:a3:73:7a:aa:40:3f:15:22:a6:d0:25:f2:48:f6:4d:23:e2:
1b:2e:eb:20:01:2d:fb:bf:72:e1:da:33:02:3b:33:83:1a:0a:
a7:2c:ac:9a:1a:30:a0:ae:39:f6:35:6c:d5:96:7a:84:bb:57:
e5:82:01:7c:39:e5:48:42:6b:e0:3c:f7:32:cc:0a:60:0c:94:
46:ac:7a:1d:55:e1:71:bc:eb:3c:6a:0e:e5:ac:37:c4:46:26:
ae:d3:1f:d7:43:e1:40:18:a0:9b:7c:b6:1b:a7:5e:a4:0d:8f:
16:64:5b:6d:de:16:b2:90:ca:25:36:4a:a8:ed:04:df:b1:54:
4d:ee:f9:c7:d4:4f:f4:7b:92:22:53:98:3d:37:e1:30:d4:62:
0a:76:ff:49:05:a6:4d:c4:4c:2f:d4:f6:7d:50:fe:47:98:1d:
4a:8e:f6:64:e1:0e:67:d8:2f:83:83:df:17:c9:a4:95:90:28:
ab:8c:f4:c9:c1:df:8b:07:04:63:c2:aa:7b:37:42:77:59:1a:
5e:af:63:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjJsQ4zjGpAmojZBwM+pf9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE3MTQxMDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjA3MjdmY2JiZTFmODM5ZGNhODM5OTBkNTk2NWNhODdmZmY4YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBJq42HfgFy6knINHSuDQJsVZT/V
yIBQMkIvGjwqpKFPeCKRqaG3scCCEyS8yqrwC/QLejVFSKS5SCapeXaD/04BnR/z
LGFYkhR1Z3NfF6jBoDbpQLJNXsd892k1xlR7saMh4B3BUYRWAt6tzoilqwtoZAbx
LfRTaz5g1X1hqbXfUexfWpZjEh0kipGesi9DkCMCnD7Em8DAKmRoeinYpFTpGwFb
r+/JfLrNhjSDDKvXFql0ZPH1BPW75U0Y/uKtHq1CxOLPyI5u4vNJV5/ryRVb7ook
xhLcd/OPMfty5y0a1q3trTLO8p4x8V3TgQ9kP7kFeDx3RPkIJtP6g4iFgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLYHJ/y74fg53Kg5kNWWXKh//4plMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdGdjbl9MdmgtRG5jcURtUTFaWmNxSF9faW1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFFMQyj1+pV2xWoQTlCX
Auw7z0m96CSFwUC2L5qcTkFTNxIkpexLodmildoofyYTErSvYM2OmNOjc3qqQD8V
IqbQJfJI9k0j4hsu6yABLfu/cuHaMwI7M4MaCqcsrJoaMKCuOfY1bNWWeoS7V+WC
AXw55UhCa+A89zLMCmAMlEaseh1V4XG86zxqDuWsN8RGJq7TH9dD4UAYoJt8thun
XqQNjxZkW23eFrKQyiU2SqjtBN+xVE3u+cfUT/R7kiJTmD034TDUYgp2/0kFpk3E
TC/U9n1Q/keYHUqO9mThDmfYL4OD3xfJpJWQKKuM9MnB34sHBGPCqns3QndZGl6v
YxM=
-----END CERTIFICATE-----
Generated at Mon May 5 03:32:00 2025 by rpki-client