Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tmikNnDN54LZ9ENxbd0Zx7AMhuo.roa
File: tmikNnDN54LZ9ENxbd0Zx7AMhuo.roa (raw, json)
Hash identifier: DaBlTLI4cPrb5vdrYgu1+uyq/dEiYuv4CQFsYT05zS8=
Subject key identifier: B6:68:A4:36:70:CD:E7:82:D9:F4:43:71:6D:DD:19:C7:B0:0C:86:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D4794E54D5DBA5F887123DD3CDCE88BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tmikNnDN54LZ9ENxbd0Zx7AMhuo.roa
Signing time: Wed 06 Jul 2022 17:05:28 +0000
ROA not before: Wed 06 Jul 2022 17:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:d478:75c1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:79:4e:54:d5:db:a5:f8:87:12:3d:d3:cd:ce:88:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 6 17:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b668a43670cde782d9f443716ddd19c7b00c86ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:76:c9:52:e2:75:02:e5:ea:52:d1:f5:c3:
17:39:e5:4f:42:25:d1:33:6d:ec:2a:a4:07:87:9e:
1f:f1:f3:9c:3b:e0:c2:14:76:20:f8:be:cf:3c:4a:
8a:5a:2e:0d:d7:a4:53:24:86:b1:90:60:75:9e:cd:
57:2b:c2:a0:75:b9:9d:c6:b3:52:7a:07:5e:30:e6:
6d:39:b5:4c:81:69:39:36:eb:b9:30:d5:a5:d9:35:
ec:c0:77:2a:49:13:d3:2f:34:85:11:d0:ed:6b:51:
d1:c1:f4:64:d5:92:35:aa:af:ee:c8:b4:7d:69:88:
71:f2:3e:00:0f:e9:1f:0e:57:0b:68:9b:f8:a2:6b:
3d:b4:a1:85:ed:3e:6f:cc:2b:27:90:67:ea:6c:a4:
52:14:06:f3:30:ce:a4:05:bf:9f:25:55:5b:48:d7:
8f:e4:ef:f1:c9:44:f4:96:9a:eb:ac:a3:e5:e1:f6:
03:57:27:46:d7:f9:f8:6f:c4:90:3e:6d:a0:0a:15:
01:a6:6b:8e:65:6a:bd:da:e6:35:47:88:1f:c9:3c:
82:27:bc:91:f9:62:74:55:1e:84:9f:92:bb:dd:02:
d1:2e:d1:3a:60:6a:a8:79:51:87:34:f4:f0:70:a0:
2f:be:91:59:a3:3a:c7:c8:14:04:b8:c0:4b:70:6d:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:68:A4:36:70:CD:E7:82:D9:F4:43:71:6D:DD:19:C7:B0:0C:86:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tmikNnDN54LZ9ENxbd0Zx7AMhuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:7b:41:19:6c:cb:2c:59:96:2d:b3:1b:08:be:ac:73:16:9b:
b3:12:c7:3c:54:d4:36:6d:f7:e0:29:08:30:74:88:3b:b1:41:
3a:cc:2d:28:84:79:1a:49:0c:02:fd:85:bc:ad:e1:01:8c:3f:
1a:c9:aa:58:0d:83:94:ca:29:f9:3c:3d:00:0f:4a:04:a4:7c:
c7:26:9b:3c:49:e7:4b:5e:3a:d3:8b:d9:83:c6:a0:54:7b:2e:
23:53:da:6d:0d:15:7e:5f:2d:fb:88:7f:79:40:83:6f:ea:2c:
25:ef:ee:57:be:b7:1f:d7:8b:2e:65:40:3a:c6:53:ea:ac:d8:
61:7f:3e:39:4e:b5:d9:18:49:10:8b:fe:b9:74:38:f0:d1:63:
21:10:96:fb:8e:36:fc:3b:1a:4e:3b:60:28:1a:27:39:7d:a5:
2e:71:74:bc:5c:4d:1f:03:23:74:11:81:72:ad:23:ba:8a:25:
e6:68:8b:73:f7:4f:73:7e:26:2e:b5:56:e3:58:ae:14:7c:d1:
ac:ee:94:54:f0:eb:c6:de:1b:55:97:4e:6d:1b:a3:11:d3:f4:
c8:37:79:63:cc:f4:9d:71:43:40:93:c0:e2:78:62:95:1c:86:
d6:6d:5c:c7:f7:3d:82:a8:a6:75:8a:81:78:f9:cf:6b:53:53:
d3:24:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:08 2025 by rpki-client