Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tri64l_ndw3Z1GDW5gJ_xO2A1A4.roa
File: tri64l_ndw3Z1GDW5gJ_xO2A1A4.roa (raw, json)
Hash identifier: DSsHGzUgYtf2S8gfl+IZhkqOwm3TwPkOmxN8D0yi3Xk=
Subject key identifier: B6:B8:BA:E2:5F:E7:77:0D:D9:D4:60:D6:E6:02:7F:C4:ED:80:D4:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A277DA571BB241CE741129BDB2EE9F69B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tri64l_ndw3Z1GDW5gJ_xO2A1A4.roa
Signing time: Thu 24 Aug 2023 12:21:00 +0000
ROA not before: Thu 24 Aug 2023 12:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:7d:a5:71:bb:24:1c:e7:41:12:9b:db:2e:e9:f6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 12:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6b8bae25fe7770dd9d460d6e6027fc4ed80d40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:d2:f8:d2:a6:f1:51:36:ab:56:c8:10:1f:
08:ff:1f:68:f6:82:4e:b2:02:bd:91:d0:3b:ff:ef:
77:da:1e:ae:59:bc:08:eb:49:56:3b:a7:64:a2:0b:
65:e8:5a:37:af:81:02:cb:3f:27:a1:a9:e3:56:2a:
d5:55:4c:80:46:dc:0f:dc:e8:3d:f2:bb:4c:09:85:
d8:aa:7a:ac:bb:f2:0d:66:8d:a8:65:57:ff:62:c7:
9f:34:cd:b9:95:bf:8c:c5:5e:9d:da:f4:d2:ac:ef:
a5:b6:fe:fb:fa:a5:6d:4c:e9:2f:86:63:48:c8:91:
16:b7:a4:02:c0:a8:88:43:96:b9:89:70:dd:90:ca:
1f:af:b9:de:5b:c3:fb:cc:57:f3:e3:02:36:f8:06:
22:7d:df:55:22:d1:48:25:ab:40:24:97:73:6d:f3:
bf:d8:84:3d:aa:1d:b3:7f:88:d9:8e:4b:6f:68:fb:
84:82:c1:76:4c:5e:4d:a8:a2:f6:49:0a:4c:5e:0d:
62:08:25:f6:d8:47:05:ae:4b:e8:3b:d1:bb:0d:73:
8c:ca:a6:7f:87:3c:54:2a:09:a7:35:ef:1d:f8:46:
4c:d2:f1:dc:05:d7:64:0b:96:01:f2:76:16:3b:4f:
20:06:58:e6:e3:bd:3c:aa:c2:0a:b4:bc:45:07:86:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:BA:E2:5F:E7:77:0D:D9:D4:60:D6:E6:02:7F:C4:ED:80:D4:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tri64l_ndw3Z1GDW5gJ_xO2A1A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:b6:77:ea:be:5f:6f:4b:ba:69:73:f2:70:a9:e0:3b:ac:33:
88:17:5c:97:ff:11:ae:6d:fd:fc:fe:2b:e1:cc:e0:f7:e3:b9:
01:12:20:a9:7f:15:3c:17:af:2b:76:3d:33:61:e5:32:69:a8:
10:bc:a7:39:d1:ae:df:14:ce:f1:d2:5b:e5:41:de:c1:04:a7:
64:29:b5:51:db:97:ee:b2:f4:87:fa:13:08:ee:e5:83:9b:19:
b6:01:4a:b7:a5:52:42:6f:5d:73:ca:51:76:b4:7a:17:00:f2:
4d:e0:10:27:16:74:4c:c9:26:bd:70:cb:17:2d:a8:28:3f:22:
ae:0a:21:2e:a2:61:c8:98:85:99:7b:5a:bd:b3:79:d1:e0:c5:
a3:8a:d7:a4:ff:13:3d:f6:c9:f4:e7:e6:42:02:2b:a4:7a:e3:
b0:50:e4:14:9f:98:16:6e:ac:3c:a4:bc:64:cb:43:db:12:b8:
35:42:df:32:81:04:ca:30:5e:a7:5d:8a:ab:7b:f0:1d:44:1e:
f6:c3:5e:1b:09:12:f2:ae:42:96:96:85:37:d5:81:60:aa:ba:
c7:c1:c0:2e:94:96:06:8e:05:59:72:2c:3a:00:f1:d3:c9:6c:
46:90:6b:23:2b:48:50:0f:c4:bb:f1:a9:b2:1f:6b:4c:53:e0:
36:68:a4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:14:37 2025 by rpki-client