Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tvRi_ialWLtxunmgq5-eZ6KTUgE.roa
File: tvRi_ialWLtxunmgq5-eZ6KTUgE.roa (raw, json)
Hash identifier: 5lQMy8Ko0Xnfwlz7WtSpdHibhXYGpGTibHC1yRZKcpI=
Subject key identifier: B6:F4:62:FE:26:A5:58:BB:71:BA:79:A0:AB:9F:9E:67:A2:93:52:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A300EA051E6E78D4AB49C8E834C5F24A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tvRi_ialWLtxunmgq5-eZ6KTUgE.roa
Signing time: Sat 26 Aug 2023 04:16:19 +0000
ROA not before: Sat 26 Aug 2023 04:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:30:0e:a0:51:e6:e7:8d:4a:b4:9c:8e:83:4c:5f:24:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 04:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6f462fe26a558bb71ba79a0ab9f9e67a2935201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:25:0d:28:e8:b2:92:5a:53:1b:fa:16:c8:
d2:d1:bf:65:b7:5c:b5:63:ea:08:97:0c:38:8d:d6:
ee:99:b8:7f:35:f5:9c:c8:32:78:22:5d:25:90:7c:
24:54:2d:1c:0b:bf:7d:3a:ea:79:d2:f7:56:74:98:
ac:72:45:26:d8:03:29:53:7a:cd:9d:a2:e4:d7:d8:
2b:5d:a1:19:2d:03:a7:d5:6d:b0:4b:c4:ea:b7:e2:
34:1a:37:f7:c9:ec:d9:20:f4:48:d0:c6:a1:63:d7:
9f:ef:3e:4e:8a:d1:42:79:44:35:4d:ac:67:d5:a9:
40:82:22:6f:ec:b7:27:f8:1f:39:9f:c3:49:38:4f:
4e:a1:de:f8:de:ba:8f:27:18:9c:3d:7c:2a:1b:36:
35:77:4d:ab:31:e8:d3:10:ce:aa:40:a8:9c:27:29:
97:10:11:1d:bd:c0:ee:32:0f:f3:22:e8:83:5c:33:
b5:4e:31:c9:ec:c5:5e:96:f6:f1:46:2a:55:5e:90:
fa:2e:98:88:d5:50:bf:36:0a:36:5c:78:2a:23:f5:
35:bc:54:fc:63:2c:8e:4d:16:56:af:19:8d:00:ff:
0f:71:ac:0c:d0:74:27:65:d2:79:e1:91:b2:3f:9e:
71:36:c2:1d:59:f1:0a:90:8b:dd:07:1f:d5:84:b0:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:62:FE:26:A5:58:BB:71:BA:79:A0:AB:9F:9E:67:A2:93:52:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tvRi_ialWLtxunmgq5-eZ6KTUgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:d2:cc:e9:f7:32:ce:72:85:b4:ee:ad:c5:3c:5c:4d:29:71:
9e:2c:42:5b:a8:cb:fe:07:c9:c3:9a:f7:c8:9d:b8:3d:17:83:
5b:38:2e:2f:3b:63:1d:eb:a8:e0:83:1a:8c:bd:d3:11:59:88:
83:96:ae:20:d0:d3:0a:f1:f8:0e:8c:3d:6a:b1:b3:e5:5f:33:
9b:8a:78:0d:07:26:37:2d:91:66:d1:d7:2a:9f:6c:7a:74:9e:
30:aa:3c:1e:47:d3:fb:23:9c:df:2c:19:ef:ce:20:7b:3f:dc:
67:04:c9:ec:2e:9c:bf:26:93:9e:ac:91:74:9b:de:6a:aa:24:
a0:85:3b:c7:87:fa:26:e6:1e:84:01:21:5e:a6:07:ec:18:a1:
31:8a:3f:27:49:2a:98:be:05:99:21:ff:a8:f3:53:e1:f2:cf:
9d:bb:ec:1c:eb:e0:5c:e5:47:8f:db:de:e5:fc:82:72:02:7c:
bb:cd:1e:60:3e:cd:37:7d:b6:dc:30:1d:02:60:61:c8:95:4b:
d9:29:c3:e6:ef:17:95:8d:3b:16:07:fa:cb:47:86:89:1c:65:
5f:24:ff:3b:af:f9:5f:2e:36:56:44:56:26:33:3c:62:53:5b:
f5:fe:4f:ec:f4:59:04:74:d2:e2:74:ed:42:b8:5b:34:5d:e9:
26:cf:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:23:48 2025 by rpki-client