Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tyGziTVsC-hgbs5vxgxVBsBhBHo.roa
File: tyGziTVsC-hgbs5vxgxVBsBhBHo.roa (raw, json)
Hash identifier: peJh5T9Fl32LZbsyi7dfKeBpZMaO0o8MVk4sG0jGQbc=
Subject key identifier: B7:21:B3:89:35:6C:0B:E8:60:6E:CE:6F:C6:0C:55:06:C0:61:04:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 909A560E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tyGziTVsC-hgbs5vxgxVBsBhBHo.roa
Signing time: Tue 28 Jun 2022 13:12:03 +0000
ROA not before: Tue 28 Jun 2022 13:12:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2426033678 (0x909a560e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 28 13:12:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b721b389356c0be8606ece6fc60c5506c061047a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:d0:da:97:e8:69:d4:cd:6b:25:f6:14:89:
ed:6f:13:e4:0c:02:f0:e8:b6:e6:d9:ac:23:c6:eb:
0e:df:e5:f9:81:ea:27:f5:f0:68:6c:a3:80:c4:9c:
46:9a:72:86:ee:82:88:a2:93:4e:3f:af:f9:5a:9e:
18:ac:71:47:6a:23:c8:d2:f5:d1:e4:d9:d5:30:26:
a3:ce:a1:3c:f1:b0:3f:67:c7:52:ca:cf:d0:c4:10:
5c:6d:38:e7:6a:3f:2c:15:48:df:af:41:97:1a:09:
c5:6e:fc:d9:2f:c7:2a:24:4e:0f:7d:d3:a1:1b:e2:
73:86:c5:64:70:9b:76:53:80:4d:68:40:f7:10:14:
7d:5e:12:27:d0:9a:d9:04:68:23:6f:1e:92:ab:4d:
2a:d5:4a:78:1b:3b:00:b6:32:51:64:84:3a:96:48:
4a:99:69:3d:18:c3:9c:a4:5b:86:43:d7:76:53:2c:
cc:1e:42:f3:82:50:41:36:70:72:ad:49:cf:b2:14:
c2:d6:04:45:07:7e:e3:41:b9:01:65:9f:89:26:05:
99:11:7f:a7:67:0d:cc:67:65:9a:19:bc:7b:8c:41:
10:b5:e7:ce:65:56:0b:d9:a7:22:87:da:99:67:ba:
e9:92:d8:45:96:ef:48:f5:f3:90:cc:e0:2b:c6:37:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:21:B3:89:35:6C:0B:E8:60:6E:CE:6F:C6:0C:55:06:C0:61:04:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tyGziTVsC-hgbs5vxgxVBsBhBHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:eb:c4:31:1e:74:b0:64:26:83:84:40:72:42:29:c2:10:40:
48:a5:9b:60:f1:b7:18:f5:e7:9a:13:f1:40:b8:86:b2:f3:19:
e8:29:6c:3e:cf:fa:4a:fe:48:1f:78:e2:c4:ca:fe:dc:3f:ad:
1b:37:9c:95:d8:1d:93:53:88:5b:8a:a5:4a:f8:0a:65:2b:ba:
8c:07:48:bb:c5:50:5b:06:af:c5:4d:cc:c1:cd:7e:01:45:6e:
28:1c:e2:7c:f9:43:c5:11:ac:5c:7d:88:2a:66:c1:6f:d7:bd:
5e:f5:96:32:e9:d3:47:5d:a2:6b:4b:54:49:97:28:48:14:5a:
79:df:db:f7:55:29:9e:db:50:ba:39:b2:d7:57:25:ce:ca:74:
41:16:30:50:7c:17:a8:b4:e4:e5:39:f2:d9:eb:08:9d:1e:c3:
43:bd:d8:3b:4d:ee:86:da:29:e4:2a:35:03:57:ee:bc:24:39:
33:79:52:2c:fc:af:72:86:ad:4a:dc:e3:61:58:e3:aa:c3:43:
e7:3f:b7:d9:7c:b4:70:c8:5e:7f:b9:8a:bc:ed:14:72:17:29:
09:0a:d8:e2:0f:3c:a4:26:c8:fe:60:15:d9:f0:78:f9:9c:e5:
ab:14:b5:6e:b4:b4:1a:a2:0c:25:5f:e1:79:9e:e9:81:71:46:
7b:4a:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:05 2025 by rpki-client