Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4TBeF2tSjuzgZz1006tbtsd-gco.roa
File: 4TBeF2tSjuzgZz1006tbtsd-gco.roa (raw, json)
Hash identifier: 7e7+7tZE65Bkhl62/Absz5nyYGe//hBrYLpUDbUT6+s=
Subject key identifier: E1:30:5E:17:6B:52:8E:EC:E0:67:3D:74:D3:AB:5B:B6:C7:7E:81:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869903C27237597B2D515817F675B15288
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4TBeF2tSjuzgZz1006tbtsd-gco.roa
Signing time: Tue 28 Feb 2023 17:13:25 +0000
ROA not before: Tue 28 Feb 2023 17:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:03:c2:72:37:59:7b:2d:51:58:17:f6:75:b1:52:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 17:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1305e176b528eece0673d74d3ab5bb6c77e81ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:66:67:e1:b9:ec:cf:56:a6:d2:e3:b9:be:92:
e5:f8:5a:7e:c1:f7:8b:8b:c6:8c:ff:7c:10:cf:e9:
ea:7b:75:bc:27:2c:a4:2d:ef:b0:a9:14:bc:5d:47:
58:e9:20:41:96:52:64:35:3b:b5:78:48:3e:a9:c7:
28:9c:c6:84:1b:99:69:b9:31:88:19:87:58:78:62:
60:22:dd:11:69:20:f6:bc:32:f4:4b:d6:b8:42:86:
f4:23:4c:a5:01:26:32:93:ed:3b:86:eb:f9:f4:48:
a3:21:f2:26:18:a6:e7:9e:79:97:4a:ea:59:28:36:
e3:65:51:3c:f5:ad:60:6f:53:5e:7a:3f:f1:1c:aa:
6c:94:32:fe:89:ce:79:a5:8c:67:5d:d0:31:8a:0e:
82:19:da:cf:f8:7f:6d:b6:de:25:22:e7:d3:11:4c:
81:c6:64:f4:db:a2:98:ec:9c:66:e5:4c:bc:84:bc:
4e:3c:6b:dc:92:58:09:34:70:fa:4e:83:af:0a:d9:
7f:af:bf:c8:31:24:14:fd:22:2b:c5:32:68:91:81:
27:d8:02:e9:ba:53:34:c1:d4:4f:cd:62:2b:fc:b5:
03:15:9e:03:a7:90:84:bf:49:01:0f:f0:b4:09:6f:
8e:fe:f5:9d:46:20:09:c5:fd:29:26:c9:3e:c4:29:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:5E:17:6B:52:8E:EC:E0:67:3D:74:D3:AB:5B:B6:C7:7E:81:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4TBeF2tSjuzgZz1006tbtsd-gco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:e2:52:1a:81:e0:f0:46:15:03:78:50:80:12:5c:fc:17:25:
d3:8c:af:a4:c9:ca:3b:09:a1:e6:3f:50:56:21:3f:eb:d2:a0:
3a:15:b6:67:90:42:14:de:c8:6a:f1:da:51:d0:2e:51:4e:9e:
c8:16:76:54:8b:a7:1c:12:77:06:81:35:b8:b7:03:fb:f6:23:
b7:4c:5b:c5:c4:c7:ba:2c:b6:19:0a:ca:11:12:cb:0d:21:20:
81:ba:18:f0:77:3b:a3:36:c9:ce:50:1f:c7:8a:c9:6a:e7:e2:
56:3d:55:12:1b:94:53:ce:56:f1:db:db:08:7c:13:e0:ac:af:
e3:78:d7:66:5e:11:9d:91:8c:d6:08:f3:02:e7:57:52:eb:ea:
52:7e:01:e3:13:d5:c1:02:31:af:f9:b8:82:91:89:36:93:58:
9a:90:79:fd:4d:ea:7d:9c:8d:16:36:ca:14:a5:ac:92:5b:61:
ae:be:7d:d6:e4:4d:04:06:2e:ea:74:8a:8c:f5:42:99:80:39:
19:1d:ac:ab:8d:f1:02:05:2d:1b:be:6e:6c:0c:bf:3f:a1:e6:
d3:27:47:32:28:59:93:b3:73:5d:46:2f:bc:6b:cf:eb:30:57:
ce:a0:d8:10:35:b7:ce:5e:12:70:d3:f6:10:b1:db:bf:b2:6b:
f3:a7:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:11:13 2025 by rpki-client