Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T5NIXrXp-BFQPYB8jJkFRa-TzlE.roa
File: T5NIXrXp-BFQPYB8jJkFRa-TzlE.roa (raw, json)
Hash identifier: zzFTTsf6srSc5UUH3pstBtzLKcJ8bAiM2JSBN7GZnKo=
Subject key identifier: 4F:93:48:5E:B5:E9:F8:11:50:3D:80:7C:8C:99:05:45:AF:93:CE:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A347EC8B5B4C391CC83F841B2C47D918
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T5NIXrXp-BFQPYB8jJkFRa-TzlE.roa
Signing time: Sat 29 Jul 2023 20:12:26 +0000
ROA not before: Sat 29 Jul 2023 20:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a3:47:ec:8b:5b:4c:39:1c:c8:3f:84:1b:2c:47:d9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 20:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f93485eb5e9f811503d807c8c990545af93ce51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:ff:02:94:4d:fd:2e:67:5d:9f:e7:e6:11:
54:b6:0d:9d:10:03:bf:af:3c:fd:ad:5c:ab:c5:47:
6f:20:72:c8:5e:69:b8:21:48:66:93:3f:35:b4:31:
f5:2c:9d:bd:32:63:02:48:d9:c4:5a:eb:90:41:b1:
e8:70:d9:b0:94:96:b3:11:2f:20:eb:73:96:88:32:
72:fb:72:79:a8:9f:9f:3a:3e:3e:a2:9a:ed:12:c3:
70:c9:e1:17:33:68:21:4d:92:7f:2f:ad:f7:6e:e2:
07:4b:77:a0:8b:ae:1c:96:6b:35:19:06:d7:29:7b:
92:4d:af:f2:e4:96:08:ec:59:9d:31:8e:bb:9b:74:
83:29:9e:cb:4e:54:9c:9c:d7:fc:a8:04:d0:14:97:
72:e7:9f:c8:5c:6b:d6:72:3d:85:e7:a9:16:73:82:
c4:8b:b6:ce:f8:f1:2c:89:6f:81:f4:9b:c1:fc:53:
1e:00:2e:ed:9f:d3:c6:13:fa:6e:29:2d:92:4a:19:
df:3b:44:c4:78:75:32:a4:54:cc:ae:ae:9e:0a:bb:
3c:21:ca:b1:19:d2:42:a5:7a:83:57:96:e7:95:7a:
a4:8c:c5:6a:cd:2f:b2:f2:a7:40:81:70:f3:75:0e:
dd:1e:27:4e:2e:39:5b:d5:2f:e4:f7:e2:62:08:eb:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:93:48:5E:B5:E9:F8:11:50:3D:80:7C:8C:99:05:45:AF:93:CE:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T5NIXrXp-BFQPYB8jJkFRa-TzlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:3c:cc:06:47:25:aa:bc:5d:27:36:bd:c6:db:5c:de:43:70:
74:cd:b5:31:a7:62:71:41:39:7d:28:cc:fa:01:e4:ce:b5:ae:
e6:9f:8d:78:dc:69:fa:32:30:1b:3f:3a:79:76:54:a1:74:99:
7c:7d:31:1a:9f:91:d7:3c:50:d1:03:cf:bf:4f:dd:3b:09:f4:
de:f4:83:40:38:41:3b:26:be:46:47:ba:c5:d1:fa:b9:2b:8b:
45:77:09:71:cb:f7:54:8a:ee:36:4b:2f:53:db:c7:57:6f:a9:
ee:b0:14:ea:32:d7:f1:ef:df:e9:6b:7e:c1:3f:fe:4e:8a:27:
9d:03:07:ac:e1:03:b9:47:2f:7f:26:b7:54:1c:8f:3a:cd:b8:
33:dc:31:a6:55:7b:cb:61:4b:76:77:3e:78:d4:6e:62:0b:5c:
11:d9:9e:80:22:1f:86:c0:f7:56:aa:99:00:d6:ed:55:25:44:
3e:f6:08:4f:4e:6b:20:80:e6:e9:ca:79:df:67:a4:94:6a:13:
40:dd:ae:bb:11:35:ca:56:72:bc:ce:d2:c9:23:55:bb:e8:e7:
2a:55:96:f4:ba:e2:fb:86:68:23:cd:47:61:d1:5b:51:39:18:
82:10:23:54:78:91:66:85:28:44:59:12:c1:1d:56:b0:1e:3e:
c8:46:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:15 2025 by rpki-client