Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TFMsJQ9iLO_57saJ-_RyW_wNBs4.roa
File: TFMsJQ9iLO_57saJ-_RyW_wNBs4.roa (raw, json)
Hash identifier: CfnerRs4Ba/cSRKWBhDtqoUK8Tgz7oTjg+H3P9Y6aZM=
Subject key identifier: 4C:53:2C:25:0F:62:2C:EF:F9:EE:C6:89:FB:F4:72:5B:FC:0D:06:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188741374A331219CE4093B20CF44B7776D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TFMsJQ9iLO_57saJ-_RyW_wNBs4.roa
Signing time: Wed 31 May 2023 23:10:12 +0000
ROA not before: Wed 31 May 2023 23:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:74:13:74:a3:31:21:9c:e4:09:3b:20:cf:44:b7:77:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 23:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c532c250f622ceff9eec689fbf4725bfc0d06ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:74:cd:3b:61:5f:a9:2a:60:2a:1b:19:c2:
bb:81:f0:9d:c9:ee:35:bb:e8:4e:c1:8c:b6:3a:f2:
1b:3e:21:df:8d:27:a9:e5:3f:a1:ce:a3:71:cd:27:
23:3f:4f:79:22:db:63:a8:7c:52:9c:fe:33:8a:28:
2f:f8:29:7c:1e:89:a7:dd:db:5f:ef:9f:b3:7a:bb:
ec:ef:a2:74:4d:f3:73:ce:ce:4a:bf:eb:85:d8:8c:
5e:8b:7b:de:5f:16:f1:cd:af:2d:96:d4:eb:77:6c:
51:f4:4a:c8:25:0d:ab:80:eb:92:64:88:d1:99:f1:
cd:a6:09:19:9c:42:81:68:2d:3b:c2:d2:9e:5c:42:
35:c2:08:e2:bb:26:a9:d0:06:10:8b:8d:42:9a:c6:
22:8f:f7:6c:7d:39:89:1e:f3:60:3e:1f:96:68:3a:
b6:10:d7:fa:bf:34:35:78:9e:04:9d:5e:04:b3:c8:
9b:fe:80:50:9d:9e:82:b7:4d:91:ac:23:ce:9b:01:
b0:de:1d:1e:85:fe:48:dd:e2:70:1f:fe:a7:8e:08:
a9:05:17:82:48:8d:08:65:c4:de:e7:47:02:04:49:
49:83:a1:b1:be:c4:d8:ba:d6:bb:20:e3:f3:eb:94:
76:d0:5c:03:ba:6d:6b:09:2e:71:4c:fa:1e:18:93:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:53:2C:25:0F:62:2C:EF:F9:EE:C6:89:FB:F4:72:5B:FC:0D:06:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TFMsJQ9iLO_57saJ-_RyW_wNBs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:17:d6:7e:cd:89:2d:c4:54:28:bb:4d:9e:88:0b:ed:8c:09:
f7:9e:6c:44:07:06:d4:5e:62:0d:93:df:c8:12:9a:2f:9a:6f:
ee:ab:27:6b:b9:66:e4:9d:ab:67:32:ce:37:b7:64:12:7e:18:
fa:63:4a:e8:c8:56:1f:36:28:46:7d:d8:b7:70:03:93:36:58:
34:53:c3:50:79:c6:ed:d5:f5:c8:aa:4a:8a:df:1b:6f:3e:a3:
0c:83:34:34:42:5b:88:b6:9c:99:ad:02:ac:4f:5d:e3:7e:d4:
b6:d8:7c:75:f2:1b:42:57:9b:90:cc:9a:8c:8f:fe:6d:ab:bc:
b3:3a:c2:f6:a6:fe:03:6d:43:f9:55:0f:30:37:c0:67:54:dc:
8c:1b:40:6e:74:e3:29:24:3d:8f:5e:5d:5e:6e:dd:33:55:1f:
26:61:0b:58:20:da:13:84:1a:ed:71:68:eb:cf:93:43:d4:bc:
79:fb:a1:50:1e:43:f9:06:26:2b:7c:69:30:c9:7c:be:61:d9:
74:02:b0:8b:c2:b7:9a:0c:ee:48:25:46:c0:51:5c:ad:30:c1:
0a:b5:c7:84:c0:25:43:66:f4:84:e5:c1:0e:25:c9:b8:15:5c:
9f:67:59:38:ac:61:11:8e:d1:26:7e:b7:d7:ab:cd:5d:6a:43:
e0:41:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:38:35 2025 by rpki-client