Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJQwrP-VE5NFERvceCMmsnnbVcE.roa
File: TJQwrP-VE5NFERvceCMmsnnbVcE.roa (raw, json)
Hash identifier: S3zOla+j3G9e5nS1rqDkl1GCcyJJDHTS2jzw48mA2Uc=
Subject key identifier: 4C:94:30:AC:FF:95:13:93:45:11:1B:DC:78:23:26:B2:79:DB:55:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D2EA325F791D7C8595F04DB53F0A4536
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJQwrP-VE5NFERvceCMmsnnbVcE.roa
Signing time: Mon 19 Jun 2023 09:09:03 +0000
ROA not before: Mon 19 Jun 2023 09:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:ea:32:5f:79:1d:7c:85:95:f0:4d:b5:3f:0a:45:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 09:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c9430acff95139345111bdc782326b279db55c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:85:16:32:9e:16:ca:bc:cb:1a:5f:99:f7:
2e:e5:10:94:ee:a7:01:52:bc:45:7c:9a:f1:10:9c:
a9:dc:94:fe:61:7d:cf:0b:09:71:72:73:b6:35:52:
2a:f5:73:a6:59:73:e3:c2:15:71:3a:18:b0:cf:a7:
66:97:d7:7b:56:8a:05:dd:73:86:eb:a4:af:ad:92:
aa:52:0e:94:d6:f3:26:07:44:1e:99:f0:56:e2:99:
07:00:ee:ef:ef:ff:44:0a:01:d5:30:78:2c:de:a3:
fc:85:75:96:0b:ad:05:7e:81:d0:2d:69:86:f1:44:
1c:0e:df:d6:ce:c8:e7:2d:c4:16:8d:9c:24:e0:83:
59:6b:16:54:bf:8c:f2:35:8b:6b:f0:f1:d3:d5:6b:
fb:7c:ee:9a:0c:c0:c7:e2:24:21:a4:0d:a1:24:43:
d0:50:a3:f1:1f:c8:d1:c5:2a:89:3b:26:51:e0:09:
4f:db:89:d5:a7:32:12:1d:c5:ca:3c:88:dc:fc:95:
94:50:9f:ad:41:10:28:84:dd:47:24:c4:67:29:0a:
c9:35:ce:da:6d:b2:e9:ba:1d:3f:f2:4e:b0:3a:3d:
5e:ca:7f:df:2a:8d:9a:24:81:b7:4d:06:bb:bd:52:
29:7c:77:76:73:3c:2b:8b:9f:43:df:f2:3f:f1:74:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:30:AC:FF:95:13:93:45:11:1B:DC:78:23:26:B2:79:DB:55:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJQwrP-VE5NFERvceCMmsnnbVcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:e0:28:4d:60:ce:7e:32:47:5a:4e:03:ff:d2:a1:55:69:b3:
36:95:97:00:b5:32:43:dc:ac:0d:65:a2:75:cb:6b:27:ef:58:
ba:45:2c:ba:23:24:db:82:f1:1f:80:6c:a4:53:c8:81:0d:6b:
8c:0f:98:32:92:a6:15:3a:ba:53:f7:ba:93:c2:d9:68:35:11:
e6:d7:09:b4:73:4a:d6:bc:f5:d1:67:a6:e1:9e:f7:0d:0d:b2:
f9:2c:d0:71:15:73:37:63:dd:c3:ac:98:f0:7f:5e:07:c9:a8:
9a:fc:62:30:93:07:96:cb:a8:a8:15:55:06:61:d4:a2:ac:37:
ea:42:d6:af:f0:d4:34:08:31:ef:05:94:65:c9:da:92:e0:e5:
58:5f:0b:d7:a6:b5:6b:b4:10:ca:ae:4c:5c:2f:47:ca:00:f5:
7b:55:2f:0c:3f:56:6d:b1:76:06:98:e4:5a:66:0b:24:72:a6:
1c:4b:b7:d2:22:84:f6:06:8a:c9:f5:1c:05:a8:7c:7d:e0:ca:
97:a8:d6:b8:6d:17:05:8b:49:76:25:43:e1:07:40:ce:92:82:
95:05:01:8a:88:86:18:16:82:c2:54:d2:f0:89:63:77:75:08:
79:fa:f4:46:61:6a:b6:be:35:ce:87:13:d6:6f:db:f2:c2:da:
22:cc:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:45:41 2025 by rpki-client