Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TQ1NICieF1iWxhlfHX5VwUbbdoQ.roa
File: TQ1NICieF1iWxhlfHX5VwUbbdoQ.roa (raw, json)
Hash identifier: vdMgjMkGC4Wqh/NamBcPqn9JQtLJUQ4WrmHL/U3hrPQ=
Subject key identifier: 4D:0D:4D:20:28:9E:17:58:96:C6:19:5F:1D:7E:55:C1:46:DB:76:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018979DF07D3FE08B0681DA9C9BE0024D3C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TQ1NICieF1iWxhlfHX5VwUbbdoQ.roa
Signing time: Fri 21 Jul 2023 19:13:26 +0000
ROA not before: Fri 21 Jul 2023 19:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:df:07:d3:fe:08:b0:68:1d:a9:c9:be:00:24:d3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 19:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d0d4d20289e175896c6195f1d7e55c146db7684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6c:26:2f:8d:16:ff:25:c5:15:c3:90:b2:00:
fc:40:0b:00:b3:49:12:92:39:c7:89:b1:b7:87:96:
78:d6:89:b8:35:b8:0c:37:e2:8f:66:03:aa:f4:5c:
e6:2a:cd:84:d6:69:c0:77:cd:88:94:f2:62:df:69:
24:1c:ba:7e:67:d6:73:01:d0:9c:93:c7:a6:a9:49:
4b:45:6e:8b:1b:3f:12:ff:4a:48:a3:bd:9b:68:b2:
99:f5:1b:26:ea:38:ef:f7:2d:ff:53:f5:45:c5:8c:
a2:37:0e:26:ef:b1:88:ed:49:0f:af:45:22:c4:3d:
13:48:24:4f:b0:61:06:55:e5:5a:19:1a:7f:d6:0a:
5a:16:95:c1:e6:9a:63:c0:71:52:ae:df:b5:96:fa:
ba:9f:6d:8c:f4:b7:90:df:7c:c7:86:45:fe:ef:bd:
25:ca:55:23:29:d1:d6:83:8e:2a:89:82:07:f4:7b:
8c:bc:af:cd:dc:b0:d3:6d:6e:d7:08:0c:cd:fe:d1:
59:a3:1e:02:c8:69:99:ed:4b:7a:af:18:54:bf:cd:
48:f1:af:4b:f1:e3:e1:6d:f3:93:1f:bb:bd:ec:65:
04:3f:1a:5d:86:f7:bd:17:9e:a8:a6:7e:7c:e7:8a:
10:fd:8b:b2:f1:a1:0f:d4:23:c5:cb:90:ba:d3:33:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0D:4D:20:28:9E:17:58:96:C6:19:5F:1D:7E:55:C1:46:DB:76:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TQ1NICieF1iWxhlfHX5VwUbbdoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:8a:c8:00:13:9f:9b:cd:ff:28:86:27:0d:0f:6d:13:99:d5:
c6:bb:76:20:4e:e8:56:2e:6e:c8:97:63:4f:f5:9b:d9:d7:74:
a0:3f:f4:f5:23:b4:3b:0f:43:63:55:84:25:5f:0f:44:c7:18:
7c:7f:1c:32:44:23:1b:e9:d1:93:56:d9:b1:48:15:5b:23:24:
4f:78:7c:83:e9:30:c2:ad:5d:94:c5:da:dd:5f:0f:f6:25:3b:
41:43:12:0d:e3:eb:05:46:1f:29:48:12:9f:b1:48:60:fd:2e:
bf:7d:a2:90:15:6e:91:7c:c6:86:88:86:bd:61:3e:a3:4c:20:
4b:0a:1a:31:1b:ae:24:78:be:13:bd:80:5b:6d:a5:3c:87:b3:
d0:0e:3b:9a:fe:7e:4c:bb:3c:87:4b:6d:a5:3c:b4:c7:1c:19:
df:b9:60:b1:75:b3:af:13:9f:3d:0c:25:bc:ac:68:b2:1d:8d:
30:9b:83:c0:1b:a2:81:d0:a8:1d:b9:6f:e0:9b:1c:7a:24:7f:
dc:fe:2a:45:76:3a:45:c2:e6:e0:57:e6:3b:1f:a3:15:df:8e:
fe:8a:68:ca:23:6b:d2:93:7c:ea:36:d3:c3:62:ea:96:8b:25:
c8:2c:bc:9d:b3:c3:92:2f:1f:d3:47:a8:1a:fb:45:8e:7f:ee:
21:2a:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:37:00 2025 by rpki-client