Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TUL4n9JO_398KLXCCZUeTQP7Iy0.roa
File: TUL4n9JO_398KLXCCZUeTQP7Iy0.roa (raw, json)
Hash identifier: o6NdiWbRGRwjCK3VdckBjVsM9BnqzRk89yI4jT5OEyY=
Subject key identifier: 4D:42:F8:9F:D2:4E:FF:7F:7C:28:B5:C2:09:95:1E:4D:03:FB:23:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018548FA4EB746FB9203D86BDA6947C0A839
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TUL4n9JO_398KLXCCZUeTQP7Iy0.roa
Signing time: Sun 25 Dec 2022 11:10:41 +0000
ROA not before: Sun 25 Dec 2022 11:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:fa:4e:b7:46:fb:92:03:d8:6b:da:69:47:c0:a8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 11:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d42f89fd24eff7f7c28b5c209951e4d03fb232d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:25:e6:3b:25:ce:60:33:1b:51:56:71:cf:
45:7b:49:93:eb:6d:d7:13:de:c1:18:a2:54:c7:12:
19:e9:43:83:f0:e5:25:58:01:40:91:9a:9a:af:18:
01:ab:03:ac:af:cc:25:97:1d:f1:68:e2:46:96:de:
26:b2:c9:22:9f:1c:08:96:74:a3:3b:bd:f0:d7:bf:
1d:c8:ef:d6:bb:6f:f8:14:5d:47:ac:53:cd:96:ca:
29:e3:fb:8b:c0:86:6f:23:aa:9a:e9:9a:99:a3:49:
59:51:45:1f:a3:cc:35:25:e0:e0:57:c2:d9:ff:62:
73:2d:f9:b3:84:c1:42:a6:4b:94:5b:71:cc:59:bf:
2c:41:d4:03:a7:fa:9c:0c:7e:a7:1b:44:38:9b:31:
02:c4:09:a4:6f:86:69:21:65:e0:7b:5a:1f:b9:f3:
b3:c6:d8:03:58:ec:23:2d:c3:6c:28:8d:5d:83:c2:
bd:a3:9d:09:ac:49:eb:46:1a:ad:f4:41:14:93:87:
8f:f2:81:20:6b:58:70:98:d0:bf:26:c4:87:e1:fb:
6b:7e:71:4d:82:29:8d:1e:54:06:b8:e7:95:60:cc:
7e:0d:3c:f0:c0:ac:b9:17:44:1c:f6:f6:fb:57:b1:
ab:71:d4:1b:06:2b:52:21:e0:e1:7f:d1:ec:1a:85:
98:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:F8:9F:D2:4E:FF:7F:7C:28:B5:C2:09:95:1E:4D:03:FB:23:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TUL4n9JO_398KLXCCZUeTQP7Iy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:6c:94:b2:79:f3:40:5f:92:6e:ca:ca:a5:be:1d:bb:80:d7:
1b:4a:04:75:63:ec:9c:d2:5f:b7:52:5c:cd:01:6c:50:db:9c:
a5:1c:0f:32:19:ea:4a:78:55:62:31:1f:0f:48:21:01:5a:26:
37:f0:c1:cc:03:75:48:8a:2e:29:a5:fa:3d:02:1a:0c:d8:5f:
10:ba:93:8b:4c:09:12:35:f0:47:de:af:1a:14:c6:06:cf:d8:
4c:01:81:6e:aa:5e:73:0c:ed:65:59:f2:a8:b3:6f:54:91:f2:
c8:77:65:01:95:a1:a0:7d:c1:d0:a5:73:bb:96:c4:8a:82:c7:
84:50:a6:bc:04:66:c8:b9:e2:58:dc:9f:57:dd:5b:49:83:d3:
eb:7a:43:39:86:fc:90:7f:ea:55:f0:ef:1d:19:36:ee:60:eb:
0e:c5:3d:ae:57:56:af:20:4f:22:13:8c:b3:27:46:96:ca:d5:
77:4c:0e:13:9c:74:70:a9:d1:25:27:47:dc:69:ba:fe:5e:42:
1e:af:54:2f:9b:69:9f:83:c7:aa:08:08:c5:2c:ce:42:fe:4d:
15:89:53:0d:0a:b0:cb:d4:8d:eb:e0:73:19:bc:76:07:e2:6d:
45:a2:14:66:7e:4d:f6:b1:82:78:6f:3b:7c:a9:f8:bd:53:12:
7e:d4:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:26:27 2025 by rpki-client