Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TZoD684QSA4oYPurfiW6wTR0hno.roa
File: TZoD684QSA4oYPurfiW6wTR0hno.roa (raw, json)
Hash identifier: 4NYAjwYMYqCUTzNM44H9SlbGZsVxtTJfDEwYuhZyA7Y=
Subject key identifier: 4D:9A:03:EB:CE:10:48:0E:28:60:FB:AB:7E:25:BA:C1:34:74:86:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018482EAEB24411387D42A928DD8BFF35417
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TZoD684QSA4oYPurfiW6wTR0hno.roa
Signing time: Thu 17 Nov 2022 00:09:04 +0000
ROA not before: Thu 17 Nov 2022 00:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:82:ea:eb:24:41:13:87:d4:2a:92:8d:d8:bf:f3:54:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 17 00:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d9a03ebce10480e2860fbab7e25bac13474867a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1d:50:78:f6:a2:6c:19:15:4d:16:1b:a5:f1:
8d:76:3d:8f:2e:6c:6f:2a:2f:dd:cc:10:ea:e6:08:
f0:91:e4:6f:d8:86:60:60:33:d8:32:00:23:6f:81:
66:56:8f:2b:cc:ab:11:73:30:06:ea:23:43:c8:e8:
12:79:38:9b:da:99:12:94:b4:2d:a6:ce:42:dc:14:
01:15:2d:7f:43:41:1a:65:69:6c:0c:9e:d8:0a:d5:
09:97:0a:41:f0:42:56:41:46:31:f2:bf:43:8a:2b:
21:a3:25:26:8c:ab:00:17:73:ef:90:cc:90:92:7e:
ec:6e:10:15:7c:c1:7f:29:b3:4f:a5:15:45:1d:10:
6e:9c:6a:20:15:89:64:d7:af:7d:1f:7d:0e:68:b3:
67:be:49:07:af:3d:e3:a5:6c:fc:94:36:0f:25:5e:
ee:47:f0:09:ff:df:9e:82:1e:e7:c5:e8:b3:6d:d6:
fe:92:58:c2:22:0a:f9:c6:8f:f3:b2:ef:ed:f8:14:
92:9b:ae:67:2a:b5:31:fe:92:11:17:c9:ad:bb:97:
7d:0f:bd:f0:fb:9f:22:c3:63:c3:74:72:69:73:db:
ef:72:f8:7a:55:e3:ac:e0:0b:63:40:26:e6:b2:9b:
54:b7:0e:74:c1:6c:77:a4:04:c2:cd:1d:d4:77:ec:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:03:EB:CE:10:48:0E:28:60:FB:AB:7E:25:BA:C1:34:74:86:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TZoD684QSA4oYPurfiW6wTR0hno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:3f:b7:42:ad:90:38:5a:9d:a3:00:d0:9a:23:b9:1f:e7:85:
4a:e4:6d:83:9f:bc:de:68:2c:70:80:60:10:bc:79:b4:2f:74:
08:6a:59:bf:bb:24:3f:55:ce:b5:42:53:c9:65:fc:b9:58:de:
58:68:2f:6c:b2:c9:02:d5:93:be:f8:3e:57:3f:0c:45:22:2b:
99:7a:df:f2:7d:c8:90:58:1e:00:ff:f7:9a:6e:f6:07:cf:61:
6d:7e:98:2d:af:fd:71:3c:61:ad:14:78:91:88:ce:86:5e:48:
08:ff:1e:09:3a:f8:5f:80:30:17:fb:03:0a:14:91:bc:65:e4:
c9:cd:f5:4d:65:9f:5e:bd:8b:5b:d2:b0:f8:46:e9:35:a2:a9:
d1:c1:11:60:e0:90:9d:56:54:8b:ac:af:99:04:bc:cf:c4:5a:
6a:46:f6:fd:20:05:9a:88:23:ad:eb:ae:a5:ee:85:25:3c:28:
23:1b:4a:87:7c:9b:60:c7:01:c5:62:b1:9f:c7:6c:90:48:fb:
e9:5c:df:03:12:02:a3:4a:9c:cb:e7:a7:13:41:1c:f7:84:8f:
76:5e:66:52:62:c7:c7:cb:b2:89:55:18:0b:c1:6c:88:b6:82:
47:12:f5:5c:d5:3b:a3:e4:7e:99:9a:26:92:1e:53:65:25:f0:
66:9a:c0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:09:43 2025 by rpki-client