Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TcXY2QJZkn28GgI5a6D8dWaA3ko.roa
File: TcXY2QJZkn28GgI5a6D8dWaA3ko.roa (raw, json)
Hash identifier: ped51aD4di5ztta9w2IFeEowWTp8VcwqVGtmAlV4Z0U=
Subject key identifier: 4D:C5:D8:D9:02:59:92:7D:BC:1A:02:39:6B:A0:FC:75:66:80:DE:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018858D35560DB8ABE063CB9A753FF4CF83E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TcXY2QJZkn28GgI5a6D8dWaA3ko.roa
Signing time: Fri 26 May 2023 16:10:24 +0000
ROA not before: Fri 26 May 2023 16:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:d3:55:60:db:8a:be:06:3c:b9:a7:53:ff:4c:f8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 16:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dc5d8d90259927dbc1a02396ba0fc756680de4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:a0:6b:93:8f:99:41:7b:eb:a1:08:4e:de:
46:2d:3d:76:aa:fc:05:eb:4e:dd:f4:26:c0:33:93:
d7:a7:b7:ea:53:1e:22:d2:e9:f4:16:96:3e:ae:a7:
db:6b:c3:ea:3e:f5:5a:7d:83:f1:74:41:1b:48:5f:
a7:4e:42:53:69:0b:5c:a4:79:eb:98:3e:7a:1f:68:
73:79:ca:48:6a:e8:70:e8:fd:a8:22:00:71:b5:dc:
b7:f8:a5:ea:68:66:62:bd:94:8e:51:5c:10:82:e6:
48:77:65:ae:77:3b:a4:23:78:56:52:80:d2:65:12:
f7:41:70:18:1a:23:f3:a7:d1:72:0c:a2:3d:c3:a4:
63:83:b9:c7:8a:3b:31:9e:00:e9:87:03:1a:8d:10:
01:04:d4:f4:f4:d8:5d:fb:d1:e2:4a:52:49:63:bc:
2e:93:90:00:20:9b:8b:13:13:26:99:44:28:65:17:
9b:fa:c5:29:b4:55:1e:af:8f:10:12:54:e4:92:67:
e2:98:77:05:90:0a:40:98:3d:b1:3b:07:ae:3c:0a:
01:3d:04:77:2c:3e:1b:1c:c5:cd:ac:6a:5b:33:45:
50:4f:6f:67:47:1f:cf:42:a9:d9:63:fb:d8:d2:55:
14:07:21:e4:c6:97:2c:f7:cd:14:12:21:e1:ca:d2:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C5:D8:D9:02:59:92:7D:BC:1A:02:39:6B:A0:FC:75:66:80:DE:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TcXY2QJZkn28GgI5a6D8dWaA3ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:d8:29:a7:15:08:93:2b:a1:dd:25:04:48:e4:f1:e3:76:72:
eb:20:d2:32:16:ae:63:5c:18:cc:8f:f0:83:6e:18:79:fb:2d:
5d:1f:22:81:a7:d7:7a:bf:b5:93:f7:ac:d8:25:55:c8:d2:bc:
6b:77:09:22:84:f7:f4:a3:91:a1:34:5a:d1:53:9d:96:f4:57:
83:16:2a:cf:77:99:3d:e4:2f:0b:53:31:a6:6c:d1:88:e7:87:
37:e9:e1:d5:8a:e2:a4:82:d9:10:b6:fe:02:b2:a7:60:20:bb:
2d:1f:3a:cb:a4:e8:f9:be:e1:2d:60:b3:fa:e1:b1:88:a4:ce:
cb:b4:c9:34:50:a4:30:c3:30:65:ae:94:07:11:c4:57:32:16:
9f:64:32:d4:27:a3:b9:83:6d:1f:af:95:b5:b0:d1:4f:e9:21:
65:75:24:f5:a0:4b:d3:72:65:81:77:ed:ef:05:e6:ab:09:a1:
7e:a2:95:84:a1:27:82:59:31:ac:ef:90:13:b3:fb:1d:d7:9d:
ac:87:a2:55:31:8c:3a:6b:21:72:eb:2c:87:50:33:99:68:a3:
ad:cd:0d:6c:39:1e:4d:a1:47:8a:f7:dd:b9:52:f0:da:9b:e2:
a1:af:b8:98:07:4a:14:b4:f9:ab:5d:07:51:b9:1f:3e:c1:df:
8e:c6:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:33 2025 by rpki-client