Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TggZmgCnBERQw3pqfr6wNV40YKo.roa
File: TggZmgCnBERQw3pqfr6wNV40YKo.roa (raw, json)
Hash identifier: alNgow49LVD/WSesxGfeQrTFtEUoRgVWCP67np67JMY=
Subject key identifier: 4E:08:19:9A:00:A7:04:44:50:C3:7A:6A:7E:BE:B0:35:5E:34:60:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 87ABAE64
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TggZmgCnBERQw3pqfr6wNV40YKo.roa
Signing time: Fri 27 May 2022 15:09:13 +0000
ROA not before: Fri 27 May 2022 15:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276175460 (0x87abae64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 15:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e08199a00a7044450c37a6a7ebeb0355e3460aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:3c:16:84:73:19:c6:e8:4d:f6:14:04:e1:
09:d1:99:0e:be:35:74:7a:2b:ed:25:a0:77:b2:77:
b1:16:a0:0d:ab:d6:42:f5:88:f3:b0:8f:90:c5:fa:
23:00:79:66:9f:df:19:d1:5b:fd:67:38:43:5f:2b:
f5:14:14:cf:01:77:41:6b:56:88:84:2f:a6:37:6d:
30:dd:2e:30:61:2f:09:ab:81:c0:97:ac:15:b5:6a:
b2:6c:4f:a5:f0:59:75:45:ba:d7:b9:8b:16:a1:46:
29:f5:5d:c9:9f:dc:fd:f5:a0:f5:52:51:4d:77:c1:
67:80:02:92:f3:31:96:75:72:21:c7:0d:60:67:c0:
9a:dc:09:a0:6b:e1:38:de:4d:da:3f:cd:44:d2:42:
18:75:1f:2a:c1:d7:ff:19:03:c6:13:28:0f:d9:6f:
83:74:33:73:29:6e:c7:16:69:ca:81:a1:16:94:b1:
47:65:64:34:c4:2f:02:2f:d0:31:de:8d:f2:cf:08:
25:39:0f:f8:1a:dd:4c:af:c2:58:50:07:84:24:79:
79:53:b3:2a:76:ce:fd:ae:75:94:02:77:a6:c9:a4:
0f:be:0f:dc:ce:dc:38:b9:52:a2:59:70:0a:43:07:
a3:d4:0d:8e:bc:3c:c0:b7:eb:4e:86:d5:61:12:60:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:08:19:9A:00:A7:04:44:50:C3:7A:6A:7E:BE:B0:35:5E:34:60:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TggZmgCnBERQw3pqfr6wNV40YKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:80:fd:90:bf:5a:4b:10:87:5e:e1:28:64:72:00:58:73:4b:
d1:78:c6:73:a7:5e:1f:9b:e5:be:a3:24:29:77:a7:46:69:d4:
c6:29:ae:bb:61:14:b0:df:25:2c:11:c9:d7:ce:9b:9d:cc:1c:
be:19:9a:c6:43:64:a5:dd:83:ba:ef:be:0a:1c:e6:42:83:d8:
c8:e1:81:bd:5d:2e:0e:3c:1c:66:b1:3f:89:b1:17:f2:c9:58:
6b:e8:44:90:f8:11:55:1e:7d:c7:e0:89:93:1a:e0:b6:06:78:
0d:2f:f1:cc:84:97:0d:6e:51:c4:3a:c1:e6:0c:7f:20:a0:a0:
4a:47:a7:27:57:1f:18:f4:d0:0c:93:16:dd:7b:a7:20:5a:48:
d0:fd:07:59:c0:2a:1e:be:82:a5:c3:f0:fc:36:aa:fc:56:cc:
dd:85:e9:ab:02:87:95:da:2a:61:86:fa:aa:0a:b7:51:fa:81:
eb:21:10:3c:bb:4f:67:3b:e3:12:b9:95:e0:83:e8:54:5f:59:
0a:b9:5d:ed:5f:f6:15:b9:92:73:fb:10:36:c2:d8:02:48:5f:
6c:0a:29:19:40:ed:1d:de:90:bc:dc:4a:f1:0a:f5:f7:b4:3f:
ca:b0:44:4d:37:82:34:de:6b:f0:8a:9a:28:77:6e:f8:a5:3b:
0e:e1:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:18 2025 by rpki-client