Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TjaRtXEpz-ClOKmeK1uZFChRHbM.roa
File: TjaRtXEpz-ClOKmeK1uZFChRHbM.roa (raw, json)
Hash identifier: XSvSZR0LPBN9peYVr1hJkTY7iJlt5xOM16hrubhcTrY=
Subject key identifier: 4E:36:91:B5:71:29:CF:E0:A5:38:A9:9E:2B:5B:99:14:28:51:1D:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0C6E37F1D5F11CDF49B3A2EF56DCB899
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TjaRtXEpz-ClOKmeK1uZFChRHbM.roa
Signing time: Sat 19 Aug 2023 06:14:24 +0000
ROA not before: Sat 19 Aug 2023 06:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0c:6e:37:f1:d5:f1:1c:df:49:b3:a2:ef:56:dc:b8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 06:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e3691b57129cfe0a538a99e2b5b991428511db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:51:c8:b3:2b:1a:7d:66:74:b7:4a:bd:5c:
45:05:9f:e8:9e:16:b2:48:6e:88:1b:89:99:cd:4d:
88:55:30:30:12:f2:42:7d:4c:35:f0:fe:23:33:d9:
9d:0a:87:96:a0:ed:87:b0:62:04:07:92:da:7e:48:
96:d0:29:ed:22:41:b6:d2:ca:e4:7b:82:9e:6d:f2:
9c:c9:47:71:3d:e3:61:ce:83:a3:8d:38:06:ac:22:
26:b0:b3:3d:b1:bb:bd:62:19:e4:db:28:2b:eb:0a:
f1:02:42:90:d8:a2:f8:94:12:a8:57:65:e9:d9:88:
45:a3:73:07:7c:3a:f0:43:fb:55:c5:76:d0:52:3b:
0b:4e:21:b2:41:c3:c1:bc:35:c4:5f:bf:2d:f7:19:
12:a4:f1:a9:b1:41:fb:4a:c0:67:7c:8d:1c:c6:6d:
cc:f6:ab:8e:1d:ee:85:7c:cc:e1:b9:28:8d:cc:76:
e4:aa:45:0f:05:70:c4:c4:b1:b0:e4:22:76:75:b2:
c1:23:f6:6a:01:1d:cd:bc:5b:98:2f:5b:fc:60:d8:
eb:dc:14:9e:ac:f4:ff:1b:f9:cf:b1:a0:f9:ee:7a:
63:80:45:50:5e:d8:53:f5:14:63:71:e6:37:29:28:
f5:34:a0:f6:12:b7:45:94:46:71:0f:be:7e:cb:50:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:36:91:B5:71:29:CF:E0:A5:38:A9:9E:2B:5B:99:14:28:51:1D:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TjaRtXEpz-ClOKmeK1uZFChRHbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:1a:0e:00:81:5e:b5:c3:8e:b9:eb:2f:fc:f3:05:2a:ef:ce:
9c:9b:96:4f:29:43:f2:91:9c:ce:93:a9:90:d9:10:dc:55:51:
dd:45:dd:54:19:1c:37:3d:59:2b:0f:8c:4d:4b:d2:83:07:f3:
d5:21:52:6d:cc:34:a0:37:95:22:dc:14:f0:af:f0:16:73:47:
bf:db:96:ce:03:72:48:f7:13:15:61:82:c1:fc:7b:33:b5:7e:
7a:58:6d:0d:0b:20:fa:00:75:59:9e:0a:cb:82:ad:ed:70:46:
59:df:b9:56:02:07:14:67:51:63:f7:43:8e:5d:1a:84:9b:7c:
c0:7f:70:0b:8b:cd:78:8e:6f:a2:33:49:9d:87:94:6b:76:05:
74:86:6f:a0:a7:08:9f:21:41:c7:2d:08:47:30:92:ff:29:6f:
3a:b0:54:ee:a4:96:2a:b0:22:92:db:15:d7:1d:21:57:63:dd:
19:ce:6f:7e:93:8f:ab:86:39:1a:69:75:da:31:87:d9:57:fd:
b6:df:f9:58:ed:0f:6a:92:27:ea:01:a1:0b:fb:d8:6c:f3:ee:
f9:6f:2b:05:4e:be:59:a9:19:de:f3:39:fe:39:e7:62:77:f4:
38:4e:e0:2d:c4:5f:2d:70:fb:cd:3a:f6:41:ff:27:ca:ea:c0:
ea:d5:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:48:09 2025 by rpki-client