Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TpxK-AVP_C-b6ZaDDMsb8rVChUw.roa
File: TpxK-AVP_C-b6ZaDDMsb8rVChUw.roa (raw, json)
Hash identifier: KlMPloJDIPOQMX4PcCGiFCMts7eHyoJWBTjF4bcvIxE=
Subject key identifier: 4E:9C:4A:F8:05:4F:FC:2F:9B:E9:96:83:0C:CB:1B:F2:B5:42:85:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018954B7FEBE35B00D2EB8A9017C1424CE1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TpxK-AVP_C-b6ZaDDMsb8rVChUw.roa
Signing time: Fri 14 Jul 2023 14:04:51 +0000
ROA not before: Fri 14 Jul 2023 14:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:189:54b7:7821/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:b7:fe:be:35:b0:0d:2e:b8:a9:01:7c:14:24:ce:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 14:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9c4af8054ffc2f9be996830ccb1bf2b542854c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3a:a4:5b:d3:70:d4:e8:0c:74:37:47:c7:cf:
71:b5:ce:e9:f3:51:88:dc:4c:78:b0:dd:89:06:f8:
a9:0a:e6:93:93:d8:fd:da:8f:0a:b4:18:59:cf:9d:
14:e2:f6:8c:4c:ce:d5:15:57:d5:03:b0:7b:37:52:
63:57:fb:1c:8e:1d:71:79:ae:7d:02:a4:a3:14:6e:
b7:10:bc:1a:5b:22:12:39:5c:bc:2c:af:e6:bc:4b:
89:30:88:e2:62:95:d4:d4:f1:74:74:25:ca:01:90:
c2:ed:70:b9:c8:bc:bf:02:17:a6:d9:53:ad:62:4c:
12:64:a0:3c:db:b4:c2:03:5c:be:37:b5:42:fc:c1:
f2:79:83:f9:1b:56:df:fe:24:ea:a0:f2:7e:69:4b:
dc:e8:db:be:cb:d2:89:d8:6a:0c:4d:95:81:82:d8:
b0:20:ae:e5:0a:af:f0:74:09:d6:8b:1b:bc:14:a1:
98:2e:8e:6f:8b:cf:df:58:01:21:4a:75:ef:ee:a0:
bf:90:a1:e4:4d:44:f5:6e:1c:45:29:8d:fb:c3:83:
56:9c:aa:0f:91:89:89:5c:86:10:f5:af:43:74:ca:
47:10:a7:b3:32:06:6f:fb:bf:b0:99:c1:b0:a5:26:
f5:f8:5b:fa:7e:96:27:47:c6:4b:19:87:70:26:dc:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:4A:F8:05:4F:FC:2F:9B:E9:96:83:0C:CB:1B:F2:B5:42:85:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TpxK-AVP_C-b6ZaDDMsb8rVChUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:41:ab:03:4f:1d:8c:ad:8f:8f:ef:04:af:2b:d6:99:b7:54:
a8:49:c0:d4:6d:70:ae:a5:f6:9d:2e:e9:36:f1:13:5e:08:e7:
ea:6e:b9:e3:62:6f:12:3e:67:30:d2:84:7b:0e:fe:f6:4b:42:
cb:07:d4:1e:47:0e:da:1c:cc:80:d8:ac:61:ac:02:f2:55:9e:
09:0b:2c:e2:a9:df:b6:e0:45:4a:72:f6:b3:14:dd:4d:8e:3a:
95:66:ee:a7:e7:ac:ba:5a:dc:f2:53:ca:51:04:4c:59:3a:43:
6b:c5:5f:47:42:4d:0d:ee:e2:b0:d2:65:cc:3b:0b:dc:c3:53:
73:7e:de:48:2f:dc:f6:61:78:f5:ff:b3:cc:3a:9c:31:e9:19:
d2:2f:12:03:4f:7b:25:1c:ed:9e:f4:24:59:19:d7:c3:93:ad:
5b:f4:18:ca:cb:0c:53:b3:7d:f3:c2:f3:97:03:e6:8e:a5:18:
3b:a3:f9:82:3f:56:6a:06:f8:50:e1:53:a0:15:f9:10:6c:5c:
ec:39:e8:e1:af:46:78:cb:93:ff:97:c4:5d:69:b7:f8:34:95:
fa:d4:68:75:2d:e4:59:16:b4:92:40:82:ab:f0:b4:51:46:e6:
da:ee:62:03:a4:71:cc:e3:2e:78:eb:d8:6c:30:a7:c5:44:eb:
15:87:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:35 2025 by rpki-client