Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TskiDRFynVZpHRj2tG4TF0cTPTc.roa
File: TskiDRFynVZpHRj2tG4TF0cTPTc.roa (raw, json)
Hash identifier: so0FyObOyHAAtvqaKopIRSMBXfsohugoAhqc7KqDqDU=
Subject key identifier: 4E:C9:22:0D:11:72:9D:56:69:1D:18:F6:B4:6E:13:17:47:13:3D:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C41BED389110579F913BBD5C3F392803
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TskiDRFynVZpHRj2tG4TF0cTPTc.roa
Signing time: Fri 16 Jun 2023 12:09:04 +0000
ROA not before: Fri 16 Jun 2023 12:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:1b:ed:38:91:10:57:9f:91:3b:bd:5c:3f:39:28:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 12:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ec9220d11729d56691d18f6b46e131747133d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:a5:13:22:5f:af:01:c8:54:86:51:0b:8b:
1e:f7:82:8e:1b:88:5c:f5:7e:c9:d4:ef:2e:74:44:
d7:bf:b3:8c:db:8b:68:37:86:97:b4:dd:76:2e:87:
ac:fe:26:8a:a2:1a:52:1a:aa:ef:e8:c9:37:dd:d0:
6d:cf:32:73:73:c8:ff:c2:80:0e:54:86:43:1b:03:
8f:6e:c1:25:b3:f8:bf:c7:84:84:70:99:76:91:28:
79:ec:c7:ce:dd:8d:36:30:c6:83:7c:73:08:1b:85:
5e:c6:b1:ff:dd:c8:27:0a:bf:57:d0:b1:04:6b:9f:
2a:e6:47:fa:44:e9:01:d3:f2:62:39:4b:db:e0:0f:
35:34:51:cc:ac:b8:cc:a6:a2:d5:d4:64:f8:4a:88:
42:da:9f:6e:98:99:19:85:9a:f6:16:2c:ac:d1:60:
cf:d8:1f:f2:07:cd:b9:da:a8:d2:50:50:7d:f3:bf:
56:5f:fd:c8:01:93:d0:0b:c1:f4:91:3d:32:4b:2f:
be:cb:d9:56:11:78:a3:ca:35:d8:98:f1:b4:8d:d3:
6d:08:46:01:c3:ae:ad:1e:6b:e4:6a:2d:75:c7:0e:
cb:7b:2f:19:50:a0:73:da:df:78:ec:52:67:b0:a1:
df:ec:41:c8:56:98:db:0a:be:4c:9e:6a:a4:81:c5:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C9:22:0D:11:72:9D:56:69:1D:18:F6:B4:6E:13:17:47:13:3D:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TskiDRFynVZpHRj2tG4TF0cTPTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:40:f3:61:f4:6b:cf:56:a1:ca:0b:84:cb:3a:7f:59:f2:9b:
0c:72:e6:94:85:d4:81:79:29:24:b5:44:32:53:77:0b:4a:d0:
45:81:1a:2d:42:f2:08:9a:4e:a9:c7:4a:cb:c6:d5:0a:a7:a7:
24:8b:72:df:b9:f4:d5:57:2f:b8:fc:b3:d7:66:d5:cf:b5:88:
a2:e9:0a:d1:f0:a1:97:6b:7b:ca:ca:ea:ee:4e:45:6b:39:be:
03:5e:f4:84:23:da:ba:51:5e:6b:79:dc:fd:0d:21:b3:3b:4a:
61:b6:b1:c9:84:94:78:79:c0:84:59:a6:a9:f0:29:cd:20:e8:
38:ce:9b:b7:18:4a:fd:e9:9b:20:27:bf:65:e1:6c:02:1d:81:
4e:da:d0:62:e7:33:45:77:d7:98:ef:a9:21:47:8e:b4:de:7f:
5a:06:9b:53:6e:2b:05:c7:c2:84:dc:ce:3a:25:9e:ae:5b:3d:
0a:2b:da:60:84:81:e0:40:79:51:73:30:df:52:af:4f:93:42:
2d:ea:fc:53:28:39:03:bc:e6:d9:a9:8e:6a:1f:ef:0a:b7:a2:
1a:f1:cf:5b:14:ec:94:dd:de:18:96:9c:bd:86:00:6a:32:f1:
33:3c:42:6f:fe:0c:d3:d2:05:69:24:48:4b:fe:54:8b:8d:ce:
51:c8:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:37 2025 by rpki-client