Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tpL8pfWNTqO2C7Swg7Ep9sNvZNM.roa
File: tpL8pfWNTqO2C7Swg7Ep9sNvZNM.roa (raw, json)
Hash identifier: Fkk6u3XwXea/RQTb2dr1I31EgfB+R81gGAE8G/JMSE0=
Subject key identifier: B6:92:FC:A5:F5:8D:4E:A3:B6:0B:B4:B0:83:B1:29:F6:C3:6F:64:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C9FE675B8B847B0A4C2FCBAE55C5BD5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tpL8pfWNTqO2C7Swg7Ep9sNvZNM.roa
Signing time: Wed 12 Oct 2022 02:20:36 +0000
ROA not before: Wed 12 Oct 2022 02:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c9:fe:67:5b:8b:84:7b:0a:4c:2f:cb:ae:55:c5:bd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 12 02:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b692fca5f58d4ea3b60bb4b083b129f6c36f64d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:e0:43:6a:68:ce:22:d3:3b:e9:34:8e:8d:
5c:5d:5c:f2:12:a0:22:18:00:a6:bb:e9:bb:71:11:
4d:c6:0e:10:c7:20:40:b5:7f:50:1e:ad:0b:75:63:
43:30:b4:97:6b:65:50:20:6e:d4:5e:07:f0:dc:bf:
f4:0e:48:52:f4:6d:0b:26:e6:81:2a:41:cb:8e:da:
91:77:17:fc:66:08:3d:d7:f5:c5:ee:91:da:fb:96:
5f:dd:ce:b1:0d:f3:36:d4:0e:59:c0:1b:b1:d1:bc:
bb:f2:62:3b:ab:46:5f:b7:4b:17:2b:3c:08:ab:a9:
e9:85:d2:ab:ad:a6:a8:08:26:4c:1f:d7:13:5f:9d:
9b:26:10:81:33:07:67:fb:4f:48:69:00:08:32:36:
99:16:9f:a5:9c:f4:11:4a:e4:f0:91:e8:e7:c2:b6:
d2:7e:7d:78:d5:88:44:fc:ff:e3:31:63:ec:e7:a5:
ce:1c:47:48:de:84:20:a5:d0:dc:3a:43:cd:ac:89:
de:5a:6f:c2:78:5e:84:0e:fd:1b:c0:72:71:2b:e4:
90:64:e8:14:5c:64:b7:05:54:24:ae:8f:28:3e:ca:
1f:de:d4:06:7b:64:fb:e4:6b:26:99:bb:44:f9:95:
39:02:3b:5d:aa:4a:d2:3d:8a:10:c8:b9:e3:24:08:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:92:FC:A5:F5:8D:4E:A3:B6:0B:B4:B0:83:B1:29:F6:C3:6F:64:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tpL8pfWNTqO2C7Swg7Ep9sNvZNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:57:91:d9:94:21:4e:56:7f:69:85:7a:d6:46:11:ee:0d:fd:
d0:84:3f:c2:f7:21:fb:ec:06:b0:f4:98:c7:9f:d2:21:61:64:
b9:90:84:ae:49:6a:e2:37:94:d5:bf:7e:53:e2:4d:c3:6f:0b:
ba:a6:0e:d3:37:fa:43:ea:c2:82:24:21:05:76:08:d9:7e:b0:
40:c1:b3:d6:a2:18:e6:ed:f2:ff:d9:05:53:17:a4:70:d3:40:
21:ea:42:dd:91:29:a9:e8:d8:91:17:85:2d:53:54:3c:a0:39:
d6:f5:5d:2f:72:73:18:8e:39:a0:b6:d6:4a:9c:86:b8:47:79:
89:bb:6b:c3:7d:42:09:b9:00:75:f0:27:91:21:c8:71:60:27:
07:9d:14:ad:32:b5:92:f3:2d:b7:a2:4c:ca:a7:f1:70:e7:98:
9b:46:f4:c9:69:32:7d:ea:f5:54:89:29:65:4e:86:6c:2e:db:
9b:4c:42:5f:29:11:c4:0c:26:d3:d3:13:65:e2:e2:b0:47:5f:
62:b1:c3:91:3a:81:a2:c3:84:a5:e4:35:29:e3:f7:46:5b:55:
2c:86:53:ff:6f:33:09:8c:5e:5b:74:5b:f3:75:04:e3:d0:ef:
12:fa:8d:d2:f5:52:42:d7:21:da:fe:16:dc:af:c0:3b:65:5e:
28:6b:66:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:30 2025 by rpki-client