Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ADTWBPTaKq8mnJr8Cfs6Sv-1m34.roa
File: ADTWBPTaKq8mnJr8Cfs6Sv-1m34.roa (raw, json)
Hash identifier: nECoH2w3uNhUJ+7svJ1l09M5UjWqVA5fDpc6TdfhnDE=
Subject key identifier: 00:34:D6:04:F4:DA:2A:AF:26:9C:9A:FC:09:FB:3A:4A:FF:B5:9B:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C9F2BABB711AFDB2DDC27C7C42330E8B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ADTWBPTaKq8mnJr8Cfs6Sv-1m34.roa
Signing time: Fri 10 Mar 2023 05:16:13 +0000
ROA not before: Fri 10 Mar 2023 05:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c9:f2:ba:bb:71:1a:fd:b2:dd:c2:7c:7c:42:33:0e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 05:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0034d604f4da2aaf269c9afc09fb3a4affb59b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:d8:bd:7c:14:69:d1:d7:5e:7f:4f:1d:8e:
4d:1a:b3:d7:0f:91:3e:44:54:5f:6c:88:2a:47:f2:
2c:b6:ff:07:ee:56:b5:69:9c:3b:ef:08:c2:4a:35:
69:96:2f:cf:b9:93:44:36:ad:3e:6d:cd:f8:b3:cb:
b8:48:88:28:ab:f8:d9:a9:4b:13:92:4e:a2:22:7c:
9b:7b:bd:76:bc:c2:14:0c:19:55:ab:a1:64:fa:6d:
4a:57:7a:9b:c2:97:18:e3:08:18:7b:5c:9e:60:9a:
d0:7f:03:38:3c:13:ae:8c:ba:81:a1:d9:3d:a1:e6:
3e:5b:9a:87:f7:c0:e0:fe:2e:2b:8f:03:73:b8:6b:
52:35:44:37:47:c2:e5:1f:f3:ac:5e:95:f3:f0:95:
a2:6a:c8:b2:28:7a:54:ec:39:7b:ba:c8:e9:20:37:
34:c4:a8:8d:5d:e2:c5:1e:96:d7:7d:2f:0d:9e:9e:
af:3e:36:6c:71:18:59:b6:8f:23:25:86:63:fb:2d:
60:3c:ef:80:7f:18:b4:bc:8c:9a:12:ac:5b:28:11:
fb:1b:c4:ba:69:19:6a:a7:f7:3f:a5:f8:7c:b7:e7:
39:d0:8c:71:31:da:38:8e:35:94:50:8f:3b:1b:84:
ba:d5:7b:a2:bf:eb:59:a6:ec:38:f7:2c:11:a8:df:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:D6:04:F4:DA:2A:AF:26:9C:9A:FC:09:FB:3A:4A:FF:B5:9B:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ADTWBPTaKq8mnJr8Cfs6Sv-1m34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:80:1f:92:83:59:ca:de:0c:ce:63:e8:35:43:02:f7:19:a4:
4b:a1:d2:32:80:cd:4e:6d:29:1a:f8:fd:f1:46:b8:1d:1d:dc:
80:da:7e:3c:a9:0e:5b:96:c0:56:fb:fa:e9:a6:c0:7e:40:b9:
2b:67:da:d1:b0:55:40:8d:09:ff:e8:01:cf:66:87:ad:a1:9b:
0d:69:20:27:94:fc:47:95:f5:22:e4:1a:69:1f:7f:6f:d0:31:
03:fc:53:92:9e:ba:e5:12:f0:d3:62:cd:b5:d7:ce:2f:d5:ed:
d0:69:c0:52:5a:01:ac:ab:d1:e5:03:96:ab:43:8f:1b:dc:bc:
ea:b6:98:ce:cc:24:22:6f:dc:b8:63:74:7b:1a:d3:e9:8f:74:
ba:94:c7:77:51:c1:15:00:d2:02:a8:a1:a0:91:b0:90:0d:9e:
f0:53:d3:79:35:51:b6:f4:17:88:2d:a4:f7:72:cb:a1:18:58:
4d:44:97:ba:ba:cd:9a:04:48:2f:5c:3c:63:8f:1a:23:3a:88:
bd:05:46:82:4c:2c:65:e1:ab:85:06:84:20:05:74:9b:51:0b:
59:ac:7e:b9:78:45:a9:c3:0a:64:d2:40:04:c0:3c:e4:5a:54:
cc:ad:01:fd:a6:6e:e0:df:e5:de:92:4e:50:dd:06:e0:ba:29:
dc:de:14:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbJ8rq7cRr9st3CfHxCMw6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzEwMDUxNjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDM0ZDYwNGY0ZGEyYWFmMjY5YzlhZmMwOWZiM2E0YWZmYjU5YjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVfYvXwUadHXXn9PHY5NGrPXD5E+
RFRfbIgqR/Istv8H7la1aZw77wjCSjVpli/PuZNENq0+bc34s8u4SIgoq/jZqUsT
kk6iInybe712vMIUDBlVq6Fk+m1KV3qbwpcY4wgYe1yeYJrQfwM4PBOujLqBodk9
oeY+W5qH98Dg/i4rjwNzuGtSNUQ3R8LlH/OsXpXz8JWiasiyKHpU7Dl7usjpIDc0
xKiNXeLFHpbXfS8Nnp6vPjZscRhZto8jJYZj+y1gPO+Afxi0vIyaEqxbKBH7G8S6
aRlqp/c/pfh8t+c50IxxMdo4jjWUUI87G4S61Xuiv+tZpuw49ywRqN9trwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAA01gT02iqvJpya/An7Okr/tZt+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQURUV0JQVGFLcThtbkpyOENmczZTdi0xbTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJCAH5KDWcreDM5j6DVD
AvcZpEuh0jKAzU5tKRr4/fFGuB0d3IDafjypDluWwFb7+ummwH5AuStn2tGwVUCN
Cf/oAc9mh62hmw1pICeU/EeV9SLkGmkff2/QMQP8U5KeuuUS8NNizbXXzi/V7dBp
wFJaAayr0eUDlqtDjxvcvOq2mM7MJCJv3LhjdHsa0+mPdLqUx3dRwRUA0gKooaCR
sJANnvBT03k1Ubb0F4gtpPdyy6EYWE1El7q6zZoESC9cPGOPGiM6iL0FRoJMLGXh
q4UGhCAFdJtRC1msfrl4RanDCmTSQATAPORaVMytAf2mbuDf5d6STlDdBuC6Kdze
FPc=
-----END CERTIFICATE-----
Generated at Thu May 1 03:04:15 2025 by rpki-client