Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L_TvR1EXjqJ18wJs89BOu_VTSwM.roa
File: L_TvR1EXjqJ18wJs89BOu_VTSwM.roa (raw, json)
Hash identifier: Mp687jUUQzIj6cAlDJ8ihZb3uTmBwoh6zsKmgN5FIdE=
Subject key identifier: 2F:F4:EF:47:51:17:8E:A2:75:F3:02:6C:F3:D0:4E:BB:F5:53:4B:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186ED8786C0CF2FD87B272B5797C6665F12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L_TvR1EXjqJ18wJs89BOu_VTSwM.roa
Signing time: Fri 17 Mar 2023 03:05:27 +0000
ROA not before: Fri 17 Mar 2023 03:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:ed86:bbe1/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ed:87:86:c0:cf:2f:d8:7b:27:2b:57:97:c6:66:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 03:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff4ef4751178ea275f3026cf3d04ebbf5534b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:fb:92:c2:4c:7e:a9:ee:0d:38:4a:be:a0:
40:5c:e0:fd:28:ae:bd:18:6e:fc:bc:55:e7:f3:08:
6c:c5:f8:9e:0d:b2:e0:8e:d1:4f:6c:a2:b3:cb:d4:
d9:33:3b:11:9f:16:d8:be:cb:3d:1e:dc:a2:97:46:
0f:27:47:dc:8e:6e:ea:cb:d7:8e:9b:63:b6:70:bc:
d7:00:ea:5c:ed:ab:92:1b:4c:95:1d:6c:ed:91:a6:
11:3f:bf:3b:58:46:5f:1a:c9:85:60:93:f0:04:06:
b5:81:3c:d6:69:dc:cf:0b:f6:94:cb:7c:d7:e5:8d:
ee:50:6d:4a:89:5e:f5:a0:7b:d9:66:03:e1:ac:87:
92:60:14:5a:8d:11:5f:14:45:51:25:1a:ff:c2:e9:
41:8c:e1:49:e0:fe:8c:9b:5e:0c:af:84:52:35:6b:
26:85:72:95:2e:c0:ea:63:2f:83:ca:43:38:53:46:
e9:d2:e0:95:b8:56:55:45:51:b1:3c:cd:51:ac:a5:
74:06:93:93:d7:86:66:8e:7f:9d:c6:2d:8e:58:cc:
63:8f:53:91:bc:48:bc:d8:07:eb:c2:52:d1:19:75:
e2:79:c0:5b:6c:55:8e:32:b4:98:80:9b:97:a8:5a:
14:ff:0e:e9:87:57:36:f0:78:33:3c:6e:d0:8b:19:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F4:EF:47:51:17:8E:A2:75:F3:02:6C:F3:D0:4E:BB:F5:53:4B:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L_TvR1EXjqJ18wJs89BOu_VTSwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:db:5e:5c:56:59:61:a2:e7:36:20:97:47:35:d2:dd:fa:e4:
db:23:41:c4:42:d8:1c:c0:7a:23:a0:96:a9:cc:e6:56:26:7a:
55:a2:fc:5f:1e:1f:57:cc:f7:0a:c2:b6:d9:27:f2:c2:6b:97:
3e:d1:4c:f7:0a:78:b8:56:95:09:ba:f9:35:8b:44:ec:70:c1:
0a:50:0a:0e:3f:db:c7:cd:b2:2c:ba:cc:37:66:c4:a5:9a:c3:
33:ff:fb:d2:de:a0:d6:6f:5b:86:f3:72:ba:41:1a:88:b9:f4:
20:75:c6:b7:81:41:11:d4:1e:d5:c1:13:de:e3:45:c1:bb:9e:
d3:23:0e:59:8e:92:71:71:a7:ce:4c:dc:1a:7a:19:e0:de:4c:
6a:d4:b2:f2:74:da:51:22:3c:c2:03:68:47:68:e6:8d:36:66:
ef:6e:44:4f:fb:1c:29:03:b5:36:5d:57:d4:67:bf:33:c3:97:
92:fc:e7:22:8c:44:73:4e:54:85:38:42:47:43:57:23:7a:88:
d8:6d:85:6d:41:86:d3:68:aa:bb:9f:d1:1f:7e:57:5e:69:82:
3b:c4:ba:5d:1d:38:f7:0d:47:94:2a:5e:d8:29:c5:de:00:32:
5d:0b:fa:2a:ea:55:15:36:86:19:8f:22:4e:e6:9b:74:73:dd:
29:f2:c9:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbth4bAzy/YeycrV5fGZl8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE3MDMwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmY0ZWY0NzUxMTc4ZWEyNzVmMzAyNmNmM2QwNGViYmY1NTM0YjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzf7ksJMfqnuDThKvqBAXOD9KK69
GG78vFXn8whsxfieDbLgjtFPbKKzy9TZMzsRnxbYvss9Htyil0YPJ0fcjm7qy9eO
m2O2cLzXAOpc7auSG0yVHWztkaYRP787WEZfGsmFYJPwBAa1gTzWadzPC/aUy3zX
5Y3uUG1KiV71oHvZZgPhrIeSYBRajRFfFEVRJRr/wulBjOFJ4P6Mm14Mr4RSNWsm
hXKVLsDqYy+DykM4U0bp0uCVuFZVRVGxPM1RrKV0BpOT14Zmjn+dxi2OWMxjj1OR
vEi82AfrwlLRGXXiecBbbFWOMrSYgJuXqFoU/w7ph1c28HgzPG7QixkCbwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC/070dRF46idfMCbPPQTrv1U0sDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTF9UdlIxRVhqcUoxOHdKczg5Qk91X1ZUU3dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI7bXlxWWWGi5zYgl0c1
0t365NsjQcRC2BzAeiOglqnM5lYmelWi/F8eH1fM9wrCttkn8sJrlz7RTPcKeLhW
lQm6+TWLROxwwQpQCg4/28fNsiy6zDdmxKWawzP/+9LeoNZvW4bzcrpBGoi59CB1
xreBQRHUHtXBE97jRcG7ntMjDlmOknFxp85M3Bp6GeDeTGrUsvJ02lEiPMIDaEdo
5o02Zu9uRE/7HCkDtTZdV9RnvzPDl5L85yKMRHNOVIU4QkdDVyN6iNhthW1BhtNo
qruf0R9+V15pgjvEul0dOPcNR5QqXtgpxd4AMl0L+irqVRU2hhmPIk7mm3Rz3Sny
yRM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:55 2025 by rpki-client