Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T-BneqwGzzM6OKZp63Zqwg2Pcg0.roa
File: T-BneqwGzzM6OKZp63Zqwg2Pcg0.roa (raw, json)
Hash identifier: es4NrG/JsN4+unAhtixERV9G+xO1uJctaoyOnOLpHNA=
Subject key identifier: 4F:E0:67:7A:AC:06:CF:33:3A:38:A6:69:EB:76:6A:C2:0D:8F:72:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185119CE752A27F319268C2762E334706AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T-BneqwGzzM6OKZp63Zqwg2Pcg0.roa
Signing time: Wed 14 Dec 2022 17:09:33 +0000
ROA not before: Wed 14 Dec 2022 17:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:9c:e7:52:a2:7f:31:92:68:c2:76:2e:33:47:06:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 17:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fe0677aac06cf333a38a669eb766ac20d8f720d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:71:a5:10:ff:f5:99:a8:a4:7f:c8:2f:3f:
f4:6d:c7:10:82:ac:5c:25:56:03:b0:9a:2d:11:0c:
fb:28:c3:73:6c:1a:35:2d:d7:ee:08:ae:b1:08:7b:
20:33:91:0e:f9:a7:8f:c6:86:77:57:64:4e:b4:8e:
1b:1e:69:a4:ed:92:b4:0c:49:84:4e:2d:e2:5f:c8:
45:46:ea:c5:69:1f:06:3a:58:b0:7b:5a:d7:1d:c8:
b2:59:c7:43:fd:92:71:ad:80:85:bc:22:81:3a:82:
00:b7:cb:85:1d:08:df:c0:5e:f3:ea:f9:92:3c:71:
a8:4e:f7:f4:2b:03:f9:11:39:ff:57:9e:9e:cd:3f:
20:ef:1e:c5:2b:63:88:37:d4:a3:23:8b:13:b7:0d:
36:a1:41:9c:d5:a7:a3:ee:4d:e0:7f:3c:a4:a2:3e:
69:f1:af:15:24:b7:a7:3b:a7:1b:6f:6c:ea:84:53:
69:c2:17:75:58:e4:da:24:47:85:be:86:3f:e7:a1:
e5:02:42:b5:ed:02:b6:61:2a:7d:83:07:f9:27:d8:
f1:f6:45:c9:4a:c1:43:9c:d2:5b:db:fe:3c:4f:55:
fa:9e:7c:b8:dc:a1:65:ba:12:b2:ff:5c:08:bc:ed:
8b:8c:bd:8c:a4:01:ed:52:3e:91:78:66:fa:2c:f3:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E0:67:7A:AC:06:CF:33:3A:38:A6:69:EB:76:6A:C2:0D:8F:72:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T-BneqwGzzM6OKZp63Zqwg2Pcg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:06:51:10:07:01:97:09:39:9f:80:95:67:8c:0c:9e:26:06:
e8:54:20:42:39:b0:4c:ca:26:1b:40:eb:4b:69:32:18:57:87:
d8:3e:d8:cc:00:6b:da:4b:d8:af:e6:51:fd:25:cc:27:3c:3d:
d8:4e:9c:bf:8a:13:e1:a5:28:02:5c:1e:5f:5e:45:f6:83:9d:
11:de:0d:64:fa:e0:ff:68:22:37:00:f3:9e:15:f9:2d:08:78:
2a:f5:1d:e5:04:d9:4e:3e:db:33:0c:49:9f:40:c4:dc:63:0f:
29:c4:95:0b:88:41:62:cc:bd:a0:ff:b1:00:e0:4e:51:d4:1b:
a6:30:af:ac:34:c4:ff:62:1b:ba:66:18:d1:ca:90:10:fa:ce:
d5:6a:1f:ec:da:5f:85:9a:69:ae:fa:24:f7:74:a9:fd:47:b5:
a3:8b:ad:11:d1:0c:8e:62:c2:e4:db:b2:03:80:7a:00:37:a3:
ac:84:48:b7:f5:11:aa:28:f8:c9:9c:b3:22:1e:d3:50:fd:12:
45:0d:b4:f1:71:83:43:1b:7f:c0:68:db:c2:12:c8:44:06:0c:
5b:ea:7b:ff:3d:a7:d3:ec:d2:d1:cf:50:28:cf:cf:0b:df:e2:
c8:c2:4b:6e:4f:0c:02:68:f2:2a:e0:f1:f1:e5:76:1a:e2:30:
3b:77:7f:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYURnOdSon8xkmjCdi4zRwatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE0MTcwOTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmUwNjc3YWFjMDZjZjMzM2EzOGE2NjllYjc2NmFjMjBkOGY3MjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjJxpRD/9ZmopH/ILz/0bccQgqxc
JVYDsJotEQz7KMNzbBo1LdfuCK6xCHsgM5EO+aePxoZ3V2ROtI4bHmmk7ZK0DEmE
Ti3iX8hFRurFaR8GOliwe1rXHciyWcdD/ZJxrYCFvCKBOoIAt8uFHQjfwF7z6vmS
PHGoTvf0KwP5ETn/V56ezT8g7x7FK2OIN9SjI4sTtw02oUGc1aej7k3gfzykoj5p
8a8VJLenO6cbb2zqhFNpwhd1WOTaJEeFvoY/56HlAkK17QK2YSp9gwf5J9jx9kXJ
SsFDnNJb2/48T1X6nny43KFluhKy/1wIvO2LjL2MpAHtUj6ReGb6LPMeYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE/gZ3qsBs8zOjimaet2asINj3INMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVC1CbmVxd0d6ek02T0tacDYzWnF3ZzJQY2cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB0GURAHAZcJOZ+AlWeM
DJ4mBuhUIEI5sEzKJhtA60tpMhhXh9g+2MwAa9pL2K/mUf0lzCc8PdhOnL+KE+Gl
KAJcHl9eRfaDnRHeDWT64P9oIjcA854V+S0IeCr1HeUE2U4+2zMMSZ9AxNxjDynE
lQuIQWLMvaD/sQDgTlHUG6Ywr6w0xP9iG7pmGNHKkBD6ztVqH+zaX4Waaa76JPd0
qf1HtaOLrRHRDI5iwuTbsgOAegA3o6yESLf1Eaoo+MmcsyIe01D9EkUNtPFxg0Mb
f8Bo28ISyEQGDFvqe/89p9Ps0tHPUCjPzwvf4sjCS25PDAJo8irg8fHldhriMDt3
f8A=
-----END CERTIFICATE-----
Generated at Thu May 1 06:40:01 2025 by rpki-client