Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TG2K1O3kbd8dheGRyeCMzl7KrFw.roa
File: TG2K1O3kbd8dheGRyeCMzl7KrFw.roa (raw, json)
Hash identifier: vPUCoGQtaCPuQ6T4tz2sw3lsWWGvWK/iIaN6vU/vo9I=
Subject key identifier: 4C:6D:8A:D4:ED:E4:6D:DF:1D:85:E1:91:C9:E0:8C:CE:5E:CA:AC:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01840D8F2AF9E572D13CC3F9395E13BC35EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TG2K1O3kbd8dheGRyeCMzl7KrFw.roa
Signing time: Tue 25 Oct 2022 05:13:17 +0000
ROA not before: Tue 25 Oct 2022 05:13:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:8f:2a:f9:e5:72:d1:3c:c3:f9:39:5e:13:bc:35:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 25 05:13:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c6d8ad4ede46ddf1d85e191c9e08cce5ecaac5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:f8:9c:3e:3b:0e:67:cc:c4:9c:3a:eb:3d:
29:fa:16:85:ec:a8:f9:63:25:d4:f2:1c:79:71:e1:
e6:df:f8:72:84:0c:40:5f:e4:b6:d4:39:22:f0:f6:
b3:8b:ae:0a:be:ec:13:31:66:00:d3:e7:cd:07:77:
d0:56:d6:51:ef:90:b9:65:e5:cc:ae:37:99:7b:b1:
46:e9:3f:b9:a2:92:bf:5e:b8:34:37:ba:80:51:47:
9c:9b:42:ac:7c:0b:fa:eb:65:bd:b4:f2:01:ef:e4:
49:ce:cd:54:cf:19:80:00:53:e8:1a:2e:9c:78:88:
99:f3:4b:90:ce:63:d9:5d:65:d4:7d:35:b4:8a:7d:
76:d5:89:4e:7c:ea:e7:01:2d:c1:d6:a6:2d:22:dc:
fb:f8:e7:15:04:a8:d9:16:e3:39:a1:97:c5:d1:f8:
54:e5:05:0e:26:05:d1:36:a8:42:e0:26:4b:c8:18:
45:17:9f:db:df:32:9e:0d:34:fd:2f:b9:52:ac:97:
dd:ec:e2:48:20:83:00:6b:17:73:a4:08:d9:f9:37:
1b:b0:47:21:da:33:e9:3c:e1:68:58:2d:c5:f0:4a:
c4:fa:41:fa:ad:b6:01:ff:ff:2f:d5:50:51:97:09:
7e:28:49:79:bb:1e:5f:f9:0d:41:4c:b6:32:ca:47:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6D:8A:D4:ED:E4:6D:DF:1D:85:E1:91:C9:E0:8C:CE:5E:CA:AC:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TG2K1O3kbd8dheGRyeCMzl7KrFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:87:03:d4:32:87:0a:b4:a8:04:36:86:b4:90:9d:f9:d7:7a:
89:c7:64:0f:ff:7b:27:de:65:76:ca:30:67:1d:79:87:3a:c7:
90:81:e1:7c:99:77:78:63:62:98:5c:cc:7a:09:50:92:9f:97:
30:26:0a:86:44:40:84:c8:db:a7:f7:59:4c:f6:54:ac:08:c0:
99:b0:05:1c:2d:5a:82:10:b0:5c:3d:5c:5f:ce:34:ef:f8:74:
31:7e:ae:2e:e2:78:a4:8c:d5:73:cd:34:41:6d:0d:0d:82:2a:
e0:ef:7c:68:ad:20:69:0d:1f:f5:11:a3:28:7c:c9:15:15:1b:
26:57:31:f5:0f:0b:96:4d:d8:91:67:83:15:40:45:71:4e:10:
2c:45:d4:b9:f8:a1:d1:33:79:7e:cf:da:ce:0e:3b:a7:f6:ea:
6d:73:80:4b:20:6a:04:3f:34:95:17:9b:d4:e0:44:9f:03:40:
12:d2:3f:8f:d1:f6:c3:87:be:ae:3c:f2:24:c6:e3:0d:a0:c8:
52:cc:81:7c:2c:a2:ff:ad:a2:da:18:5d:fc:4b:84:0c:59:96:
84:bc:b4:27:ef:d3:7a:0a:ff:51:fa:6d:d9:d3:4e:2d:14:81:
80:e7:07:fb:64:57:a0:59:ae:98:f0:c5:89:92:30:01:2a:cd:
3d:94:43:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQNjyr55XLRPMP5OV4TvDXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDI1MDUxMzE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzZkOGFkNGVkZTQ2ZGRmMWQ4NWUxOTFjOWUwOGNjZTVlY2FhYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptf4nD47DmfMxJw66z0p+haF7Kj5
YyXU8hx5ceHm3/hyhAxAX+S21Dki8Pazi64KvuwTMWYA0+fNB3fQVtZR75C5ZeXM
rjeZe7FG6T+5opK/Xrg0N7qAUUecm0KsfAv662W9tPIB7+RJzs1UzxmAAFPoGi6c
eIiZ80uQzmPZXWXUfTW0in121YlOfOrnAS3B1qYtItz7+OcVBKjZFuM5oZfF0fhU
5QUOJgXRNqhC4CZLyBhFF5/b3zKeDTT9L7lSrJfd7OJIIIMAaxdzpAjZ+TcbsEch
2jPpPOFoWC3F8ErE+kH6rbYB//8v1VBRlwl+KEl5ux5f+Q1BTLYyykdh7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFExtitTt5G3fHYXhkcngjM5eyqxcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVEcySzFPM2tiZDhkaGVHUnllQ016bDdLckZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJeHA9Qyhwq0qAQ2hrSQ
nfnXeonHZA//eyfeZXbKMGcdeYc6x5CB4XyZd3hjYphczHoJUJKflzAmCoZEQITI
26f3WUz2VKwIwJmwBRwtWoIQsFw9XF/ONO/4dDF+ri7ieKSM1XPNNEFtDQ2CKuDv
fGitIGkNH/URoyh8yRUVGyZXMfUPC5ZN2JFngxVARXFOECxF1Ln4odEzeX7P2s4O
O6f26m1zgEsgagQ/NJUXm9TgRJ8DQBLSP4/R9sOHvq488iTG4w2gyFLMgXwsov+t
otoYXfxLhAxZloS8tCfv03oK/1H6bdnTTi0UgYDnB/tkV6BZrpjwxYmSMAEqzT2U
Q0E=
-----END CERTIFICATE-----
Generated at Sat May 3 05:28:01 2025 by rpki-client