Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/THRRiPUd5t6wZ9B_byluRFnJujw.roa
File: THRRiPUd5t6wZ9B_byluRFnJujw.roa (raw, json)
Hash identifier: LasoJf6NgFpw3G5bg7X116BSiW/f2dtvAYzfJZBjLxI=
Subject key identifier: 4C:74:51:88:F5:1D:E6:DE:B0:67:D0:7F:6F:29:6E:44:59:C9:BA:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 866DF5AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/THRRiPUd5t6wZ9B_byluRFnJujw.roa
Signing time: Sun 22 May 2022 22:09:29 +0000
ROA not before: Sun 22 May 2022 22:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255353260 (0x866df5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 22:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c745188f51de6deb067d07f6f296e4459c9ba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:96:2b:03:13:59:b6:84:c5:81:96:ca:d5:
0a:3f:12:70:c6:13:dd:7e:6a:95:a5:fd:2d:96:b8:
6f:11:0e:3c:99:73:ab:b8:2d:13:1e:8c:da:85:72:
82:01:d7:d5:79:75:25:99:12:ff:62:06:e2:9f:e9:
c0:a3:cd:7c:30:06:bd:ed:74:99:2d:e6:4c:36:d1:
ea:bb:31:fb:80:13:1f:97:12:01:1c:74:6c:59:95:
9f:15:de:22:92:82:d8:99:9b:32:55:af:0a:ad:41:
a9:33:68:04:59:b8:75:a9:03:8d:41:10:56:e4:cb:
8a:61:d6:75:2f:c4:1b:4a:0d:46:f6:4c:90:10:d1:
06:f5:fc:4a:c5:7d:a1:7b:76:06:25:1c:84:a8:65:
c4:96:b6:68:f7:fb:67:3a:f4:61:f7:d8:b4:bb:9e:
86:95:f5:d0:d5:2c:8c:59:39:ae:7c:03:f1:ad:2a:
84:1e:b4:40:b1:70:d8:13:d2:dd:13:66:6f:84:fb:
85:07:fe:cf:bb:50:b9:ce:61:33:2d:45:a5:0f:18:
e9:51:f3:30:74:c8:f7:63:2e:09:41:ca:d8:5a:f8:
18:15:c1:1b:90:f1:35:23:b5:3f:82:18:fd:fa:72:
70:14:7e:ae:34:16:4f:1f:01:3e:41:ef:13:1a:03:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:74:51:88:F5:1D:E6:DE:B0:67:D0:7F:6F:29:6E:44:59:C9:BA:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/THRRiPUd5t6wZ9B_byluRFnJujw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:a5:08:09:0d:35:6c:ea:a8:13:5d:ce:3f:2a:b5:37:73:b3:
cd:8a:6d:c2:70:8a:09:5e:cc:4a:e0:da:67:64:8e:25:23:c1:
d8:b9:84:f9:ed:ce:72:d2:ef:af:8f:28:22:c8:e2:df:a4:6a:
ac:cc:59:f1:9d:85:47:20:42:56:19:0a:c6:15:56:bb:ec:17:
33:2a:26:e6:7b:17:ab:df:5f:b0:72:6a:04:d3:66:51:b5:6c:
3e:ab:b7:a3:43:12:9e:2a:65:b1:9d:f4:9e:1d:98:af:34:2c:
2e:ff:4f:f6:df:87:1b:9f:fa:bf:a9:88:00:8f:2e:32:e0:23:
20:0e:e6:76:dd:a4:18:1e:9f:32:a6:d6:35:a5:06:44:f3:aa:
22:55:93:c9:1a:7c:77:05:ff:0f:99:a7:7d:a8:4e:22:dc:c6:
04:f8:ae:a1:ef:16:0e:3e:51:a7:d3:f0:43:13:53:e5:19:4f:
0c:40:4b:a3:d1:4c:eb:a6:93:c1:00:f8:de:6b:33:6a:1a:96:
d2:34:d3:bc:47:a0:e8:5d:c9:a8:e4:d1:b1:c2:c1:34:58:25:
d1:c9:3d:cc:b7:23:e3:e0:1f:9e:1d:97:fc:88:2e:8e:65:ca:
8d:f9:e6:bd:4e:d4:d9:8d:d8:8b:12:18:f6:dd:19:6e:41:70:
37:eb:c9:8f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIZt9awwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjIyMjA5MjlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDRjNzQ1MTg4ZjUx
ZGU2ZGViMDY3ZDA3ZjZmMjk2ZTQ0NTljOWJhM2MwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3F5YrAxNZtoTFgZbK1Qo/EnDGE91+apWl/S2WuG8RDjyZ
c6u4LRMejNqFcoIB19V5dSWZEv9iBuKf6cCjzXwwBr3tdJkt5kw20eq7MfuAEx+X
EgEcdGxZlZ8V3iKSgtiZmzJVrwqtQakzaARZuHWpA41BEFbky4ph1nUvxBtKDUb2
TJAQ0Qb1/ErFfaF7dgYlHISoZcSWtmj3+2c69GH32LS7noaV9dDVLIxZOa58A/Gt
KoQetECxcNgT0t0TZm+E+4UH/s+7ULnOYTMtRaUPGOlR8zB0yPdjLglBytha+BgV
wRuQ8TUjtT+CGP36cnAUfq40Fk8fAT5B7xMaA1s3AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUTHRRiPUd5t6wZ9B/byluRFnJujwwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9USFJSaVBVZDV0NndaOUJfYnlsdVJGbkp1ancucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAEKUICQ01bOqoE13OPyq1N3OzzYptwnCKCV7M
SuDaZ2SOJSPB2LmE+e3OctLvr48oIsji36RqrMxZ8Z2FRyBCVhkKxhVWu+wXMyom
5nsXq99fsHJqBNNmUbVsPqu3o0MSniplsZ30nh2YrzQsLv9P9t+HG5/6v6mIAI8u
MuAjIA7mdt2kGB6fMqbWNaUGRPOqIlWTyRp8dwX/D5mnfahOItzGBPiuoe8WDj5R
p9PwQxNT5RlPDEBLo9FM66aTwQD43mszahqW0jTTvEeg6F3JqOTRscLBNFgl0ck9
zLcj4+Afnh2X/IgujmXKjfnmvU7U2Y3YixIY9t0ZbkFwN+vJjw==
-----END CERTIFICATE-----
Generated at Thu May 1 11:05:50 2025 by rpki-client