Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJP6D6eOigDjQiuwx0FECXMsIx4.roa
File: TJP6D6eOigDjQiuwx0FECXMsIx4.roa (raw, json)
Hash identifier: uUg95Q69yMFt43RWkLvLznJzBOc04httAJBb8CfPlIk=
Subject key identifier: 4C:93:FA:0F:A7:8E:8A:00:E3:42:2B:B0:C7:41:44:09:73:2C:23:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C8D745A2FBEB4E4B5DAE8187AD28595E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJP6D6eOigDjQiuwx0FECXMsIx4.roa
Signing time: Sun 06 Aug 2023 03:14:58 +0000
ROA not before: Sun 06 Aug 2023 03:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c8:d7:45:a2:fb:eb:4e:4b:5d:ae:81:87:ad:28:59:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 03:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c93fa0fa78e8a00e3422bb0c7414409732c231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:ed:66:5e:40:41:41:27:72:64:9d:42:9d:
9e:c3:b2:c9:ec:2b:3a:3e:20:d4:3f:4f:8c:35:6e:
06:23:6e:31:48:51:b0:07:05:6f:17:b1:44:6d:b2:
b3:c8:ef:cb:b5:48:67:fa:0c:70:04:43:ba:38:f3:
87:0d:cf:31:04:57:51:17:6c:d8:f7:bd:bb:5c:7f:
9e:d7:bd:c9:34:58:a7:18:33:58:03:23:ba:e8:d6:
3a:a6:99:a6:df:71:a9:ad:7c:3b:c1:93:c0:78:38:
67:3d:47:2c:26:4d:9f:fd:ce:97:2e:6e:45:12:bf:
98:3f:1e:04:85:fb:f7:2a:da:e2:14:85:73:e3:2a:
56:29:5a:b7:44:8d:22:46:17:91:19:5b:eb:90:ef:
e9:85:ea:c7:a0:08:a5:75:5f:36:0e:fc:f5:ea:ed:
45:04:3d:00:90:27:b0:d6:4d:7e:b3:7a:c8:bb:9a:
20:5e:4b:89:75:d5:10:0e:01:50:bb:be:00:8f:f2:
06:dd:35:65:a0:b0:92:72:f6:b8:fc:1e:9b:9a:6c:
7b:0d:bf:26:93:82:42:e6:80:19:3f:98:bc:68:fc:
27:4b:e8:6d:77:6f:9f:65:44:2f:b3:58:e7:e8:79:
14:3f:14:34:2b:c4:76:f8:78:c2:3c:7a:2d:83:15:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:93:FA:0F:A7:8E:8A:00:E3:42:2B:B0:C7:41:44:09:73:2C:23:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJP6D6eOigDjQiuwx0FECXMsIx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:fc:53:03:bc:b4:35:a7:58:a0:a4:0f:05:73:b4:b1:62:ea:
2a:0b:0f:6b:69:d9:7f:16:eb:c3:69:c9:24:06:3f:25:57:69:
4f:01:db:87:4d:a3:1c:78:d3:d9:db:13:5e:02:e1:ce:90:42:
6e:61:71:24:a1:8b:36:58:e1:aa:a2:71:27:ce:b6:44:2f:be:
7a:5e:f7:ff:e8:b8:df:19:34:dd:1d:ca:a3:bc:ec:9c:4c:86:
bc:4f:e7:80:b2:b8:c9:fb:1a:c7:70:81:a3:62:51:29:0b:ea:
64:dc:5e:fc:02:28:1b:55:ed:f8:bc:33:bb:88:9d:c6:22:b9:
a7:2a:75:50:34:0c:d9:1a:1f:c4:62:68:f8:33:e1:fe:22:54:
99:9e:54:52:93:06:5c:50:ca:7a:cc:57:a0:bc:95:67:8b:f9:
4b:67:e0:9d:a4:bc:1d:15:d8:c6:34:66:72:aa:88:c4:1e:5c:
8d:b8:7b:96:98:32:89:48:ef:c1:01:a7:0e:04:bd:2c:2f:d2:
8b:ce:5f:7e:0c:47:d1:d6:82:6e:20:6f:92:f1:3b:fe:e3:5b:
27:9d:be:ac:21:cc:85:89:02:0e:d0:8f:5e:dd:27:69:2b:3a:
c5:25:10:cf:75:14:85:7e:11:ee:eb:81:48:24:46:85:69:fe:
b6:16:47:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnI10Wi++tOS12ugYetKFleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA2MDMxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzkzZmEwZmE3OGU4YTAwZTM0MjJiYjBjNzQxNDQwOTczMmMyMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru7tZl5AQUEncmSdQp2ew7LJ7Cs6
PiDUP0+MNW4GI24xSFGwBwVvF7FEbbKzyO/LtUhn+gxwBEO6OPOHDc8xBFdRF2zY
9727XH+e173JNFinGDNYAyO66NY6ppmm33GprXw7wZPAeDhnPUcsJk2f/c6XLm5F
Er+YPx4Ehfv3KtriFIVz4ypWKVq3RI0iRheRGVvrkO/pherHoAildV82Dvz16u1F
BD0AkCew1k1+s3rIu5ogXkuJddUQDgFQu74Aj/IG3TVloLCScva4/B6bmmx7Db8m
k4JC5oAZP5i8aPwnS+htd2+fZUQvs1jn6HkUPxQ0K8R2+HjCPHotgxU1BQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEyT+g+njooA40IrsMdBRAlzLCMeMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVEpQNkQ2ZU9pZ0RqUWl1d3gwRkVDWE1zSXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE38UwO8tDWnWKCkDwVz
tLFi6ioLD2tp2X8W68NpySQGPyVXaU8B24dNoxx409nbE14C4c6QQm5hcSShizZY
4aqicSfOtkQvvnpe9//ouN8ZNN0dyqO87JxMhrxP54CyuMn7GsdwgaNiUSkL6mTc
XvwCKBtV7fi8M7uIncYiuacqdVA0DNkaH8RiaPgz4f4iVJmeVFKTBlxQynrMV6C8
lWeL+Utn4J2kvB0V2MY0ZnKqiMQeXI24e5aYMolI78EBpw4EvSwv0ovOX34MR9HW
gm4gb5LxO/7jWyedvqwhzIWJAg7Qj17dJ2krOsUlEM91FIV+Ee7rgUgkRoVp/rYW
R7E=
-----END CERTIFICATE-----
Generated at Thu May 1 11:13:46 2025 by rpki-client