Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TPsUYv4yaqG3m-HN-jj1XzT7azA.roa
File: TPsUYv4yaqG3m-HN-jj1XzT7azA.roa (raw, json)
Hash identifier: Y0qvOPrCoNlo807U1zh3jXzLwGTCLMQ+q5lTn5I2fU0=
Subject key identifier: 4C:FB:14:62:FE:32:6A:A1:B7:9B:E1:CD:FA:38:F5:5F:34:FB:6B:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872286DCD8DBFE51ACCF13A3F383415FB4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TPsUYv4yaqG3m-HN-jj1XzT7azA.roa
Signing time: Mon 27 Mar 2023 10:04:36 +0000
ROA not before: Mon 27 Mar 2023 10:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:2286:bc16/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:86:dc:d8:db:fe:51:ac:cf:13:a3:f3:83:41:5f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 10:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cfb1462fe326aa1b79be1cdfa38f55f34fb6b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:53:9e:61:13:8c:18:a7:34:c2:5b:b8:6d:46:
44:30:94:7e:43:57:83:0d:11:e7:50:6c:3a:2a:38:
a5:e8:3f:b9:16:0a:87:2c:89:80:3e:c7:36:52:ab:
06:4b:c2:3b:2b:2b:5b:cc:b8:c9:36:5f:0a:37:4f:
c3:5b:e9:69:6c:e9:02:73:01:7f:5d:b4:c2:85:9c:
06:62:7c:a9:fc:86:77:0c:6b:72:b9:35:4b:69:49:
4d:68:04:33:84:19:20:a3:43:e4:fe:43:1a:fe:6d:
6a:b0:a3:35:93:92:75:ba:cf:6d:e8:c2:46:19:1b:
74:b3:99:75:57:6c:05:00:1d:c6:af:e9:33:6e:b6:
7d:2f:0d:d0:87:9d:66:8c:a8:42:d5:b6:fd:f6:49:
10:04:05:d0:11:22:8f:e3:52:ed:13:3e:bc:77:4f:
9a:24:47:25:6c:7a:19:30:44:f3:66:e5:f5:c4:69:
e5:48:f1:79:84:2e:83:c5:b3:a8:56:17:70:72:e7:
9b:bd:6a:dd:3f:ae:cf:89:93:ab:bb:d2:bd:f3:c6:
2a:c6:02:03:1c:8a:39:83:13:0d:0d:cc:ca:2c:ad:
77:20:ce:7d:9b:69:7d:89:c1:f5:b9:6f:8c:4d:b3:
09:69:40:be:06:fb:94:59:ad:7a:f5:4d:99:13:73:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:14:62:FE:32:6A:A1:B7:9B:E1:CD:FA:38:F5:5F:34:FB:6B:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TPsUYv4yaqG3m-HN-jj1XzT7azA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:38:37:44:0b:73:bb:ad:83:84:09:81:72:ac:16:1f:2c:75:
47:f5:1a:2e:f9:d6:b3:4c:1b:ad:99:bd:9a:3c:b3:2c:30:ae:
28:c6:eb:ee:83:55:a6:c8:40:7d:a8:de:a0:47:64:a9:88:9c:
79:fa:20:ac:f7:e0:20:1a:86:ce:89:4f:08:1a:17:2f:b0:45:
a8:d3:c2:1c:fe:af:f5:4b:31:ae:b5:18:61:a4:ad:fa:4d:c2:
9d:85:1a:29:54:0c:df:c6:88:6f:96:6d:de:51:ee:41:64:99:
02:0b:bc:c4:be:ab:a2:24:84:9f:34:0b:43:2a:9f:a0:04:6a:
aa:c4:d8:ee:63:df:2d:a8:fa:cc:0c:aa:64:a1:5f:3d:b9:e1:
3b:79:d2:46:bb:d0:17:b0:35:56:85:9c:70:bc:2d:a3:7f:e0:
0e:01:13:73:ef:00:f9:b3:c5:6e:c0:52:81:8f:1e:4a:44:19:
47:e2:9a:55:30:66:97:e8:f0:a1:5a:a0:a6:db:55:1f:f7:ad:
04:ca:42:d6:23:ce:fe:b5:e7:6b:76:66:10:c7:a5:93:37:6b:
f9:a9:05:e6:34:90:19:2e:2c:bf:96:d8:8b:b9:f6:35:f6:60:
17:a0:ab:27:44:dc:69:5f:7a:c6:86:0c:64:3d:8a:38:c5:a1:
1e:81:d5:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcihtzY2/5RrM8To/ODQV+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI3MTAwNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2ZiMTQ2MmZlMzI2YWExYjc5YmUxY2RmYTM4ZjU1ZjM0ZmI2YjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1OeYROMGKc0wlu4bUZEMJR+Q1eD
DRHnUGw6Kjil6D+5FgqHLImAPsc2UqsGS8I7KytbzLjJNl8KN0/DW+lpbOkCcwF/
XbTChZwGYnyp/IZ3DGtyuTVLaUlNaAQzhBkgo0Pk/kMa/m1qsKM1k5J1us9t6MJG
GRt0s5l1V2wFAB3Gr+kzbrZ9Lw3Qh51mjKhC1bb99kkQBAXQESKP41LtEz68d0+a
JEclbHoZMETzZuX1xGnlSPF5hC6DxbOoVhdwcuebvWrdP67PiZOru9K988YqxgID
HIo5gxMNDczKLK13IM59m2l9icH1uW+MTbMJaUC+BvuUWa169U2ZE3Pf5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEz7FGL+Mmqht5vhzfo49V80+2swMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVFBzVVl2NHlhcUczbS1ITi1qajFYelQ3YXpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF44N0QLc7utg4QJgXKs
Fh8sdUf1Gi751rNMG62ZvZo8sywwrijG6+6DVabIQH2o3qBHZKmInHn6IKz34CAa
hs6JTwgaFy+wRajTwhz+r/VLMa61GGGkrfpNwp2FGilUDN/GiG+Wbd5R7kFkmQIL
vMS+q6IkhJ80C0Mqn6AEaqrE2O5j3y2o+swMqmShXz254Tt50ka70BewNVaFnHC8
LaN/4A4BE3PvAPmzxW7AUoGPHkpEGUfimlUwZpfo8KFaoKbbVR/3rQTKQtYjzv61
52t2ZhDHpZM3a/mpBeY0kBkuLL+W2Iu59jX2YBegqydE3GlfesaGDGQ9ijjFoR6B
1T8=
-----END CERTIFICATE-----
Generated at Fri May 2 17:42:08 2025 by rpki-client