Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TT-W24dkYUeGVStV8S-DlFrGBQc.roa
File: TT-W24dkYUeGVStV8S-DlFrGBQc.roa (raw, json)
Hash identifier: uq9T6xDwweUZAX2fUm8sNEdCeCFbUv769mydopdt/X4=
Subject key identifier: 4D:3F:96:DB:87:64:61:47:86:55:2B:55:F1:2F:83:94:5A:C6:05:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F0D0F6DE3C97C37FB08991DD9E783FF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TT-W24dkYUeGVStV8S-DlFrGBQc.roa
Signing time: Tue 30 Aug 2022 22:13:22 +0000
ROA not before: Tue 30 Aug 2022 22:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f0:d0:f6:de:3c:97:c3:7f:b0:89:91:dd:9e:78:3f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 22:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d3f96db8764614786552b55f12f83945ac60507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:c3:e4:e0:ed:f5:e8:1b:45:be:e4:09:37:
26:55:cb:a4:b9:32:4e:6b:d5:cb:45:78:18:cb:da:
59:58:5f:c2:ed:be:49:07:fc:2c:6a:7e:60:18:6f:
e9:df:00:5c:ce:c5:4e:c0:0c:be:bd:96:69:43:74:
90:78:96:82:f3:ae:6a:a3:34:cd:d7:31:91:0f:be:
83:75:a8:0e:46:eb:4f:e1:38:b6:a0:ca:24:20:4c:
af:a9:44:8e:71:41:cc:3d:b0:04:5d:68:8f:c3:91:
b9:b4:7e:92:1e:a0:32:54:d4:b8:18:9c:31:25:99:
05:a0:83:4e:d8:fe:e9:98:b1:14:12:38:33:14:fd:
14:49:fd:fd:a7:c9:0b:2c:f2:08:cb:fa:66:70:1e:
2f:a3:77:0b:e0:00:61:86:f8:05:f0:1e:c3:19:80:
ea:93:7e:38:73:2e:37:2a:1e:e6:5d:22:50:a0:13:
9d:4a:2c:e5:37:de:2c:b9:94:3b:d3:e0:be:d6:0b:
75:42:3f:46:e9:25:e4:f4:8e:f3:07:b3:83:39:a7:
3b:f5:46:4d:ba:17:46:6a:01:63:7e:1b:84:df:5d:
0e:48:fc:61:27:53:3d:1e:c2:ff:b8:0f:44:eb:ad:
89:37:57:2c:9c:78:77:71:cc:42:e1:0b:cc:10:9e:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:96:DB:87:64:61:47:86:55:2B:55:F1:2F:83:94:5A:C6:05:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TT-W24dkYUeGVStV8S-DlFrGBQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:66:bd:ff:9f:23:bc:06:5c:2a:f7:1c:93:7a:11:6f:55:24:
b0:d6:77:41:71:d0:1d:ec:70:f3:8f:c1:e6:20:a6:97:86:87:
cf:49:99:45:87:5f:9c:f3:72:4c:06:bf:f8:db:fc:90:46:f5:
92:50:16:5a:df:06:2b:50:5f:c9:1a:72:0d:47:55:ba:1d:15:
78:31:8b:60:f3:7a:24:cd:bf:4b:82:ae:fa:a6:65:bf:eb:c7:
b5:49:48:a1:64:5b:19:92:62:06:37:14:8b:17:f4:90:44:a5:
9a:94:dd:79:77:a3:7f:52:58:a8:c8:0d:52:44:4c:f4:10:38:
75:0d:18:f0:0b:63:59:80:48:8c:bb:68:ba:4c:22:4b:01:87:
1b:36:a4:67:e6:77:1d:33:4a:aa:f1:6c:f9:8d:15:e3:d2:18:
67:e5:7e:42:aa:10:1f:2d:e9:bc:cf:b4:4b:9e:74:0b:0f:db:
96:45:69:ec:36:51:92:ce:6b:53:df:e9:ac:8c:e5:aa:21:6c:
f4:bb:9b:57:70:56:f6:20:b0:42:bb:1a:92:d3:7d:c8:7d:86:
f3:7f:d1:82:b7:a8:9a:79:ae:dd:b1:f3:92:83:90:97:5e:89:
c5:f4:6c:2a:21:7f:a1:9b:86:ec:24:0c:24:a5:fb:85:90:74:
93:9a:6c:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLw0PbePJfDf7CJkd2eeD/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODMwMjIxMzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDNmOTZkYjg3NjQ2MTQ3ODY1NTJiNTVmMTJmODM5NDVhYzYwNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0rD5ODt9egbRb7kCTcmVcukuTJO
a9XLRXgYy9pZWF/C7b5JB/wsan5gGG/p3wBczsVOwAy+vZZpQ3SQeJaC865qozTN
1zGRD76DdagORutP4Ti2oMokIEyvqUSOcUHMPbAEXWiPw5G5tH6SHqAyVNS4GJwx
JZkFoINO2P7pmLEUEjgzFP0USf39p8kLLPIIy/pmcB4vo3cL4ABhhvgF8B7DGYDq
k344cy43Kh7mXSJQoBOdSizlN94suZQ70+C+1gt1Qj9G6SXk9I7zB7ODOac79UZN
uhdGagFjfhuE310OSPxhJ1M9HsL/uA9E662JN1csnHh3ccxC4QvMEJ5sEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE0/ltuHZGFHhlUrVfEvg5RaxgUHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVFQtVzI0ZGtZVWVHVlN0VjhTLURsRnJHQlFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGhmvf+fI7wGXCr3HJN6
EW9VJLDWd0Fx0B3scPOPweYgppeGh89JmUWHX5zzckwGv/jb/JBG9ZJQFlrfBitQ
X8kacg1HVbodFXgxi2DzeiTNv0uCrvqmZb/rx7VJSKFkWxmSYgY3FIsX9JBEpZqU
3Xl3o39SWKjIDVJETPQQOHUNGPALY1mASIy7aLpMIksBhxs2pGfmdx0zSqrxbPmN
FePSGGflfkKqEB8t6bzPtEuedAsP25ZFaew2UZLOa1Pf6ayM5aohbPS7m1dwVvYg
sEK7GpLTfch9hvN/0YK3qJp5rt2x85KDkJdeicX0bCohf6GbhuwkDCSl+4WQdJOa
bEM=
-----END CERTIFICATE-----
Generated at Fri May 2 08:27:02 2025 by rpki-client