Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYfQzYoQ0wZT6ftYqzDLV6SVcoc.roa
File: TYfQzYoQ0wZT6ftYqzDLV6SVcoc.roa (raw, json)
Hash identifier: 3Upquqjs3qd2wZt8C2GdZHhwg7ePPNSB8iWy5JKp1dQ=
Subject key identifier: 4D:87:D0:CD:8A:10:D3:06:53:E9:FB:58:AB:30:CB:57:A4:95:72:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182670FC6C4E190AA7826CE24551DC8E521
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYfQzYoQ0wZT6ftYqzDLV6SVcoc.roa
Signing time: Thu 04 Aug 2022 04:14:23 +0000
ROA not before: Thu 04 Aug 2022 04:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:0f:c6:c4:e1:90:aa:78:26:ce:24:55:1d:c8:e5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 04:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d87d0cd8a10d30653e9fb58ab30cb57a4957287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:f4:fe:24:c6:c3:82:a8:f6:e4:2f:f9:e0:
db:95:26:a4:f4:4b:33:d5:63:8e:02:e6:6e:26:d1:
c1:c1:cf:97:2b:22:72:de:53:95:a1:f0:4b:37:3f:
9d:e4:25:d7:70:64:b7:d9:af:6d:b7:a1:23:8b:31:
ad:be:d8:7a:43:9f:dc:de:19:0b:70:fb:d9:75:43:
1c:13:1b:f9:f3:bc:35:9c:f1:83:ab:3f:6d:be:ef:
a9:2a:60:2d:ff:83:15:01:24:95:b5:88:8f:88:59:
2e:ba:85:5b:c0:37:06:07:d7:eb:b1:c4:76:1a:e1:
4f:30:47:ba:21:00:68:e0:c7:3c:d2:84:55:e4:40:
49:8b:84:1e:3b:4e:23:6c:6b:9f:13:8c:53:41:97:
0c:4e:5d:fc:e7:0a:4a:74:3f:dc:3e:05:b2:ee:3c:
b6:f5:fe:34:40:38:6b:8f:ea:74:ce:8c:9e:a2:b8:
10:ea:fd:44:4c:10:c4:c0:62:06:bd:94:d3:48:33:
a5:c2:6a:5c:5a:21:9e:bb:d3:74:f3:90:68:da:2c:
37:99:12:85:63:23:8d:f2:b7:f1:d8:69:68:51:f4:
9a:3b:2d:82:a8:c6:8c:55:40:7f:19:3f:b0:79:7e:
0f:61:b4:16:50:9d:3f:9e:1f:1e:b1:f3:22:dd:42:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:87:D0:CD:8A:10:D3:06:53:E9:FB:58:AB:30:CB:57:A4:95:72:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYfQzYoQ0wZT6ftYqzDLV6SVcoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:0b:ea:27:4f:e2:17:19:89:c5:d3:71:d7:8b:84:e3:5d:96:
a1:0d:b2:de:02:d5:ca:9e:b7:9b:b6:3b:c5:aa:5d:30:18:48:
83:5b:f3:d3:cd:25:b0:3a:5a:00:71:e6:88:d1:4b:da:f8:1b:
8e:a9:30:00:94:e8:7c:90:d5:e7:25:4a:df:76:ee:64:0a:81:
cf:22:7d:83:70:2f:3a:c1:49:98:4f:a4:4c:34:88:68:ab:f6:
ef:ac:ac:4f:b8:63:65:cc:b6:bf:20:ea:3c:d8:bd:8c:be:03:
54:eb:b0:da:2c:dc:6e:81:76:27:05:75:7f:62:c0:63:80:3a:
9e:e4:d0:09:85:3d:af:fa:07:28:84:f2:c4:05:58:28:45:3d:
5c:53:3b:44:ec:cd:1e:9f:ab:19:43:aa:38:2f:c1:c8:9b:83:
c7:10:27:24:8f:88:ac:17:d7:9e:dd:1d:63:cf:1c:18:15:6a:
cd:3b:59:f9:6b:e7:7f:04:b2:4e:1f:6b:06:0f:04:0c:cc:3d:
4c:ef:9f:0d:66:29:bc:7e:25:75:20:ac:00:95:54:76:aa:06:
67:76:7a:62:af:46:27:02:7f:4a:79:b0:5b:97:56:37:ef:55:
36:d5:60:e5:dc:93:09:1e:50:6e:03:66:e1:b0:3f:dd:54:a8:
cc:6b:d0:17
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJnD8bE4ZCqeCbOJFUdyOUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODA0MDQxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDg3ZDBjZDhhMTBkMzA2NTNlOWZiNThhYjMwY2I1N2E0OTU3Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslb0/iTGw4Ko9uQv+eDblSak9Esz
1WOOAuZuJtHBwc+XKyJy3lOVofBLNz+d5CXXcGS32a9tt6EjizGtvth6Q5/c3hkL
cPvZdUMcExv587w1nPGDqz9tvu+pKmAt/4MVASSVtYiPiFkuuoVbwDcGB9frscR2
GuFPMEe6IQBo4Mc80oRV5EBJi4QeO04jbGufE4xTQZcMTl385wpKdD/cPgWy7jy2
9f40QDhrj+p0zoyeorgQ6v1ETBDEwGIGvZTTSDOlwmpcWiGeu9N085Bo2iw3mRKF
YyON8rfx2GloUfSaOy2CqMaMVUB/GT+weX4PYbQWUJ0/nh8esfMi3ULXFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE2H0M2KENMGU+n7WKswy1eklXKHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVFlmUXpZb1Ewd1pUNmZ0WXF6RExWNlNWY29jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACIL6idP4hcZicXTcdeL
hONdlqENst4C1cqet5u2O8WqXTAYSINb89PNJbA6WgBx5ojRS9r4G46pMACU6HyQ
1eclSt927mQKgc8ifYNwLzrBSZhPpEw0iGir9u+srE+4Y2XMtr8g6jzYvYy+A1Tr
sNos3G6BdicFdX9iwGOAOp7k0AmFPa/6ByiE8sQFWChFPVxTO0TszR6fqxlDqjgv
wcibg8cQJySPiKwX157dHWPPHBgVas07Wflr538Esk4fawYPBAzMPUzvnw1mKbx+
JXUgrACVVHaqBmd2emKvRicCf0p5sFuXVjfvVTbVYOXckwkeUG4DZuGwP91UqMxr
0Bc=
-----END CERTIFICATE-----
Generated at Fri May 2 06:52:25 2025 by rpki-client