Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tb_Ne7RLK2QkZDZJ28N2D892D1E.roa
File: Tb_Ne7RLK2QkZDZJ28N2D892D1E.roa (raw, json)
Hash identifier: F0iySy8nMquDfjgbjVayoV0MiUV9VvoBhU0ia/IMibc=
Subject key identifier: 4D:BF:CD:7B:B4:4B:2B:64:24:64:36:49:DB:C3:76:0F:CF:76:0F:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A4CC1C2CB0CA5F3E0CCB84AFF5901FE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tb_Ne7RLK2QkZDZJ28N2D892D1E.roa
Signing time: Sun 30 Jul 2023 03:16:27 +0000
ROA not before: Sun 30 Jul 2023 03:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a4:cc:1c:2c:b0:ca:5f:3e:0c:cb:84:af:f5:90:1f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 03:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dbfcd7bb44b2b6424643649dbc3760fcf760f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:b9:e4:09:27:76:bc:ba:00:f4:cc:2e:b3:
c1:5e:ce:a7:64:85:6b:aa:2a:7f:98:e9:04:fd:f7:
0d:d3:bd:3e:66:2f:26:51:33:f6:6a:ad:2e:a5:cb:
b0:32:4c:78:f4:68:ad:a4:85:0f:e9:60:40:e7:cf:
46:d2:b9:b9:f8:e6:25:99:86:45:93:db:4d:45:9c:
56:6c:70:11:e2:86:95:c8:17:cc:d8:12:03:35:fb:
fe:82:fa:4f:a2:ce:b4:61:25:cf:9a:df:ce:de:4b:
b3:94:7e:35:63:79:91:fb:b0:06:13:1b:66:50:e9:
67:dd:d2:f6:45:18:42:f7:45:fd:23:a6:73:b6:e6:
1f:dc:82:9c:49:cf:f0:43:09:2f:67:bf:cf:3b:b7:
0c:f1:0b:9c:ee:47:c1:41:e5:cb:72:aa:d7:97:16:
f2:56:35:91:9f:bb:6d:12:4a:8e:ef:8a:b4:42:e3:
7a:5c:b7:64:7e:f1:f8:8a:7b:b5:f6:40:ac:55:9e:
f6:d4:e5:dc:f5:8a:2d:8a:22:72:40:7e:33:6c:e0:
56:c5:20:a6:e2:fd:e8:74:85:c9:a3:b7:a3:ad:dc:
c2:88:e9:00:40:1b:0c:27:56:a9:ea:7c:bd:09:71:
00:97:b5:f4:10:c8:ba:d5:a9:3c:56:ef:e1:e9:3b:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BF:CD:7B:B4:4B:2B:64:24:64:36:49:DB:C3:76:0F:CF:76:0F:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tb_Ne7RLK2QkZDZJ28N2D892D1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:10:14:48:ae:2f:aa:32:94:a7:e1:09:a7:d9:fa:3f:43:03:
13:00:02:de:ca:79:c8:3d:f5:b5:a0:34:c6:98:a0:4d:be:0f:
fd:fc:71:ae:8a:27:17:4e:1f:eb:b8:a4:9b:0d:66:f3:a7:43:
cc:4f:a5:0f:9a:00:c3:d9:72:e2:bf:73:63:2f:ce:7a:14:d1:
3e:b5:57:61:c1:9c:ff:4a:c9:08:f9:44:55:d1:88:ac:7b:01:
dc:1d:99:da:4e:34:6a:89:d1:46:07:d8:05:07:32:34:3e:03:
90:fd:6c:a9:5a:88:f5:17:0e:c8:1a:c4:d0:d9:90:a6:6d:a7:
5a:80:c9:08:74:43:6d:a6:6c:b1:94:34:01:86:90:a3:62:34:
58:56:e7:af:07:f2:89:61:e7:ce:e2:e2:66:90:4a:1e:82:2d:
a4:23:3e:d7:e9:59:f7:7f:66:d7:26:a9:02:00:ab:a1:c5:9d:
eb:5f:f3:b9:64:11:7d:22:e6:92:44:b1:ea:fe:06:7f:a7:d9:
52:ee:99:76:7a:a2:62:5c:45:d5:92:4e:11:db:30:d8:9f:b1:
42:55:41:8a:dd:30:1b:3b:5d:22:4f:8b:44:3c:7d:86:95:0d:
87:05:16:2b:4d:9f:c4:02:9a:bb:bf:f0:6a:5c:e0:88:0f:f5:
03:f9:70:d7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmkzBwssMpfPgzLhK/1kB/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzMwMDMxNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGJmY2Q3YmI0NGIyYjY0MjQ2NDM2NDlkYmMzNzYwZmNmNzYwZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNC55Akndry6APTMLrPBXs6nZIVr
qip/mOkE/fcN070+Zi8mUTP2aq0upcuwMkx49GitpIUP6WBA589G0rm5+OYlmYZF
k9tNRZxWbHAR4oaVyBfM2BIDNfv+gvpPos60YSXPmt/O3kuzlH41Y3mR+7AGExtm
UOln3dL2RRhC90X9I6ZztuYf3IKcSc/wQwkvZ7/PO7cM8Quc7kfBQeXLcqrXlxby
VjWRn7ttEkqO74q0QuN6XLdkfvH4inu19kCsVZ721OXc9YotiiJyQH4zbOBWxSCm
4v3odIXJo7ejrdzCiOkAQBsMJ1ap6ny9CXEAl7X0EMi61ak8Vu/h6TvMpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE2/zXu0SytkJGQ2SdvDdg/Pdg9RMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVGJfTmU3UkxLMlFrWkRaSjI4TjJEODkyRDFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJEQFEiuL6oylKfhCafZ
+j9DAxMAAt7Kecg99bWgNMaYoE2+D/38ca6KJxdOH+u4pJsNZvOnQ8xPpQ+aAMPZ
cuK/c2MvznoU0T61V2HBnP9KyQj5RFXRiKx7AdwdmdpONGqJ0UYH2AUHMjQ+A5D9
bKlaiPUXDsgaxNDZkKZtp1qAyQh0Q22mbLGUNAGGkKNiNFhW568H8olh587i4maQ
Sh6CLaQjPtfpWfd/ZtcmqQIAq6HFnetf87lkEX0i5pJEser+Bn+n2VLumXZ6omJc
RdWSThHbMNifsUJVQYrdMBs7XSJPi0Q8fYaVDYcFFitNn8QCmru/8Gpc4IgP9QP5
cNc=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:08 2025 by rpki-client