Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TuDdBzqkT-NJCd9Fm1Louovh_eA.roa
File: TuDdBzqkT-NJCd9Fm1Louovh_eA.roa (raw, json)
Hash identifier: +Is+ypItGTM/XzV/k0t/bU/t+eq1gyvgRUpXKB72Ueg=
Subject key identifier: 4E:E0:DD:07:3A:A4:4F:E3:49:09:DF:45:9B:52:E8:BA:8B:E1:FD:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876AA4908FB04095C8631297DA4F0DD12B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TuDdBzqkT-NJCd9Fm1Louovh_eA.roa
Signing time: Mon 10 Apr 2023 10:09:42 +0000
ROA not before: Mon 10 Apr 2023 10:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:a4:90:8f:b0:40:95:c8:63:12:97:da:4f:0d:d1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 10:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ee0dd073aa44fe34909df459b52e8ba8be1fde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:16:92:5b:1d:0f:91:bc:ba:e3:7b:eb:9f:
60:ab:db:56:0a:24:59:57:19:ad:3b:3b:e8:10:51:
7a:3e:fe:6e:88:4d:2f:52:44:28:39:cd:d2:71:84:
58:89:3b:8a:c0:7e:de:8e:5f:04:20:a3:19:35:4a:
48:df:db:7c:a0:fb:a0:8d:22:29:9a:74:21:1d:c6:
1f:23:e5:fa:f0:94:c9:2b:73:33:5a:cb:8d:06:eb:
b4:19:aa:a7:b1:50:83:4f:54:0d:1d:3e:f7:fd:7f:
c1:f6:a4:50:e4:56:25:38:53:76:4a:79:18:01:bc:
a3:f0:8c:31:d6:fd:a9:cb:4c:4d:a1:19:de:24:39:
b9:fa:74:a6:6e:4e:7e:eb:a1:33:db:40:7b:09:44:
85:ff:b5:35:14:4a:d7:47:ab:37:8b:dd:b3:65:62:
d6:29:3a:5a:f0:56:56:ce:2e:1f:bd:66:19:09:87:
49:fb:50:69:73:ca:07:6e:45:8b:89:1f:f7:61:65:
c7:62:5e:ba:e1:17:51:84:79:9a:9a:fa:fb:84:65:
b2:44:93:ee:e3:53:8d:dc:7b:7f:bc:70:15:6f:33:
35:49:ec:e1:95:57:3e:33:d4:65:9e:0a:c7:e3:03:
96:39:03:68:b9:ea:4e:58:cd:d3:91:08:f7:4c:ab:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E0:DD:07:3A:A4:4F:E3:49:09:DF:45:9B:52:E8:BA:8B:E1:FD:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TuDdBzqkT-NJCd9Fm1Louovh_eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:32:82:5f:f4:eb:78:5e:ce:30:5a:9c:5f:89:a9:5a:b2:42:
73:09:8c:5e:8d:fa:1a:19:a9:04:57:7c:a6:a3:07:29:c9:e4:
03:ed:91:de:c0:64:47:d0:f2:71:45:d3:23:4c:ff:b3:9d:aa:
2d:08:c0:9a:f4:c4:1f:b8:87:f2:3b:6c:ae:65:f4:51:55:50:
97:2a:f9:f0:be:4a:2c:ce:ad:86:6f:e7:be:2e:93:1f:23:24:
2f:bd:64:59:66:d2:e2:a8:da:b3:5c:63:d9:c8:a4:47:ff:08:
6d:e8:99:87:05:a2:d5:c9:2b:5b:e5:7d:a9:44:42:de:a6:50:
12:81:2b:8a:cf:5e:17:89:8b:df:82:56:f0:53:77:fa:9a:21:
09:5d:64:b2:26:5f:32:e1:cf:e8:4d:68:53:bc:db:9f:b6:49:
51:f3:07:65:f3:f8:41:3a:d3:ed:ae:69:80:de:73:82:6e:0e:
32:04:d6:8a:53:52:52:02:42:c7:33:62:f9:77:49:5f:be:d2:
04:cf:7a:ae:37:d4:0a:8c:2c:d5:36:e2:1e:4c:e2:6f:58:14:
e9:24:e4:2b:c1:a0:b3:25:8d:1b:0e:c9:af:ad:d4:a5:64:47:
b6:6c:66:41:0f:04:22:d7:a1:e5:03:d4:26:35:d8:bc:bd:d1:
a2:08:eb:6d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdqpJCPsECVyGMSl9pPDdErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEwMTAwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWUwZGQwNzNhYTQ0ZmUzNDkwOWRmNDU5YjUyZThiYThiZTFmZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklEWklsdD5G8uuN7659gq9tWCiRZ
VxmtOzvoEFF6Pv5uiE0vUkQoOc3ScYRYiTuKwH7ejl8EIKMZNUpI39t8oPugjSIp
mnQhHcYfI+X68JTJK3MzWsuNBuu0GaqnsVCDT1QNHT73/X/B9qRQ5FYlOFN2SnkY
Abyj8Iwx1v2py0xNoRneJDm5+nSmbk5+66Ez20B7CUSF/7U1FErXR6s3i92zZWLW
KTpa8FZWzi4fvWYZCYdJ+1Bpc8oHbkWLiR/3YWXHYl664RdRhHmamvr7hGWyRJPu
41ON3Ht/vHAVbzM1SezhlVc+M9RlngrH4wOWOQNouepOWM3TkQj3TKuLzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE7g3Qc6pE/jSQnfRZtS6LqL4f3gMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVHVEZEJ6cWtULU5KQ2Q5Rm0xTG91b3ZoX2VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGcygl/063hezjBanF+J
qVqyQnMJjF6N+hoZqQRXfKajBynJ5APtkd7AZEfQ8nFF0yNM/7Odqi0IwJr0xB+4
h/I7bK5l9FFVUJcq+fC+SizOrYZv574ukx8jJC+9ZFlm0uKo2rNcY9nIpEf/CG3o
mYcFotXJK1vlfalEQt6mUBKBK4rPXheJi9+CVvBTd/qaIQldZLImXzLhz+hNaFO8
25+2SVHzB2Xz+EE60+2uaYDec4JuDjIE1opTUlICQsczYvl3SV++0gTPeq431AqM
LNU24h5M4m9YFOkk5CvBoLMljRsOya+t1KVkR7ZsZkEPBCLXoeUD1CY12Ly90aII
620=
-----END CERTIFICATE-----
Generated at Thu May 1 09:36:24 2025 by rpki-client