Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TwVs6K56WyF5pPC7hr5n1sDpSbg.roa
File: TwVs6K56WyF5pPC7hr5n1sDpSbg.roa (raw, json)
Hash identifier: 3x8xyr44MNXCRp1O+LW9lTfhGAtdXvK+fwngjCYFYvU=
Subject key identifier: 4F:05:6C:E8:AE:7A:5B:21:79:A4:F0:BB:86:BE:67:D6:C0:E9:49:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AF17002EB68823E2C287B570D06A1D0B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TwVs6K56WyF5pPC7hr5n1sDpSbg.roa
Signing time: Tue 01 Aug 2023 03:14:27 +0000
ROA not before: Tue 01 Aug 2023 03:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:17:00:2e:b6:88:23:e2:c2:87:b5:70:d0:6a:1d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 03:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f056ce8ae7a5b2179a4f0bb86be67d6c0e949b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:26:1b:a3:22:3c:11:65:56:0f:e0:30:53:
f2:81:e3:e7:8d:b0:53:07:0c:11:0d:67:c2:34:e1:
c2:91:73:a5:33:b5:f1:e6:0a:cc:ac:79:8f:33:e6:
84:41:9a:8b:c0:2f:73:7e:33:90:12:0a:60:88:ca:
b2:98:3d:c5:44:d8:f2:d0:7b:bb:61:8c:37:26:48:
d2:a0:81:73:80:f7:63:fc:4c:12:ca:71:ea:a7:9b:
85:ee:6d:db:c5:9e:89:7f:c5:5f:bc:ae:a2:29:05:
0b:c6:ec:9b:1b:14:cf:6a:91:e6:95:2f:42:ca:17:
81:03:21:49:c9:af:fa:1f:23:ea:2f:9b:3f:c2:4a:
55:70:d5:37:6b:fd:0f:6f:0c:fe:e0:18:2e:89:9c:
6e:d2:8a:ef:ec:79:c7:ab:84:26:2a:72:6a:17:1e:
1c:d0:f4:05:5e:e5:99:b9:30:c8:66:e7:dd:bc:c6:
38:48:ad:76:20:9d:e4:40:01:b0:d3:53:d5:52:d9:
a8:59:9b:4c:e7:16:5f:51:03:21:41:79:97:b7:11:
0b:64:11:8f:75:83:d3:90:63:24:23:08:18:eb:e6:
03:e2:08:ad:38:ea:1d:53:60:e5:40:40:48:ad:0c:
96:af:fa:57:bb:cb:86:26:2e:6e:1d:c6:4a:79:af:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:05:6C:E8:AE:7A:5B:21:79:A4:F0:BB:86:BE:67:D6:C0:E9:49:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TwVs6K56WyF5pPC7hr5n1sDpSbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:2f:fb:cc:4b:f2:0d:3c:c8:6b:0c:1d:73:06:bd:d6:a6:64:
44:3a:8b:52:49:ef:58:5f:f1:17:5f:d9:bc:53:4b:52:7f:df:
cf:ee:51:f5:6d:21:2a:11:d1:44:5d:7b:63:14:9e:b7:e7:d6:
b5:c2:2c:2d:17:f9:34:36:b7:91:fe:53:f0:cc:7d:c2:0e:96:
3d:ed:31:9f:c4:61:f7:ae:c8:f9:5b:ed:cf:1f:4b:59:dc:ea:
4c:42:e8:e7:e3:a0:83:75:f6:9d:93:ac:e6:46:3c:82:d9:70:
ff:02:08:67:6b:a9:5f:3b:78:34:42:7d:11:ad:09:09:33:b6:
99:83:87:bb:3a:f5:df:e2:f3:90:06:c7:c4:cc:03:08:7a:85:
58:29:a4:6e:58:cd:ff:5b:e5:ea:37:11:dd:44:6d:c3:42:14:
62:5c:70:ce:f6:f9:0a:3d:b8:96:e3:5e:9d:09:ee:af:7c:d6:
82:6b:8e:4d:49:e4:02:1c:c3:b2:cf:a6:a5:78:c6:e9:18:ef:
44:12:ba:aa:c7:df:7b:16:9c:6e:d6:92:68:18:b1:e1:e3:ea:
db:4e:ae:96:0c:90:17:db:ae:e0:9a:27:ec:30:cc:60:7f:3e:
35:c2:50:3d:34:92:54:a0:7e:82:59:65:d2:94:9d:8b:6b:42:
95:75:61:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmvFwAutogj4sKHtXDQah0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAxMDMxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjA1NmNlOGFlN2E1YjIxNzlhNGYwYmI4NmJlNjdkNmMwZTk0OWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnsmG6MiPBFlVg/gMFPygePnjbBT
BwwRDWfCNOHCkXOlM7Xx5grMrHmPM+aEQZqLwC9zfjOQEgpgiMqymD3FRNjy0Hu7
YYw3JkjSoIFzgPdj/EwSynHqp5uF7m3bxZ6Jf8VfvK6iKQULxuybGxTPapHmlS9C
yheBAyFJya/6HyPqL5s/wkpVcNU3a/0Pbwz+4BguiZxu0orv7HnHq4QmKnJqFx4c
0PQFXuWZuTDIZufdvMY4SK12IJ3kQAGw01PVUtmoWZtM5xZfUQMhQXmXtxELZBGP
dYPTkGMkIwgY6+YD4gitOOodU2DlQEBIrQyWr/pXu8uGJi5uHcZKea/TMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE8FbOiuelsheaTwu4a+Z9bA6Um4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVHdWczZLNTZXeUY1cFBDN2hyNW4xc0RwU2JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHMv+8xL8g08yGsMHXMG
vdamZEQ6i1JJ71hf8Rdf2bxTS1J/38/uUfVtISoR0URde2MUnrfn1rXCLC0X+TQ2
t5H+U/DMfcIOlj3tMZ/EYfeuyPlb7c8fS1nc6kxC6OfjoIN19p2TrOZGPILZcP8C
CGdrqV87eDRCfRGtCQkztpmDh7s69d/i85AGx8TMAwh6hVgppG5Yzf9b5eo3Ed1E
bcNCFGJccM72+Qo9uJbjXp0J7q981oJrjk1J5AIcw7LPpqV4xukY70QSuqrH33sW
nG7WkmgYseHj6ttOrpYMkBfbruCaJ+wwzGB/PjXCUD00klSgfoJZZdKUnYtrQpV1
Yd8=
-----END CERTIFICATE-----
Generated at Fri May 2 09:51:34 2025 by rpki-client