Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TyOM0eq55LqGqzBrOkcnuoU2vI4.roa
File: TyOM0eq55LqGqzBrOkcnuoU2vI4.roa (raw, json)
Hash identifier: Q1des0zcpih+BigSf1YqgqIQixzLCmo3/rWnlFki2JM=
Subject key identifier: 4F:23:8C:D1:EA:B9:E4:BA:86:AB:30:6B:3A:47:27:BA:85:36:BC:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7ED6B925
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TyOM0eq55LqGqzBrOkcnuoU2vI4.roa
Signing time: Wed 27 Apr 2022 04:10:28 +0000
ROA not before: Wed 27 Apr 2022 04:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128001317 (0x7ed6b925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 04:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f238cd1eab9e4ba86ab306b3a4727ba8536bc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:20:c6:b0:f8:aa:c0:24:95:b1:2f:0a:74:8d:
bb:d2:d3:a2:6b:70:d9:36:29:1e:c7:b3:51:c5:d8:
7f:3d:8d:8e:42:0d:f6:70:0d:fa:be:a0:15:fc:16:
04:72:1b:2e:a1:43:be:25:6f:27:d4:a4:80:87:78:
26:1d:c6:3d:8c:9f:36:8f:95:50:5a:ea:91:15:dc:
2e:ac:de:e3:ef:71:2a:e9:6b:df:33:19:f3:09:0b:
a6:de:f5:ef:81:a9:2e:e0:44:1b:fb:cb:ba:4f:3d:
4a:81:cd:a9:b5:14:b5:b5:45:87:52:b7:2d:98:9b:
5e:b9:53:f2:ad:06:9d:61:4c:61:e6:4b:5c:8d:f7:
35:0c:d1:19:56:9b:ef:17:e1:7f:04:f3:cc:8c:23:
11:05:72:c4:f6:04:d0:9f:51:42:c0:15:6b:eb:d9:
c1:ee:2c:6d:8e:35:2e:84:cb:dd:a3:51:3b:07:31:
fa:77:30:bf:4e:c0:1b:f6:f1:97:51:0b:b1:6f:1b:
e6:91:8d:46:db:d1:1c:a5:4a:6d:35:04:79:04:78:
f6:b9:f0:cf:ff:f5:7c:f4:4a:fb:1c:bf:21:d7:08:
76:ad:65:11:6b:e6:af:d8:d6:b8:27:20:dd:b0:67:
2c:ba:e3:d9:8c:fd:07:80:a6:ad:50:47:7c:a3:38:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:8C:D1:EA:B9:E4:BA:86:AB:30:6B:3A:47:27:BA:85:36:BC:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TyOM0eq55LqGqzBrOkcnuoU2vI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:bd:c6:ce:1b:50:5f:bc:61:47:2b:c7:11:45:1f:e4:81:78:
d1:50:fc:fa:36:a6:7b:aa:9a:21:c1:f6:08:ac:53:ba:2e:46:
99:c0:24:f6:eb:e4:c7:d8:e6:58:b4:6d:b2:27:34:76:48:b9:
28:cd:34:bd:ec:ae:2b:ad:a1:b2:f3:ea:2e:da:65:5d:9d:a8:
ed:df:d2:b9:2e:66:ac:69:f0:75:d8:8b:11:e4:ea:97:1d:30:
9a:2a:54:39:7b:aa:da:fe:c3:a5:1b:11:42:5f:1c:44:fb:51:
43:52:6e:0b:7a:48:19:40:8d:9a:b0:99:21:74:ec:62:6e:bd:
e8:84:f9:ab:de:5e:a0:1a:6f:2c:80:0e:bd:cd:53:49:57:42:
55:f6:d8:27:1f:c1:13:e4:c1:43:78:c5:5a:3d:01:a7:ea:fc:
7e:aa:82:2c:c4:57:a3:39:a2:20:89:b1:e3:d3:e3:38:3a:e8:
28:f5:f5:55:3f:9c:1e:0c:bb:b8:8a:32:49:0c:bd:fc:5c:92:
f7:cc:6b:ed:97:33:db:2d:9e:15:c9:2f:4d:5d:97:48:17:bb:
44:8c:cf:ba:a4:84:18:f7:5f:ba:c8:02:4b:25:0b:df:29:8e:
c6:77:8e:c7:a2:67:c1:69:68:d1:9d:81:c6:50:d1:ae:97:84:
0b:2c:ff:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfta5JTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
NzA0MTAyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGYyMzhjZDFlYWI5
ZTRiYTg2YWIzMDZiM2E0NzI3YmE4NTM2YmM4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOogxrD4qsAklbEvCnSNu9LTomtw2TYpHsezUcXYfz2NjkIN
9nAN+r6gFfwWBHIbLqFDviVvJ9SkgId4Jh3GPYyfNo+VUFrqkRXcLqze4+9xKulr
3zMZ8wkLpt7174GpLuBEG/vLuk89SoHNqbUUtbVFh1K3LZibXrlT8q0GnWFMYeZL
XI33NQzRGVab7xfhfwTzzIwjEQVyxPYE0J9RQsAVa+vZwe4sbY41LoTL3aNROwcx
+ncwv07AG/bxl1ELsW8b5pGNRtvRHKVKbTUEeQR49rnwz//1fPRK+xy/IdcIdq1l
EWvmr9jWuCcg3bBnLLrj2Yz9B4CmrVBHfKM4iIUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRPI4zR6rnkuoarMGs6Rye6hTa8jjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1R5T00wZXE1NUxxR3F6QnJPa2NudW9VMnZJNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBcvcbOG1BfvGFHK8cRRR/kgXjRUPz6NqZ7qpoh
wfYIrFO6LkaZwCT26+TH2OZYtG2yJzR2SLkozTS97K4rraGy8+ou2mVdnajt39K5
LmasafB12IsR5OqXHTCaKlQ5e6ra/sOlGxFCXxxE+1FDUm4LekgZQI2asJkhdOxi
br3ohPmr3l6gGm8sgA69zVNJV0JV9tgnH8ET5MFDeMVaPQGn6vx+qoIsxFejOaIg
ibHj0+M4Ougo9fVVP5weDLu4ijJJDL38XJL3zGvtlzPbLZ4VyS9NXZdIF7tEjM+6
pIQY91+6yAJLJQvfKY7Gd47HomfBaWjRnYHGUNGul4QLLP+B
-----END CERTIFICATE-----
Generated at Sun May 4 05:09:58 2025 by rpki-client