Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TyZ1qUND7UBroE1OVFSUDHCaZJA.roa
File: TyZ1qUND7UBroE1OVFSUDHCaZJA.roa (raw, json)
Hash identifier: yqLAYRdNnYHDjw5HYjxiAi6GNB4oKywsVycMNg1rkw0=
Subject key identifier: 4F:26:75:A9:43:43:ED:40:6B:A0:4D:4E:54:54:94:0C:70:9A:64:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018757F9824FF8A14D86DD506EF0186EE5A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TyZ1qUND7UBroE1OVFSUDHCaZJA.roa
Signing time: Thu 06 Apr 2023 19:09:42 +0000
ROA not before: Thu 06 Apr 2023 19:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:f9:82:4f:f8:a1:4d:86:dd:50:6e:f0:18:6e:e5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 19:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2675a94343ed406ba04d4e5454940c709a6490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:0e:de:43:69:ec:15:e2:03:8a:24:ba:63:
f5:c6:37:55:e2:40:6f:f1:e9:45:02:cb:e7:88:d5:
cd:8d:15:66:15:4b:a7:b4:35:8a:52:30:33:78:f2:
3b:0a:34:8c:d8:7a:6d:19:19:92:c2:5c:d6:16:ae:
89:fe:e3:77:35:17:db:b4:c1:f3:d2:58:b8:c7:5b:
0d:43:dc:46:7b:97:cd:09:e2:c8:f4:1a:56:b4:99:
ea:03:63:26:76:db:ec:85:b0:75:2b:85:d0:11:0d:
ea:54:b7:78:3f:12:02:ec:8d:e4:7b:8e:2e:03:3d:
a6:fc:22:5b:d0:67:eb:e2:35:24:8d:8b:24:64:77:
94:25:0f:86:35:62:bc:58:d6:92:d0:e5:cb:e8:7c:
8c:31:4d:85:2d:7e:44:88:bb:6c:22:d7:e7:a3:5e:
5e:96:b1:fb:04:cb:83:9a:5b:bd:26:e9:0d:db:de:
37:b7:09:72:e1:01:6d:70:59:6b:c1:aa:0c:f5:40:
4f:67:12:20:e0:2a:eb:1b:4b:4e:32:be:13:cb:44:
ad:41:58:f3:f1:f5:67:2b:f6:57:2e:16:72:64:be:
0e:01:14:9a:3e:f8:19:cf:29:4a:2d:e8:0d:48:da:
a9:29:57:a1:53:28:75:e2:e9:37:fa:e4:96:a1:0e:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:26:75:A9:43:43:ED:40:6B:A0:4D:4E:54:54:94:0C:70:9A:64:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TyZ1qUND7UBroE1OVFSUDHCaZJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:2d:f7:05:98:d0:f4:24:52:ad:22:49:07:a3:91:8b:70:15:
fa:b0:37:84:03:c9:24:cc:9c:dc:7a:8b:21:63:8f:37:f2:b0:
e0:61:17:01:a9:72:03:bc:90:98:49:5a:36:49:d5:21:cc:bf:
bc:7b:d5:81:ca:f6:5a:b8:de:92:8d:9d:3a:a9:6f:5c:41:64:
97:83:9a:a8:f5:60:33:af:a6:51:a1:7d:b4:97:46:6f:c0:8d:
80:37:aa:68:a5:e7:ed:68:4e:96:bb:5c:af:ad:71:60:eb:45:
b8:6d:42:41:38:03:fd:2e:b3:61:9b:0c:23:d8:b3:48:d9:6e:
d9:3e:ef:29:01:6e:50:bc:91:d8:5a:16:a2:6f:04:36:c0:0e:
04:5d:96:73:2f:ca:79:45:db:b8:0b:8d:6e:ed:fb:c1:ae:e3:
81:59:34:ae:32:6a:fa:b6:60:de:5b:53:32:09:26:fe:b1:6a:
9b:39:39:de:0e:f1:a9:f5:40:0c:64:fc:eb:27:ae:f9:71:2b:
5d:bf:4c:fa:9f:5e:64:d9:a3:c1:f3:2d:4a:be:83:c3:df:44:
b4:cd:6d:c3:3c:b7:97:1a:a1:72:27:be:d1:b8:a1:4d:dc:b0:
ae:90:84:5f:e6:1b:9d:a8:a2:f7:fb:7f:96:bf:6d:08:80:d7:
04:01:a2:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdX+YJP+KFNht1QbvAYbuWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA2MTkwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjI2NzVhOTQzNDNlZDQwNmJhMDRkNGU1NDU0OTQwYzcwOWE2NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0IO3kNp7BXiA4okumP1xjdV4kBv
8elFAsvniNXNjRVmFUuntDWKUjAzePI7CjSM2HptGRmSwlzWFq6J/uN3NRfbtMHz
0li4x1sNQ9xGe5fNCeLI9BpWtJnqA2MmdtvshbB1K4XQEQ3qVLd4PxIC7I3ke44u
Az2m/CJb0Gfr4jUkjYskZHeUJQ+GNWK8WNaS0OXL6HyMMU2FLX5EiLtsItfno15e
lrH7BMuDmlu9JukN2943twly4QFtcFlrwaoM9UBPZxIg4CrrG0tOMr4Ty0StQVjz
8fVnK/ZXLhZyZL4OARSaPvgZzylKLegNSNqpKVehUyh14uk3+uSWoQ7evwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE8mdalDQ+1Aa6BNTlRUlAxwmmSQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVHlaMXFVTkQ3VUJyb0UxT1ZGU1VESENhWkpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJkt9wWY0PQkUq0iSQej
kYtwFfqwN4QDySTMnNx6iyFjjzfysOBhFwGpcgO8kJhJWjZJ1SHMv7x71YHK9lq4
3pKNnTqpb1xBZJeDmqj1YDOvplGhfbSXRm/AjYA3qmil5+1oTpa7XK+tcWDrRbht
QkE4A/0us2GbDCPYs0jZbtk+7ykBblC8kdhaFqJvBDbADgRdlnMvynlF27gLjW7t
+8Gu44FZNK4yavq2YN5bUzIJJv6xaps5Od4O8an1QAxk/OsnrvlxK12/TPqfXmTZ
o8HzLUq+g8PfRLTNbcM8t5caoXInvtG4oU3csK6QhF/mG52oovf7f5a/bQiA1wQB
ou8=
-----END CERTIFICATE-----
Generated at Thu May 1 20:24:47 2025 by rpki-client