Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TymKaNixBnGJ8-XDae2DkByY3Rw.roa
File: TymKaNixBnGJ8-XDae2DkByY3Rw.roa (raw, json)
Hash identifier: 7Zf5yGcK3uo+B/E0oNQjIzLrWV8zg9LMER9ZS1xpmZk=
Subject key identifier: 4F:29:8A:68:D8:B1:06:71:89:F3:E5:C3:69:ED:83:90:1C:98:DD:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018655D77FBBB030C323C2F03D4AF5B08C61
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TymKaNixBnGJ8-XDae2DkByY3Rw.roa
Signing time: Wed 15 Feb 2023 16:10:31 +0000
ROA not before: Wed 15 Feb 2023 16:10:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:d7:7f:bb:b0:30:c3:23:c2:f0:3d:4a:f5:b0:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 16:10:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f298a68d8b1067189f3e5c369ed83901c98dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1b:e9:bb:f1:7f:26:f8:c3:b0:cf:d5:01:ee:
83:6b:53:b6:84:89:04:10:ab:dc:e9:1a:6e:21:00:
7d:87:0c:7e:c4:30:77:b7:7c:d7:ef:26:e9:7f:93:
4c:ca:e0:fa:16:7c:c1:9b:31:ff:98:7a:65:9c:7d:
67:ff:67:66:67:4a:dc:2b:d2:73:0b:cc:0b:8d:1e:
82:b0:1d:87:07:4e:2a:d1:03:14:54:fe:62:fa:d0:
db:98:96:58:85:bb:12:b0:90:53:f8:41:76:4a:29:
12:df:c9:54:2c:71:22:9d:1d:4a:10:88:a2:b8:f4:
cd:15:54:2d:91:8c:f0:df:10:fa:0e:29:a1:f9:25:
f6:59:db:0e:2d:c8:3e:e3:78:d2:2b:07:02:dd:8a:
ff:05:2e:79:4f:e2:67:27:f7:74:aa:b8:b4:ad:ae:
46:63:a3:00:ce:4a:d4:93:4a:d5:a8:45:36:a8:39:
f7:30:d6:29:48:77:53:a7:8c:d5:e7:83:df:45:c5:
b1:ef:08:17:6e:f9:0d:5a:66:c0:e6:01:a2:02:0f:
93:21:7c:fa:ad:3a:88:80:f6:26:d3:04:34:b0:3f:
e3:b3:4a:c6:5a:c0:f8:45:c8:04:78:72:34:2c:92:
a4:fc:62:37:9a:e0:ae:1b:55:ea:e0:44:a2:63:af:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:8A:68:D8:B1:06:71:89:F3:E5:C3:69:ED:83:90:1C:98:DD:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TymKaNixBnGJ8-XDae2DkByY3Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:a9:29:98:a1:83:6d:30:22:60:f9:4a:35:f1:d7:2c:69:8d:
4f:1b:18:1d:9f:6a:85:ef:ff:b7:4d:51:0b:f7:2f:c3:1e:58:
1b:4d:be:f5:fb:d6:93:22:cc:f3:78:a9:6f:3d:02:0f:d3:4a:
ae:2f:8b:74:68:14:18:bf:02:12:20:ff:9b:86:a7:bd:d9:1c:
cb:c2:c7:11:15:f7:13:51:f1:cd:f7:7d:9d:fe:01:d8:20:dd:
da:7c:59:11:d0:01:e4:f1:a9:2c:9d:6b:87:75:33:91:7b:c9:
07:80:57:46:29:be:aa:4a:2f:ae:8b:4e:a8:6a:a0:90:6e:a6:
9c:45:23:27:6b:76:e8:86:d3:31:81:18:41:f8:a6:b1:d4:fc:
6f:21:fa:02:09:7a:bb:bd:4e:3f:95:74:c6:87:47:70:2f:ad:
2e:22:02:41:fc:14:03:cd:55:8c:12:b6:8f:20:f6:df:1c:22:
91:fe:48:65:9a:6a:3a:b3:6d:e4:d5:0a:61:f5:6b:55:1d:c3:
46:f3:e8:3b:c8:a0:95:8e:be:e7:32:6b:ba:6b:68:5f:66:de:
85:3d:3f:09:a0:f0:43:b9:b7:cc:52:2c:98:25:de:77:80:ee:
4f:ad:c0:f5:07:e1:46:87:83:7d:57:de:ff:90:9e:b4:eb:7a:
b0:6c:79:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZV13+7sDDDI8LwPUr1sIxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE1MTYxMDMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjI5OGE2OGQ4YjEwNjcxODlmM2U1YzM2OWVkODM5MDFjOThkZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghvpu/F/JvjDsM/VAe6Da1O2hIkE
EKvc6RpuIQB9hwx+xDB3t3zX7ybpf5NMyuD6FnzBmzH/mHplnH1n/2dmZ0rcK9Jz
C8wLjR6CsB2HB04q0QMUVP5i+tDbmJZYhbsSsJBT+EF2SikS38lULHEinR1KEIii
uPTNFVQtkYzw3xD6Dimh+SX2WdsOLcg+43jSKwcC3Yr/BS55T+JnJ/d0qri0ra5G
Y6MAzkrUk0rVqEU2qDn3MNYpSHdTp4zV54PfRcWx7wgXbvkNWmbA5gGiAg+TIXz6
rTqIgPYm0wQ0sD/js0rGWsD4RcgEeHI0LJKk/GI3muCuG1Xq4ESiY6+bgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE8pimjYsQZxifPlw2ntg5AcmN0cMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVHltS2FOaXhCbkdKOC1YRGFlMkRrQnlZM1J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAmpKZihg20wImD5SjXx
1yxpjU8bGB2faoXv/7dNUQv3L8MeWBtNvvX71pMizPN4qW89Ag/TSq4vi3RoFBi/
AhIg/5uGp73ZHMvCxxEV9xNR8c33fZ3+Adgg3dp8WRHQAeTxqSyda4d1M5F7yQeA
V0YpvqpKL66LTqhqoJBuppxFIydrduiG0zGBGEH4prHU/G8h+gIJeru9Tj+VdMaH
R3AvrS4iAkH8FAPNVYwSto8g9t8cIpH+SGWaajqzbeTVCmH1a1Udw0bz6DvIoJWO
vucya7praF9m3oU9Pwmg8EO5t8xSLJgl3neA7k+twPUH4UaHg31X3v+QnrTrerBs
eQI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:40 2025 by rpki-client