Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/au2Tgsh_trCrdPwVYh1OeLiVPpM.roa
File: au2Tgsh_trCrdPwVYh1OeLiVPpM.roa (raw, json)
Hash identifier: b7pEEpTyyGkNWJALpjBDmc6o2CYNWQo38KGMM4rPn70=
Subject key identifier: 6A:ED:93:82:C8:7F:B6:B0:AB:74:FC:15:62:1D:4E:78:B8:95:3E:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B0984419A39179BE5A04B7503D272C0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/au2Tgsh_trCrdPwVYh1OeLiVPpM.roa
Signing time: Mon 24 Apr 2023 00:09:41 +0000
ROA not before: Mon 24 Apr 2023 00:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b0:98:44:19:a3:91:79:be:5a:04:b7:50:3d:27:2c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 00:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aed9382c87fb6b0ab74fc15621d4e78b8953e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:04:c6:a3:d5:6a:36:7b:cf:41:79:c8:e1:
11:85:0e:33:7c:26:83:e9:1f:af:6a:be:dd:c3:a5:
9e:ec:10:be:d8:24:0b:6c:dc:08:09:60:8f:00:ee:
71:4e:38:e1:9a:7a:29:bc:79:e0:0b:ab:64:77:08:
a8:5d:d2:05:6f:d1:ab:5f:62:cc:b9:42:66:cd:d8:
41:0e:ce:d8:4f:e7:8f:20:f9:86:19:52:7f:87:1f:
c4:7f:8c:31:3e:df:2b:15:6c:b5:89:93:02:46:22:
54:ea:ac:cc:f9:70:e0:c4:73:e2:89:f7:05:3a:f3:
1b:c5:f2:56:38:5c:b9:bd:cb:6e:cc:30:c9:5f:06:
a7:a7:ea:e6:2c:ef:5b:d2:e0:18:eb:8f:7e:ec:e3:
b3:d5:d8:db:5d:81:cc:4e:ba:6e:34:2b:3d:e6:20:
bf:5c:02:11:b9:2f:3b:85:8e:f1:be:1e:e1:3e:7a:
1e:a0:5d:f3:1b:ca:a3:51:9e:42:76:94:d8:6a:23:
0b:34:e9:4b:d4:f8:e2:41:7e:b5:da:1a:ea:1f:aa:
f1:b1:f7:98:54:91:b3:6b:ce:63:64:d9:a1:09:84:
0b:f8:15:8a:1a:35:ce:02:56:f8:b0:cb:53:cf:b3:
6f:db:a5:f6:5a:9e:c9:c3:6d:c5:f8:14:d3:d6:4b:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:93:82:C8:7F:B6:B0:AB:74:FC:15:62:1D:4E:78:B8:95:3E:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/au2Tgsh_trCrdPwVYh1OeLiVPpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:de:2f:e7:32:9c:d2:3d:50:4e:89:0e:71:f9:f9:94:a4:48:
51:96:64:9e:06:54:d1:ec:7a:47:09:7a:c0:fa:bb:af:13:91:
0c:8f:8e:4a:ca:5d:52:1e:ad:b3:de:ce:da:45:b3:2e:53:77:
12:bb:a1:a0:41:c0:3b:f1:5d:2e:f4:b0:e3:eb:bc:65:24:f0:
70:ce:7a:a7:43:a2:d3:0a:4a:f4:f2:77:2e:f7:eb:67:57:66:
7b:f8:01:ac:43:6b:e9:ae:21:bc:fe:1d:2e:8a:a9:b4:20:25:
17:89:3e:e9:82:f7:6b:4a:60:1e:9b:39:1f:da:19:65:e6:00:
ed:bb:48:89:10:01:f1:7b:d8:7d:d0:d5:fb:90:61:25:2b:84:
09:cb:17:87:c0:7f:ec:5b:43:1a:f7:5f:b8:17:c8:59:75:11:
b9:7c:ab:6d:e5:9e:70:79:5a:89:29:3d:d0:8e:48:17:6c:da:
ee:93:28:96:ea:71:1e:20:fa:21:27:56:49:3a:5e:cc:e6:22:
a1:96:bf:14:57:2d:74:05:0b:67:78:6f:26:2c:11:75:71:6e:
1c:dc:e7:43:cc:82:78:f0:d2:78:52:d4:90:48:a8:09:78:fd:
88:3b:89:34:65:a2:c1:3d:8f:60:a8:e0:57:8c:e4:01:b8:dc:
03:8c:40:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYewmEQZo5F5vloEt1A9JywPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI0MDAwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWVkOTM4MmM4N2ZiNmIwYWI3NGZjMTU2MjFkNGU3OGI4OTUzZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka0ExqPVajZ7z0F5yOERhQ4zfCaD
6R+var7dw6We7BC+2CQLbNwICWCPAO5xTjjhmnopvHngC6tkdwioXdIFb9GrX2LM
uUJmzdhBDs7YT+ePIPmGGVJ/hx/Ef4wxPt8rFWy1iZMCRiJU6qzM+XDgxHPiifcF
OvMbxfJWOFy5vctuzDDJXwanp+rmLO9b0uAY649+7OOz1djbXYHMTrpuNCs95iC/
XAIRuS87hY7xvh7hPnoeoF3zG8qjUZ5CdpTYaiMLNOlL1PjiQX612hrqH6rxsfeY
VJGza85jZNmhCYQL+BWKGjXOAlb4sMtTz7Nv26X2Wp7Jw23F+BTT1kvxcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGrtk4LIf7awq3T8FWIdTni4lT6TMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYXUyVGdzaF90ckNyZFB3VlloMU9lTGlWUHBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIXeL+cynNI9UE6JDnH5
+ZSkSFGWZJ4GVNHsekcJesD6u68TkQyPjkrKXVIerbPeztpFsy5TdxK7oaBBwDvx
XS70sOPrvGUk8HDOeqdDotMKSvTydy7362dXZnv4AaxDa+muIbz+HS6KqbQgJReJ
PumC92tKYB6bOR/aGWXmAO27SIkQAfF72H3Q1fuQYSUrhAnLF4fAf+xbQxr3X7gX
yFl1Ebl8q23lnnB5WokpPdCOSBds2u6TKJbqcR4g+iEnVkk6XszmIqGWvxRXLXQF
C2d4byYsEXVxbhzc50PMgnjw0nhS1JBIqAl4/Yg7iTRlosE9j2Co4FeM5AG43AOM
QNU=
-----END CERTIFICATE-----
Generated at Fri May 2 07:38:03 2025 by rpki-client