Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sTCAB6HR_8707RSAhuURY4TrN3U.roa
File: sTCAB6HR_8707RSAhuURY4TrN3U.roa (raw, json)
Hash identifier: 16MKEwG3bgQGTqX1iZGj5b+v3IYqHxUSskIRcVxTw44=
Subject key identifier: B1:30:80:07:A1:D1:FF:CE:F4:ED:14:80:86:E5:11:63:84:EB:37:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833E45F738640A7A7706A1051FB38C8C81
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sTCAB6HR_8707RSAhuURY4TrN3U.roa
Signing time: Wed 14 Sep 2022 23:11:56 +0000
ROA not before: Wed 14 Sep 2022 23:11:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3e:45:f7:38:64:0a:7a:77:06:a1:05:1f:b3:8c:8c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 14 23:11:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1308007a1d1ffcef4ed148086e5116384eb3775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:95:db:98:d0:45:56:21:a6:0b:b9:0a:af:
a1:90:17:e0:66:81:02:87:77:22:5b:b3:9a:73:86:
97:5f:9f:da:35:63:7e:19:d7:16:56:40:b8:c1:d5:
bb:5b:76:dd:ee:1a:ff:03:a0:dc:39:d5:76:da:6b:
75:fe:b1:25:08:d6:d0:8f:21:59:1a:7f:35:d0:b7:
1d:2b:06:aa:9e:3f:f9:c0:78:7b:f9:12:7b:2d:2b:
9e:c2:ab:9c:6d:af:ef:d1:33:9e:03:b3:2f:26:07:
cf:43:c4:45:ad:c6:63:93:f6:79:e8:d4:78:47:05:
ce:13:a7:bd:de:8d:8b:4e:47:f1:00:94:2f:2c:a2:
21:e2:b2:4a:74:cb:94:42:22:4f:26:5e:34:2e:bb:
d6:41:92:44:9b:78:9c:98:47:c0:03:74:49:65:e5:
c7:6b:e6:4a:f9:67:65:1c:45:ff:8c:e2:0e:f9:c2:
75:22:c7:5e:28:4e:21:f6:45:2b:81:7a:73:9a:e8:
e1:bb:51:17:09:e0:44:8f:2e:87:bc:ef:74:26:b1:
bd:b9:3b:bd:45:5b:72:cc:ec:2f:31:00:fb:e3:40:
66:aa:37:53:d2:c8:b5:84:fa:60:55:dc:44:52:d7:
78:ee:b8:e6:71:11:fc:f2:b5:97:cf:0a:01:45:fa:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:80:07:A1:D1:FF:CE:F4:ED:14:80:86:E5:11:63:84:EB:37:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sTCAB6HR_8707RSAhuURY4TrN3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:c3:b4:15:71:c7:93:4a:08:10:16:6b:64:db:2e:99:89:9a:
f3:46:64:3c:85:94:04:a3:7f:94:c5:86:83:f2:64:66:f9:66:
81:76:ce:89:51:fb:76:5b:37:ee:b0:e1:0b:56:c2:31:9e:d3:
9b:6a:3f:57:88:87:54:84:b3:1f:bb:37:d6:3e:fe:57:e6:90:
da:a4:57:7d:44:e1:94:9d:7c:e7:2a:8a:00:a2:3e:c8:0e:f1:
50:f5:36:09:e1:fd:01:08:9e:c3:70:b9:b0:5b:3b:38:de:31:
0f:bc:8a:02:f4:a0:7f:f8:e7:e1:ea:b6:be:a2:fb:ce:24:55:
48:4c:3b:fb:98:88:5e:f2:dd:60:81:38:c8:6b:23:02:ff:04:
e1:87:a2:03:9a:89:35:75:2d:1f:0b:2c:73:28:e6:9d:a1:7d:
94:0b:9b:62:9d:4d:1d:88:ce:b2:c2:4a:16:fc:38:3b:c4:8b:
6d:20:b1:6c:68:fd:80:e3:36:d7:b0:57:99:ec:7e:45:14:b7:
66:b6:8b:21:2d:61:c9:ee:b1:45:be:ec:7e:2c:ea:94:ca:ee:
4c:e5:54:f4:83:a2:74:70:b6:0f:23:24:05:6d:9a:2b:bf:e9:
1e:b3:54:27:71:71:b3:4f:f6:19:1f:11:ed:01:c7:a1:03:6b:
26:64:a1:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYM+Rfc4ZAp6dwahBR+zjIyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTE0MjMxMTU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTMwODAwN2ExZDFmZmNlZjRlZDE0ODA4NmU1MTE2Mzg0ZWIzNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfaV25jQRVYhpgu5Cq+hkBfgZoEC
h3ciW7Oac4aXX5/aNWN+GdcWVkC4wdW7W3bd7hr/A6DcOdV22mt1/rElCNbQjyFZ
Gn810LcdKwaqnj/5wHh7+RJ7LSuewqucba/v0TOeA7MvJgfPQ8RFrcZjk/Z56NR4
RwXOE6e93o2LTkfxAJQvLKIh4rJKdMuUQiJPJl40LrvWQZJEm3icmEfAA3RJZeXH
a+ZK+WdlHEX/jOIO+cJ1IsdeKE4h9kUrgXpzmujhu1EXCeBEjy6HvO90JrG9uTu9
RVtyzOwvMQD740BmqjdT0si1hPpgVdxEUtd47rjmcRH88rWXzwoBRfoFPQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLEwgAeh0f/O9O0UgIblEWOE6zd1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvc1RDQUI2SFJfODcwN1JTQWh1VVJZNFRyTjNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFbDtBVxx5NKCBAWa2Tb
LpmJmvNGZDyFlASjf5TFhoPyZGb5ZoF2zolR+3ZbN+6w4QtWwjGe05tqP1eIh1SE
sx+7N9Y+/lfmkNqkV31E4ZSdfOcqigCiPsgO8VD1Ngnh/QEInsNwubBbOzjeMQ+8
igL0oH/45+Hqtr6i+84kVUhMO/uYiF7y3WCBOMhrIwL/BOGHogOaiTV1LR8LLHMo
5p2hfZQLm2KdTR2IzrLCShb8ODvEi20gsWxo/YDjNtewV5nsfkUUt2a2iyEtYcnu
sUW+7H4s6pTK7kzlVPSDonRwtg8jJAVtmiu/6R6zVCdxcbNP9hkfEe0Bx6EDayZk
ofQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:43:15 2025 by rpki-client