Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t6Tsl2UhEGaXW4fZFeBSoeGG5BM.roa
File: t6Tsl2UhEGaXW4fZFeBSoeGG5BM.roa (raw, json)
Hash identifier: 9Is5Tgy08U+yiE3Jubf2Zw5hWUZao8Qcnb5fYhCGSLU=
Subject key identifier: B7:A4:EC:97:65:21:10:66:97:5B:87:D9:15:E0:52:A1:E1:86:E4:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873DCFB38AB2BC80877368A47892EF0D8D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t6Tsl2UhEGaXW4fZFeBSoeGG5BM.roa
Signing time: Sat 01 Apr 2023 17:13:54 +0000
ROA not before: Sat 01 Apr 2023 17:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3d:cf:b3:8a:b2:bc:80:87:73:68:a4:78:92:ef:0d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 17:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7a4ec9765211066975b87d915e052a1e186e413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:09:fc:56:67:ea:8c:9c:4e:35:3c:62:25:
06:3c:fd:7b:23:64:f7:30:5a:c6:52:85:8f:ab:ae:
fa:69:1f:1e:14:50:b7:d6:57:8f:91:64:3b:4c:6c:
cf:bf:96:7b:23:09:9d:dc:2b:5f:c2:9f:45:04:cb:
89:67:f5:7f:76:c2:d4:20:e4:de:df:5c:3d:41:05:
22:6b:08:ce:6d:19:68:58:4d:92:5a:35:d3:49:2c:
be:ab:64:3f:a7:93:2d:9d:92:4b:c1:d9:e6:a3:5e:
56:a9:11:54:36:95:83:0a:a5:9d:cd:58:4d:b7:f2:
a9:dd:38:7d:35:f0:18:64:bc:00:cf:d7:47:6d:cf:
4b:35:a5:81:4a:38:11:a1:44:e0:83:0f:15:fd:ac:
df:3e:fa:ad:14:12:a4:53:bd:05:6a:34:bf:88:b5:
94:36:d7:8c:13:db:1b:06:36:29:a4:e5:ad:4f:95:
c0:16:a8:1c:1a:01:fd:7d:90:d6:2a:c3:19:30:8e:
3a:ee:5a:e5:cf:cb:69:ef:2f:99:b7:10:b2:fc:73:
d9:a1:4f:6e:32:1e:24:57:cf:99:c3:f1:e4:e6:f9:
df:18:4b:7c:e1:b4:07:55:07:5b:e1:d5:8f:aa:b1:
3e:a4:8f:3c:31:09:83:dc:13:1a:fb:99:83:e1:fe:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:EC:97:65:21:10:66:97:5B:87:D9:15:E0:52:A1:E1:86:E4:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t6Tsl2UhEGaXW4fZFeBSoeGG5BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:06:a2:6f:72:e9:92:bb:79:6c:50:8e:b9:02:f9:90:e8:8b:
6b:8e:f8:29:69:1d:ae:cf:0b:e4:97:c2:36:2a:42:9a:9e:67:
ff:5e:ca:cf:81:28:36:e6:c9:15:94:9e:99:c5:92:87:a4:5b:
35:da:86:cd:d7:62:1c:61:25:f5:55:d0:af:ad:d9:da:6c:1a:
c9:28:1c:53:c9:dc:66:17:9b:6e:e5:36:c6:db:d9:20:1c:05:
6f:3c:f7:95:77:e5:f9:e0:d1:83:94:74:75:e0:8b:f5:f0:84:
8e:05:a2:18:1f:6a:6d:af:5f:69:18:d0:ba:94:ef:33:f2:7a:
35:9a:65:c0:62:02:ea:48:e8:00:f6:77:21:27:86:5c:a2:ea:
96:86:0b:ce:f7:42:b4:82:9c:e3:19:84:c0:69:d7:e0:a5:75:
e7:4e:60:f5:7a:7e:3e:58:4a:7a:70:c2:4f:ba:78:4b:58:07:
72:cd:fe:24:19:65:19:ff:f0:e7:c0:94:c9:f3:9c:8e:cf:5d:
0d:8f:31:7f:49:94:0c:57:92:66:40:e9:fa:75:bc:d3:dc:94:
c3:2c:28:46:be:e6:07:18:01:fe:a1:c8:38:e3:b5:d9:9b:9c:
5e:e1:81:62:6a:46:2f:88:71:0c:f1:ed:bc:7a:20:5b:5b:42:
10:8d:06:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYc9z7OKsryAh3NopHiS7w2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDAxMTcxMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2E0ZWM5NzY1MjExMDY2OTc1Yjg3ZDkxNWUwNTJhMWUxODZlNDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbwJ/FZn6oycTjU8YiUGPP17I2T3
MFrGUoWPq676aR8eFFC31lePkWQ7TGzPv5Z7Iwmd3Ctfwp9FBMuJZ/V/dsLUIOTe
31w9QQUiawjObRloWE2SWjXTSSy+q2Q/p5MtnZJLwdnmo15WqRFUNpWDCqWdzVhN
t/Kp3Th9NfAYZLwAz9dHbc9LNaWBSjgRoUTggw8V/azfPvqtFBKkU70FajS/iLWU
NteME9sbBjYppOWtT5XAFqgcGgH9fZDWKsMZMI467lrlz8tp7y+ZtxCy/HPZoU9u
Mh4kV8+Zw/Hk5vnfGEt84bQHVQdb4dWPqrE+pI88MQmD3BMa+5mD4f6CKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLek7JdlIRBml1uH2RXgUqHhhuQTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdDZUc2wyVWhFR2FYVzRmWkZlQlNvZUdHNUJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGUGom9y6ZK7eWxQjrkC
+ZDoi2uO+ClpHa7PC+SXwjYqQpqeZ/9eys+BKDbmyRWUnpnFkoekWzXahs3XYhxh
JfVV0K+t2dpsGskoHFPJ3GYXm27lNsbb2SAcBW8895V35fng0YOUdHXgi/XwhI4F
ohgfam2vX2kY0LqU7zPyejWaZcBiAupI6AD2dyEnhlyi6paGC873QrSCnOMZhMBp
1+CldedOYPV6fj5YSnpwwk+6eEtYB3LN/iQZZRn/8OfAlMnznI7PXQ2PMX9JlAxX
kmZA6fp1vNPclMMsKEa+5gcYAf6hyDjjtdmbnF7hgWJqRi+IcQzx7bx6IFtbQhCN
Bqo=
-----END CERTIFICATE-----
Generated at Thu May 1 06:45:49 2025 by rpki-client