Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tIk8LrOm18pGCZlIA4YUIuvhVo8.roa
File: tIk8LrOm18pGCZlIA4YUIuvhVo8.roa (raw, json)
Hash identifier: 8PNuBCOfAd8UFoeAGuo7/KSLZpvfJmR6q86TUByffVc=
Subject key identifier: B4:89:3C:2E:B3:A6:D7:CA:46:09:99:48:03:86:14:22:EB:E1:56:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70FC6DB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tIk8LrOm18pGCZlIA4YUIuvhVo8.roa
Signing time: Wed 09 Mar 2022 08:04:36 +0000
ROA not before: Wed 09 Mar 2022 08:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:6db5:5c02/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895591346 (0x70fc6db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 08:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4893c2eb3a6d7ca4609994803861422ebe1568f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:a1:44:a5:1b:a4:ae:33:00:d7:27:0c:67:
0a:17:da:57:f5:9a:de:5f:9f:4e:51:37:b7:3c:91:
4a:fd:50:82:ca:d8:55:ed:f9:9a:3d:18:3e:83:e2:
b8:d3:0c:a7:c5:b3:de:ef:8b:49:a5:85:eb:73:b2:
88:3b:c7:e2:af:08:9f:63:8b:a1:78:19:cf:13:04:
5c:84:e1:31:0c:51:cf:8e:39:99:f6:e2:c8:a8:6b:
bf:74:09:90:f1:fd:56:15:1c:b9:2d:12:7c:8a:80:
9c:92:9a:7c:22:45:2a:17:e6:3f:15:d3:6a:62:a9:
49:77:38:8b:a5:92:02:d8:5c:7c:30:a0:12:30:45:
c0:94:51:b3:6f:28:d1:79:ee:12:88:d3:6e:7a:4b:
9b:b9:7a:e4:a4:24:de:55:bd:66:c8:dc:6e:d7:80:
43:d8:cd:49:47:e6:2e:67:52:82:4a:3d:42:17:bf:
62:ae:21:4c:a9:53:44:f3:dd:56:f0:9f:3b:97:9f:
f4:c1:19:7d:67:3b:fa:91:48:6f:be:95:6e:0a:b9:
1e:2f:9f:c3:6f:ae:2c:ed:96:b1:f1:61:2f:6b:a2:
18:ef:61:b8:05:60:99:65:72:06:9a:11:05:14:fc:
36:75:94:5b:99:c1:08:9c:59:c7:aa:d8:5f:06:b8:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:89:3C:2E:B3:A6:D7:CA:46:09:99:48:03:86:14:22:EB:E1:56:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tIk8LrOm18pGCZlIA4YUIuvhVo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:53:31:1a:74:93:00:e4:19:d8:1f:5b:79:72:a6:87:6e:35:
21:70:cd:5e:bb:61:c7:fa:cd:e6:64:0a:2d:2c:ac:b3:75:02:
f7:9a:ef:48:e2:0e:f0:ad:38:d9:a9:76:30:f7:52:fc:7c:18:
f3:b3:e6:51:66:ec:da:85:e3:0e:3c:8e:fe:99:1a:57:d4:27:
37:4b:90:19:27:ec:0b:6b:4a:90:01:74:ba:df:60:4f:22:9f:
eb:30:be:ea:85:47:cc:68:4f:5b:f9:7d:62:ea:2b:cc:49:96:
bc:f3:df:2c:f6:4b:08:ae:75:23:c7:1f:85:8d:fb:f6:85:55:
d8:f8:81:46:84:4e:7d:ed:e3:6a:0c:e0:78:75:cd:7c:ed:26:
71:92:03:9e:e4:de:ec:75:3e:c7:32:64:a2:32:5f:06:38:2f:
0e:46:c0:8f:13:6b:3a:98:34:60:b7:4b:df:4d:45:51:9b:f3:
a8:fa:26:69:38:36:b3:0c:89:34:06:e7:ad:09:25:8c:49:f2:
b7:2d:62:e6:28:86:74:37:bd:dd:10:9a:ba:e9:51:4c:5a:ec:
bc:30:e0:4c:2f:4c:35:71:a0:22:08:26:3c:7e:bb:ad:a6:bc:
e2:98:7b:92:af:00:24:b4:9a:a2:07:2d:87:21:66:78:dc:1b:
b3:9a:be:9d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcPxtsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
OTA4MDQzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjQ4OTNjMmViM2E2
ZDdjYTQ2MDk5OTQ4MDM4NjE0MjJlYmUxNTY4ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJsioUSlG6SuMwDXJwxnChfaV/Wa3l+fTlE3tzyRSv1QgsrY
Ve35mj0YPoPiuNMMp8Wz3u+LSaWF63OyiDvH4q8In2OLoXgZzxMEXIThMQxRz445
mfbiyKhrv3QJkPH9VhUcuS0SfIqAnJKafCJFKhfmPxXTamKpSXc4i6WSAthcfDCg
EjBFwJRRs28o0XnuEojTbnpLm7l65KQk3lW9ZsjcbteAQ9jNSUfmLmdSgko9Qhe/
Yq4hTKlTRPPdVvCfO5ef9MEZfWc7+pFIb76Vbgq5Hi+fw2+uLO2WsfFhL2uiGO9h
uAVgmWVyBpoRBRT8NnWUW5nBCJxZx6rYXwa4Sq0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS0iTwus6bXykYJmUgDhhQi6+FWjzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3RJazhMck9tMThwR0NabElBNFlVSXV2aFZvOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAFUzEadJMA5BnYH1t5cqaHbjUhcM1eu2HH+s3m
ZAotLKyzdQL3mu9I4g7wrTjZqXYw91L8fBjzs+ZRZuzaheMOPI7+mRpX1Cc3S5AZ
J+wLa0qQAXS632BPIp/rML7qhUfMaE9b+X1i6ivMSZa8898s9ksIrnUjxx+Fjfv2
hVXY+IFGhE597eNqDOB4dc187SZxkgOe5N7sdT7HMmSiMl8GOC8ORsCPE2s6mDRg
t0vfTUVRm/Oo+iZpODazDIk0BuetCSWMSfK3LWLmKIZ0N73dEJq66VFMWuy8MOBM
L0w1caAiCCY8frutprzimHuSrwAktJqiBy2HIWZ43Buzmr6d
-----END CERTIFICATE-----
Generated at Thu May 1 07:37:35 2025 by rpki-client