Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tJVCD_smNCYko-6i7nExt4REuWc.roa
File: tJVCD_smNCYko-6i7nExt4REuWc.roa (raw, json)
Hash identifier: 3MJ40f0bufYg4M2O6Vf5aHFfML1b2Yx91G6QUp3K98M=
Subject key identifier: B4:95:42:0F:FB:26:34:26:24:A3:EE:A2:EE:71:31:B7:84:44:B9:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AE33078FBFB84C0CC966DCA6A1AAAFB6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tJVCD_smNCYko-6i7nExt4REuWc.roa
Signing time: Mon 31 Jul 2023 23:05:27 +0000
ROA not before: Mon 31 Jul 2023 23:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:ae32:1921/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ae:33:07:8f:bf:b8:4c:0c:c9:66:dc:a6:a1:aa:af:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 23:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b495420ffb26342624a3eea2ee7131b78444b967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:1c:33:46:24:cb:d3:6f:a2:de:53:95:8a:
c9:d0:cd:87:e9:27:d0:7c:40:6e:a2:99:80:b9:84:
de:02:4a:76:c6:60:8b:75:e6:84:78:0e:9b:93:7f:
e0:ff:be:1e:ad:a1:f2:b8:0b:5d:da:6c:55:7d:59:
65:dd:41:ab:b2:9f:60:87:23:93:6b:fe:21:6b:83:
ea:30:e5:7a:ac:16:fb:d5:ec:c5:0f:a2:de:31:e9:
e3:5f:85:71:40:1a:0a:76:7a:30:af:19:2c:9f:f7:
91:8e:b3:92:69:0a:59:5d:00:f8:1a:f8:af:3e:87:
86:b2:1d:e2:f9:2f:d7:46:a9:3f:45:8d:40:ae:12:
65:e3:04:2b:01:49:ca:0f:e2:d1:cf:0b:df:e2:8f:
a9:c4:1b:a2:81:42:2d:64:64:ac:27:93:67:31:75:
49:d7:79:01:78:72:0e:2b:0c:d4:dc:be:ae:b6:e0:
b8:ac:20:71:b9:73:1c:99:39:97:96:94:77:20:19:
08:5c:41:b1:f0:72:11:8f:41:53:e9:b2:33:98:43:
a0:03:6f:ff:c8:5d:6a:97:76:71:47:72:53:d8:20:
37:73:14:db:79:45:30:82:1a:95:c9:88:4b:f2:50:
d5:8c:c5:54:44:44:ec:84:47:d6:92:c5:d7:67:00:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:95:42:0F:FB:26:34:26:24:A3:EE:A2:EE:71:31:B7:84:44:B9:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tJVCD_smNCYko-6i7nExt4REuWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:5c:f8:88:82:a0:80:76:33:b0:1e:2c:1b:ab:4f:d3:34:04:
00:41:a1:e2:17:21:a5:a5:c2:dd:8f:88:47:ae:64:ae:be:44:
bf:49:c1:61:0c:95:1b:5b:5b:68:d5:18:68:e4:00:3f:46:05:
d3:d2:d0:a4:06:bb:d5:86:a5:f5:78:15:37:a3:50:b0:8d:cc:
b5:45:48:2d:4b:a7:6b:05:92:cb:7d:4f:3d:01:e1:a2:ee:15:
91:df:9d:74:c7:89:5c:d6:70:56:d1:e8:f2:a7:8b:08:62:57:
14:34:e9:1c:cc:d4:23:6d:80:82:2e:d1:74:2a:81:3c:08:30:
fe:a0:21:a6:2c:ab:38:8c:ac:60:a2:2e:fc:99:d6:fe:ee:70:
3d:30:f3:f7:68:b7:06:29:2f:45:01:b0:92:62:90:24:af:49:
e7:57:22:10:27:17:43:62:f7:45:d5:69:c1:20:59:65:8a:0a:
56:6b:ca:d8:ff:04:1a:15:5c:a6:e0:32:4c:27:7a:e1:5c:f6:
2f:88:0c:f8:e9:b9:c9:84:5a:3d:36:a2:77:6d:fb:48:d8:9b:
d3:aa:41:1f:e4:69:ac:2a:77:38:5a:9b:80:a0:51:d7:a7:a3:
42:ab:57:a5:f9:a0:3f:18:8e:62:0b:15:72:56:05:3e:d2:90:
ec:a4:42:fb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmuMwePv7hMDMlm3Kahqq+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzMxMjMwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDk1NDIwZmZiMjYzNDI2MjRhM2VlYTJlZTcxMzFiNzg0NDRiOTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNkcM0Yky9Nvot5TlYrJ0M2H6SfQ
fEBuopmAuYTeAkp2xmCLdeaEeA6bk3/g/74eraHyuAtd2mxVfVll3UGrsp9ghyOT
a/4ha4PqMOV6rBb71ezFD6LeMenjX4VxQBoKdnowrxksn/eRjrOSaQpZXQD4Gviv
PoeGsh3i+S/XRqk/RY1ArhJl4wQrAUnKD+LRzwvf4o+pxBuigUItZGSsJ5NnMXVJ
13kBeHIOKwzU3L6utuC4rCBxuXMcmTmXlpR3IBkIXEGx8HIRj0FT6bIzmEOgA2//
yF1ql3ZxR3JT2CA3cxTbeUUwghqVyYhL8lDVjMVURETshEfWksXXZwBb+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLSVQg/7JjQmJKPuou5xMbeERLlnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdEpWQ0Rfc21OQ1lrby02aTduRXh0NFJFdVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIBc+IiCoIB2M7AeLBur
T9M0BABBoeIXIaWlwt2PiEeuZK6+RL9JwWEMlRtbW2jVGGjkAD9GBdPS0KQGu9WG
pfV4FTejULCNzLVFSC1Lp2sFkst9Tz0B4aLuFZHfnXTHiVzWcFbR6PKniwhiVxQ0
6RzM1CNtgIIu0XQqgTwIMP6gIaYsqziMrGCiLvyZ1v7ucD0w8/dotwYpL0UBsJJi
kCSvSedXIhAnF0Ni90XVacEgWWWKClZrytj/BBoVXKbgMkwneuFc9i+IDPjpucmE
Wj02ondt+0jYm9OqQR/kaawqdzham4CgUdeno0KrV6X5oD8YjmILFXJWBT7SkOyk
Qvs=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:20 2025 by rpki-client