Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tYJCAgJaw0f4Brz_bIsW9kJGbV0.roa
File: tYJCAgJaw0f4Brz_bIsW9kJGbV0.roa (raw, json)
Hash identifier: 2dmL+5zH3AwQYnLXOEOpWajMt4pxBkZnRt2EvTHoC0k=
Subject key identifier: B5:82:42:02:02:5A:C3:47:F8:06:BC:FF:6C:8B:16:F6:42:46:6D:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018604BB979DAD98B9792F817AFB783CF08C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tYJCAgJaw0f4Brz_bIsW9kJGbV0.roa
Signing time: Mon 30 Jan 2023 22:10:48 +0000
ROA not before: Mon 30 Jan 2023 22:10:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:bb:97:9d:ad:98:b9:79:2f:81:7a:fb:78:3c:f0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 22:10:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5824202025ac347f806bcff6c8b16f642466d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:db:a5:a9:74:e2:d9:4f:82:72:36:ee:12:
88:e8:06:f9:af:3f:ca:1e:b6:c1:35:07:90:38:0e:
f8:cf:21:fc:12:ef:29:7d:62:29:ee:c7:22:cd:83:
aa:38:1a:c6:fc:9a:c7:47:ed:db:79:4a:45:c9:bf:
b4:17:29:45:6c:ef:1a:b8:3d:99:47:10:d7:de:ce:
c9:d6:dc:fa:5c:d4:88:fa:a5:a0:fc:5b:81:81:35:
c1:22:d1:d0:2a:af:65:c3:be:92:6c:2a:0e:1f:84:
45:fd:43:6a:3d:3d:f3:67:11:f0:a4:81:04:8c:57:
c8:32:aa:f7:f6:cb:62:f9:f2:07:1f:25:f9:76:d9:
56:ee:10:f9:c6:4e:96:63:cf:73:9b:ec:a2:c3:c8:
b1:38:01:d7:97:a3:a2:8c:4e:a8:92:53:42:5a:59:
6d:60:03:3d:a8:c2:fa:86:36:05:40:fd:b8:85:d0:
6a:83:8a:82:5f:a7:e9:27:78:13:e6:33:02:34:30:
d4:3d:6c:cd:b2:97:6c:0c:f8:84:69:bc:aa:2f:12:
04:f3:cd:67:3c:96:12:b7:58:fd:dd:5c:3b:f1:77:
42:c4:5f:b8:38:a6:b7:63:9f:4d:1e:31:1a:56:56:
5b:3b:87:8b:28:b5:54:0a:f7:13:f5:78:f4:df:b8:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:82:42:02:02:5A:C3:47:F8:06:BC:FF:6C:8B:16:F6:42:46:6D:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tYJCAgJaw0f4Brz_bIsW9kJGbV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:0a:1b:5c:5b:db:4d:d8:e1:7e:95:1d:1d:b3:93:47:33:ce:
c8:be:a6:0c:16:50:ae:d5:6f:64:00:cf:63:18:53:db:2c:b4:
33:c9:4d:18:ca:75:b3:f3:0c:d6:92:36:e9:4f:d7:d1:a5:1c:
ed:1b:9b:d4:f6:e4:6e:5e:54:fe:60:72:15:d7:83:17:95:85:
f7:08:29:13:63:eb:5a:5d:63:bf:09:99:b5:8d:73:00:c5:b6:
da:91:db:93:8d:58:fa:51:3e:91:dd:31:6a:a1:40:0f:a8:19:
4a:e9:df:9d:44:12:64:6d:42:14:10:c2:c1:01:a2:ce:47:dd:
22:3c:6f:94:5a:eb:be:60:f8:df:2e:d4:b0:53:b9:83:25:53:
7d:37:4e:89:8a:6f:5d:98:fb:40:22:df:5b:97:0d:63:80:38:
5a:93:38:26:ee:70:0c:91:a1:94:b8:8a:bb:dc:5e:8f:5a:22:
9c:04:c9:b7:2f:23:a5:77:ea:51:ad:70:69:77:79:4e:d8:71:
59:47:31:a4:15:c9:8f:9a:90:64:a5:ae:35:3e:2c:01:6a:e0:
c8:bb:91:1f:4e:31:b3:90:a8:0a:fd:5d:9a:55:fc:f5:95:b5:
e3:00:4d:24:6e:ef:f9:68:af:15:b8:45:e8:8b:09:ad:39:c6:
bb:37:c5:dc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYEu5edrZi5eS+Bevt4PPCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTMwMjIxMDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTgyNDIwMjAyNWFjMzQ3ZjgwNmJjZmY2YzhiMTZmNjQyNDY2ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYDbpal04tlPgnI27hKI6Ab5rz/K
HrbBNQeQOA74zyH8Eu8pfWIp7scizYOqOBrG/JrHR+3beUpFyb+0FylFbO8auD2Z
RxDX3s7J1tz6XNSI+qWg/FuBgTXBItHQKq9lw76SbCoOH4RF/UNqPT3zZxHwpIEE
jFfIMqr39sti+fIHHyX5dtlW7hD5xk6WY89zm+yiw8ixOAHXl6OijE6oklNCWllt
YAM9qML6hjYFQP24hdBqg4qCX6fpJ3gT5jMCNDDUPWzNspdsDPiEabyqLxIE881n
PJYSt1j93Vw78XdCxF+4OKa3Y59NHjEaVlZbO4eLKLVUCvcT9Xj037hccwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLWCQgICWsNH+Aa8/2yLFvZCRm1dMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdFlKQ0FnSmF3MGY0QnJ6X2JJc1c5a0pHYlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABsKG1xb203Y4X6VHR2z
k0czzsi+pgwWUK7Vb2QAz2MYU9sstDPJTRjKdbPzDNaSNulP19GlHO0bm9T25G5e
VP5gchXXgxeVhfcIKRNj61pdY78JmbWNcwDFttqR25ONWPpRPpHdMWqhQA+oGUrp
351EEmRtQhQQwsEBos5H3SI8b5Ra675g+N8u1LBTuYMlU303TomKb12Y+0Ai31uX
DWOAOFqTOCbucAyRoZS4irvcXo9aIpwEybcvI6V36lGtcGl3eU7YcVlHMaQVyY+a
kGSlrjU+LAFq4Mi7kR9OMbOQqAr9XZpV/PWVteMATSRu7/lorxW4ReiLCa05xrs3
xdw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:49:54 2025 by rpki-client