Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tbzttLqtLPoY9keM9zUJzF2r60c.roa
File: tbzttLqtLPoY9keM9zUJzF2r60c.roa (raw, json)
Hash identifier: 3PbKKGWS1E2eaxPK30HdXpy+xj116ZO6kjA+1KKe+UU=
Subject key identifier: B5:BC:ED:B4:BA:AD:2C:FA:18:F6:47:8C:F7:35:09:CC:5D:AB:EB:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D3DC573BF734DBE517651EA24A123787
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tbzttLqtLPoY9keM9zUJzF2r60c.roa
Signing time: Fri 14 Oct 2022 00:19:36 +0000
ROA not before: Fri 14 Oct 2022 00:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d3:dc:57:3b:f7:34:db:e5:17:65:1e:a2:4a:12:37:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 14 00:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5bcedb4baad2cfa18f6478cf73509cc5dabeb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:c4:e4:1b:b2:97:5a:6f:82:1c:79:98:aa:
8c:25:b0:4e:e2:f2:e4:e3:88:9a:18:71:8f:e1:ef:
bd:d9:e4:37:fe:de:ff:62:4f:4b:87:e9:4b:3b:0e:
72:0f:0d:6d:e9:7a:a8:50:98:d4:fb:5e:3c:61:db:
0d:f3:d0:78:aa:7a:9f:a3:19:19:c5:81:e6:e7:4e:
fa:5b:b3:17:ae:db:da:94:16:61:30:69:31:ea:dd:
96:b2:79:56:ab:a6:e6:c2:c1:80:ae:3c:7e:e7:9f:
76:d8:3f:b2:eb:c2:62:15:71:3b:c5:03:88:4f:44:
92:d9:f4:87:52:9c:7a:b3:4a:2c:42:44:68:e7:20:
41:84:fb:eb:20:02:0e:30:eb:eb:e5:b4:9c:ce:ef:
3f:48:67:50:75:3a:97:11:a2:fd:ef:26:f8:da:e2:
b2:72:dd:c0:2f:82:84:36:8e:c7:ff:f1:45:26:10:
10:75:5a:f8:7c:b7:ee:bf:f5:05:0a:75:d8:9d:80:
5c:a4:6f:ce:df:81:b7:3d:13:41:26:03:ab:22:5c:
82:8c:75:5f:8f:27:fb:7b:bd:5d:9e:16:fe:e2:d4:
56:c2:0e:92:d0:e7:82:41:67:f8:73:08:d1:db:ca:
48:b5:17:cc:aa:d8:3a:c8:7e:2c:1d:b1:5f:b8:60:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BC:ED:B4:BA:AD:2C:FA:18:F6:47:8C:F7:35:09:CC:5D:AB:EB:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tbzttLqtLPoY9keM9zUJzF2r60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:76:9e:50:36:28:be:11:9f:ad:41:0e:67:6f:ef:a3:ad:80:
3e:d5:37:39:dc:14:f9:f7:92:89:1b:37:22:91:5f:bd:a7:c6:
08:a1:2b:2b:b8:94:63:4b:03:e8:0b:1a:6d:b7:2e:d4:c6:ef:
b2:d5:95:48:4e:d7:2f:cc:16:df:67:c1:51:89:eb:d8:4e:ef:
33:3c:f5:ee:64:1d:1b:8e:78:fc:02:b8:93:fa:04:8a:de:d4:
51:b3:15:06:2f:3c:97:80:7b:6c:ca:b6:97:82:c5:47:f7:d7:
33:88:39:27:fd:e3:52:39:c4:ac:74:cf:91:7c:b1:2c:50:23:
e8:7e:b7:9c:fe:50:d8:0a:09:7b:0d:39:dc:e6:96:d2:a3:05:
9f:cf:2e:92:48:01:aa:c8:c4:ed:4a:a3:db:f9:e3:ee:b3:2e:
59:d6:5d:67:aa:17:b1:f6:c7:06:2b:43:dc:ea:3e:65:4c:c1:
aa:38:6a:9e:c2:f4:4e:f0:a6:13:d6:bd:b6:80:55:2a:58:1e:
c0:7a:c9:d3:a6:db:ae:95:4f:b6:33:cf:23:fd:58:38:46:3f:
8e:ca:01:ae:1b:1d:26:af:2b:47:c6:7a:3b:59:a6:9c:72:f7:
d6:7a:d7:5f:c8:0f:df:8a:19:76:aa:89:ff:91:84:7d:0b:43:
7e:75:7b:d2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPT3Fc79zTb5RdlHqJKEjeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDE0MDAxOTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWJjZWRiNGJhYWQyY2ZhMThmNjQ3OGNmNzM1MDljYzVkYWJlYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX7E5Buyl1pvghx5mKqMJbBO4vLk
44iaGHGP4e+92eQ3/t7/Yk9Lh+lLOw5yDw1t6XqoUJjU+148YdsN89B4qnqfoxkZ
xYHm5076W7MXrtvalBZhMGkx6t2WsnlWq6bmwsGArjx+55922D+y68JiFXE7xQOI
T0SS2fSHUpx6s0osQkRo5yBBhPvrIAIOMOvr5bSczu8/SGdQdTqXEaL97yb42uKy
ct3AL4KENo7H//FFJhAQdVr4fLfuv/UFCnXYnYBcpG/O34G3PRNBJgOrIlyCjHVf
jyf7e71dnhb+4tRWwg6S0OeCQWf4cwjR28pItRfMqtg6yH4sHbFfuGBOZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLW87bS6rSz6GPZHjPc1Ccxdq+tHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdGJ6dHRMcXRMUG9ZOWtlTTl6VUp6RjJyNjBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAR2nlA2KL4Rn61BDmdv
76OtgD7VNzncFPn3kokbNyKRX72nxgihKyu4lGNLA+gLGm23LtTG77LVlUhO1y/M
Ft9nwVGJ69hO7zM89e5kHRuOePwCuJP6BIre1FGzFQYvPJeAe2zKtpeCxUf31zOI
OSf941I5xKx0z5F8sSxQI+h+t5z+UNgKCXsNOdzmltKjBZ/PLpJIAarIxO1Ko9v5
4+6zLlnWXWeqF7H2xwYrQ9zqPmVMwao4ap7C9E7wphPWvbaAVSpYHsB6ydOm266V
T7YzzyP9WDhGP47KAa4bHSavK0fGejtZppxy99Z611/ID9+KGXaqif+RhH0LQ351
e9I=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:53:50 2025 by rpki-client