Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tch3_-FJM78bysoVZemhqYJ2XU8.roa
File: tch3_-FJM78bysoVZemhqYJ2XU8.roa (raw, json)
Hash identifier: 8Qm6Udp2xZq54pTbCxwQ4kHlWa5HdL25q/tzy85U/0E=
Subject key identifier: B5:C8:77:FF:E1:49:33:BF:1B:CA:CA:15:65:E9:A1:A9:82:76:5D:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182531CF66D997B40B27B0A2D541B097F12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tch3_-FJM78bysoVZemhqYJ2XU8.roa
Signing time: Sun 31 Jul 2022 07:16:23 +0000
ROA not before: Sun 31 Jul 2022 07:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:53:1c:f6:6d:99:7b:40:b2:7b:0a:2d:54:1b:09:7f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 07:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5c877ffe14933bf1bcaca1565e9a1a982765d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:91:73:05:cf:c8:f2:6f:f2:41:25:8d:7d:
19:26:06:11:8e:b1:da:63:f7:ab:32:d4:17:74:a0:
56:fa:46:81:6d:b9:46:28:48:9e:bd:98:38:2f:62:
a9:43:7d:db:28:31:76:a3:70:30:98:09:25:27:8f:
0a:d8:75:e4:1d:5b:6a:fb:51:2f:49:ca:9e:80:ef:
c9:d1:80:f8:8d:6b:6a:a3:9c:d7:ce:d3:8b:34:b0:
b9:a7:37:25:a9:fb:e8:72:45:5c:3f:5d:0c:0b:b2:
14:e7:03:54:67:1b:3f:66:8c:aa:2c:90:ad:fb:78:
f2:6d:31:25:5c:78:98:c7:df:2c:05:03:65:cc:d2:
24:ac:57:0c:68:44:70:73:bf:5a:e5:05:e8:f3:81:
a9:75:e4:14:a0:4e:a8:ea:cc:97:65:c4:f6:0a:fb:
30:db:41:1a:8d:12:de:a1:d0:be:80:64:ea:66:68:
2e:8f:e7:b6:01:ed:80:98:0f:54:ef:18:e5:4c:42:
80:2a:02:43:d0:fd:ce:a5:7e:f8:1c:2a:b4:2a:26:
08:2c:e3:da:a1:35:43:26:cd:e9:37:18:da:57:c3:
c9:a7:80:57:e4:61:a6:29:bb:af:6c:78:b8:81:f3:
55:9d:23:e0:2a:13:d5:a1:66:d4:fb:ae:7e:c8:ae:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C8:77:FF:E1:49:33:BF:1B:CA:CA:15:65:E9:A1:A9:82:76:5D:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tch3_-FJM78bysoVZemhqYJ2XU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:a0:56:46:a9:02:f8:03:ba:44:ba:2d:70:b0:30:bf:ac:01:
2d:81:1f:d4:87:3a:6b:71:92:8c:9e:f0:ef:56:16:ad:0d:bb:
23:6c:1c:93:83:cb:3a:fc:6a:52:ce:b5:04:eb:29:da:c6:a6:
38:29:ff:43:b7:68:fd:bb:a3:2c:be:71:54:91:af:60:df:66:
f5:17:03:3f:e8:71:95:3e:35:fb:8a:00:d3:bd:4b:04:70:1f:
68:de:2e:75:e7:f8:8f:d5:eb:6c:ce:a0:b1:46:84:06:92:c3:
11:18:a7:3b:6f:00:76:9b:57:22:5b:c7:81:aa:96:6d:a7:4f:
69:e0:6f:4e:82:09:b1:f6:e7:b5:49:9a:13:6d:e2:e6:d5:d3:
af:43:a1:82:21:07:88:70:85:3b:be:4f:e6:81:9e:cc:6e:4d:
49:1e:19:50:33:fb:6b:f4:3f:44:b3:14:28:63:39:18:02:4a:
5d:1e:be:bf:ea:6f:58:81:19:b9:09:12:cb:20:11:e6:15:59:
34:88:1e:0e:4e:02:cd:af:27:58:6c:69:c7:7c:e4:f8:49:0c:
f7:18:80:c6:69:90:9d:25:48:73:57:c5:fb:2d:cf:89:70:b9:
95:ac:b4:40:a8:f5:94:9b:0b:af:bb:85:23:1a:56:13:4b:b6:
2d:7f:ce:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJTHPZtmXtAsnsKLVQbCX8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzMxMDcxNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWM4NzdmZmUxNDkzM2JmMWJjYWNhMTU2NWU5YTFhOTgyNzY1ZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1eRcwXPyPJv8kEljX0ZJgYRjrHa
Y/erMtQXdKBW+kaBbblGKEievZg4L2KpQ33bKDF2o3AwmAklJ48K2HXkHVtq+1Ev
ScqegO/J0YD4jWtqo5zXztOLNLC5pzclqfvockVcP10MC7IU5wNUZxs/ZoyqLJCt
+3jybTElXHiYx98sBQNlzNIkrFcMaERwc79a5QXo84GpdeQUoE6o6syXZcT2Cvsw
20EajRLeodC+gGTqZmguj+e2Ae2AmA9U7xjlTEKAKgJD0P3OpX74HCq0KiYILOPa
oTVDJs3pNxjaV8PJp4BX5GGmKbuvbHi4gfNVnSPgKhPVoWbU+65+yK5QqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLXId//hSTO/G8rKFWXpoamCdl1PMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdGNoM18tRkpNNzhieXNvVlplbWhxWUoyWFU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABagVkapAvgDukS6LXCw
ML+sAS2BH9SHOmtxkoye8O9WFq0NuyNsHJODyzr8alLOtQTrKdrGpjgp/0O3aP27
oyy+cVSRr2DfZvUXAz/ocZU+NfuKANO9SwRwH2jeLnXn+I/V62zOoLFGhAaSwxEY
pztvAHabVyJbx4Gqlm2nT2ngb06CCbH257VJmhNt4ubV069DoYIhB4hwhTu+T+aB
nsxuTUkeGVAz+2v0P0SzFChjORgCSl0evr/qb1iBGbkJEssgEeYVWTSIHg5OAs2v
J1hsacd85PhJDPcYgMZpkJ0lSHNXxfstz4lwuZWstECo9ZSbC6+7hSMaVhNLti1/
znE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:01 2025 by rpki-client