Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tf-XZRYe8ySQMujUBEIwGC8Qlik.roa
File: tf-XZRYe8ySQMujUBEIwGC8Qlik.roa (raw, json)
Hash identifier: LgfZP5LXmw4C9MtFXimeBwW3Lzvzd3S0vbNXaXfBBcI=
Subject key identifier: B5:FF:97:65:16:1E:F3:24:90:32:E8:D4:04:42:30:18:2F:10:96:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864E1D071CE8E739458C6B41C862502B79
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tf-XZRYe8ySQMujUBEIwGC8Qlik.roa
Signing time: Tue 14 Feb 2023 04:09:30 +0000
ROA not before: Tue 14 Feb 2023 04:09:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:1d:07:1c:e8:e7:39:45:8c:6b:41:c8:62:50:2b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 04:09:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5ff9765161ef3249032e8d4044230182f109629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:86:2e:c2:3f:db:cc:97:08:43:e8:9d:b2:d5:
3e:b6:1b:0f:0a:1c:b9:f6:8e:bf:ae:50:78:e1:be:
a2:20:a7:a6:cc:03:6a:35:58:34:4f:80:53:47:a7:
e7:f0:70:38:bd:21:57:7f:39:c5:0a:99:d0:76:04:
66:0f:f9:f0:c2:59:0f:61:ea:8a:79:b3:29:ef:b5:
65:0d:64:12:69:f7:90:e1:d3:83:c0:d0:b2:e2:a4:
cd:cc:67:db:90:bb:a4:1b:f9:f9:cc:a8:9e:73:ea:
41:9f:5c:28:0f:dd:62:c2:94:c4:a8:9b:20:b5:c3:
f7:5f:d5:cc:96:5c:b0:d2:18:b0:70:a5:da:d9:d1:
80:c9:71:fc:64:78:40:e4:ec:d5:8c:37:c2:67:18:
df:bd:7b:8a:5c:0a:e0:83:9a:32:e1:17:56:6f:61:
83:bc:37:c1:94:5c:4d:3f:f3:e8:c8:1a:9c:f1:af:
32:66:4f:37:3e:16:da:6e:ea:b7:17:40:05:7e:04:
43:ba:dd:85:71:a5:23:9c:22:22:f0:e0:19:e4:5f:
9c:32:f9:fa:8c:84:69:23:7c:e0:ff:85:5c:26:92:
69:e5:c8:16:ed:2f:5e:70:6b:2e:11:af:63:db:88:
ff:73:ab:bc:a1:16:2a:e7:dd:a0:ea:99:ca:ce:28:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:97:65:16:1E:F3:24:90:32:E8:D4:04:42:30:18:2F:10:96:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tf-XZRYe8ySQMujUBEIwGC8Qlik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:0c:1f:10:6e:8a:7b:42:0b:35:45:3e:36:c4:ab:cc:15:e0:
cd:7c:fa:c7:f4:5c:e5:77:1a:14:aa:6b:bc:a6:0d:8c:37:0c:
fd:a7:f5:7b:84:2c:45:1a:3b:fe:94:17:4d:e4:47:ba:23:15:
ce:0f:c5:3c:57:b4:fe:96:b3:6c:15:14:60:8f:b8:3e:11:bf:
58:25:a3:74:d0:2b:01:cb:4f:3f:d6:0c:40:4f:98:19:36:f3:
ad:4c:59:5b:ef:af:23:ff:41:75:9e:a8:73:59:a3:98:3b:70:
96:c9:bd:a1:b9:91:78:7a:fe:34:ba:98:3d:f6:2f:31:2f:2b:
6d:f4:4a:f6:b7:63:84:48:cc:d3:08:93:b2:96:ef:20:65:d0:
2f:86:ff:b4:d4:a3:c5:76:03:6e:d9:8a:fa:bd:62:23:d1:c7:
82:67:6c:52:bc:61:da:c9:c9:18:9f:85:60:ac:36:4e:5e:c8:
6a:db:c0:42:2c:fc:19:ea:af:12:6c:20:b9:9c:b1:a0:3b:3c:
d8:9a:03:8f:9e:ba:d8:b9:58:a3:14:bb:f6:18:56:66:c2:ee:
1c:da:c4:60:2f:f2:8e:9e:fa:ce:51:52:ab:9d:08:1d:3d:fe:
1d:99:6e:c2:46:33:10:73:51:e5:de:c7:57:83:a8:e5:0f:3d:
8e:af:cc:51
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZOHQcc6Oc5RYxrQchiUCt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE0MDQwOTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWZmOTc2NTE2MWVmMzI0OTAzMmU4ZDQwNDQyMzAxODJmMTA5NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4Yuwj/bzJcIQ+idstU+thsPChy5
9o6/rlB44b6iIKemzANqNVg0T4BTR6fn8HA4vSFXfznFCpnQdgRmD/nwwlkPYeqK
ebMp77VlDWQSafeQ4dODwNCy4qTNzGfbkLukG/n5zKiec+pBn1woD91iwpTEqJsg
tcP3X9XMllyw0hiwcKXa2dGAyXH8ZHhA5OzVjDfCZxjfvXuKXArgg5oy4RdWb2GD
vDfBlFxNP/PoyBqc8a8yZk83Phbabuq3F0AFfgRDut2FcaUjnCIi8OAZ5F+cMvn6
jIRpI3zg/4VcJpJp5cgW7S9ecGsuEa9j24j/c6u8oRYq592g6pnKzihjMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLX/l2UWHvMkkDLo1ARCMBgvEJYpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdGYtWFpSWWU4eVNRTXVqVUJFSXdHQzhRbGlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGYMHxBuintCCzVFPjbE
q8wV4M18+sf0XOV3GhSqa7ymDYw3DP2n9XuELEUaO/6UF03kR7ojFc4PxTxXtP6W
s2wVFGCPuD4Rv1glo3TQKwHLTz/WDEBPmBk2861MWVvvryP/QXWeqHNZo5g7cJbJ
vaG5kXh6/jS6mD32LzEvK230Sva3Y4RIzNMIk7KW7yBl0C+G/7TUo8V2A27Zivq9
YiPRx4JnbFK8YdrJyRifhWCsNk5eyGrbwEIs/BnqrxJsILmcsaA7PNiaA4+euti5
WKMUu/YYVmbC7hzaxGAv8o6e+s5RUqudCB09/h2ZbsJGMxBzUeXex1eDqOUPPY6v
zFE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:44 2025 by rpki-client