Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tfkG4Hb9bvGiOKyhSmyIwv5Wcq8.roa
File: tfkG4Hb9bvGiOKyhSmyIwv5Wcq8.roa (raw, json)
Hash identifier: UzwuIrYmm4i7ACWrp5pZDTgEOpdl0VGmTNzrqTIqg4U=
Subject key identifier: B5:F9:06:E0:76:FD:6E:F1:A2:38:AC:A1:4A:6C:88:C2:FE:56:72:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E31056EA20DE9A8E5B755885C0676013
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tfkG4Hb9bvGiOKyhSmyIwv5Wcq8.roa
Signing time: Mon 05 Dec 2022 16:13:29 +0000
ROA not before: Mon 05 Dec 2022 16:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:10:56:ea:20:de:9a:8e:5b:75:58:85:c0:67:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 16:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5f906e076fd6ef1a238aca14a6c88c2fe5672af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:1d:1c:40:4f:5b:f6:71:f2:f1:2f:c5:72:
8f:de:1e:f9:41:a5:f0:18:b5:44:a5:f2:1c:16:f0:
88:73:3e:38:a9:ab:1d:d3:0b:59:f6:f0:ed:12:b5:
98:86:ea:c7:56:da:4a:57:00:3f:c5:7b:98:9b:07:
1d:e6:12:f8:a1:c2:1e:6d:5b:4a:84:a3:5f:f6:9f:
54:64:84:2c:6f:c6:2c:da:ff:17:85:39:d8:82:28:
74:54:5c:3c:16:dc:da:ba:62:9e:ca:56:ca:8f:ea:
0e:93:97:84:b5:37:fe:1d:44:9a:ea:1f:1a:61:b8:
5d:7f:57:64:a7:5f:8c:29:36:3d:55:d2:0a:db:21:
63:1b:e4:9b:6b:36:53:99:64:5d:ca:f9:88:2d:a4:
18:1b:c7:0e:cb:38:1a:1b:f8:e1:99:36:ab:c3:15:
61:5f:c3:1e:3c:62:51:7a:bb:8f:f5:e5:a1:69:cd:
ba:b3:0f:aa:9e:02:f4:a6:ba:a7:30:82:a2:a3:49:
75:b7:56:5e:cf:9d:00:c8:ed:10:80:fe:43:99:04:
74:f3:0c:4e:c0:20:fb:f1:67:f6:ec:bc:c4:37:93:
89:08:b8:64:66:ef:a7:8a:e7:1f:8a:8c:e5:a2:fb:
db:b8:ff:69:6f:b4:85:66:82:82:36:d1:3d:70:54:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F9:06:E0:76:FD:6E:F1:A2:38:AC:A1:4A:6C:88:C2:FE:56:72:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tfkG4Hb9bvGiOKyhSmyIwv5Wcq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:c5:f9:6d:0a:1a:85:1b:30:2a:8b:0d:4e:49:1e:62:69:66:
e4:e7:8f:b1:ae:1d:b2:10:1e:1d:a7:8b:a9:9b:c2:bb:8e:29:
f0:ca:12:34:12:36:af:bc:f4:28:5c:61:b2:9c:6a:65:fc:97:
7a:66:c3:d7:76:e2:6b:80:77:af:45:a8:8a:9d:83:19:a4:b9:
3b:3f:28:b9:80:bc:85:12:f3:97:b5:ae:cf:b1:67:e7:28:53:
8f:d5:2a:b9:f1:dd:bb:0a:91:76:ff:9f:aa:1c:ed:cb:f3:0b:
90:1d:ce:e5:76:ed:11:49:9c:89:11:2e:43:f1:4d:80:6e:b6:
15:41:8e:b2:88:2f:33:53:23:c3:cf:8c:6a:ac:cd:5d:a2:85:
af:97:72:0d:b9:49:44:27:96:31:06:15:50:bb:fa:da:22:fe:
11:4f:e4:a7:43:c8:c9:91:cb:91:2a:fe:c4:ad:59:84:1f:7a:
32:25:67:9e:af:94:a8:8c:28:c8:8e:8a:94:2c:6a:55:3b:9a:
e7:8a:0c:e3:1b:2a:ec:a8:0a:e6:29:f4:78:b3:9f:55:5d:27:
c9:bf:d5:3e:8e:a3:28:68:9b:79:b3:27:5d:ae:97:b8:c3:55:
c2:c7:6f:2c:de:94:56:ce:ef:1d:45:8d:87:8c:d5:e0:8f:6e:
89:43:eb:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTjEFbqIN6ajlt1WIXAZ2ATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA1MTYxMzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWY5MDZlMDc2ZmQ2ZWYxYTIzOGFjYTE0YTZjODhjMmZlNTY3MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR0dHEBPW/Zx8vEvxXKP3h75QaXw
GLVEpfIcFvCIcz44qasd0wtZ9vDtErWYhurHVtpKVwA/xXuYmwcd5hL4ocIebVtK
hKNf9p9UZIQsb8Ys2v8XhTnYgih0VFw8FtzaumKeylbKj+oOk5eEtTf+HUSa6h8a
Ybhdf1dkp1+MKTY9VdIK2yFjG+SbazZTmWRdyvmILaQYG8cOyzgaG/jhmTarwxVh
X8MePGJReruP9eWhac26sw+qngL0prqnMIKio0l1t1Zez50AyO0QgP5DmQR08wxO
wCD78Wf27LzEN5OJCLhkZu+niucfiozlovvbuP9pb7SFZoKCNtE9cFRj3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLX5BuB2/W7xojisoUpsiML+VnKvMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdGZrRzRIYjlidkdpT0t5aFNteUl3djVXY3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAjF+W0KGoUbMCqLDU5J
HmJpZuTnj7GuHbIQHh2ni6mbwruOKfDKEjQSNq+89ChcYbKcamX8l3pmw9d24muA
d69FqIqdgxmkuTs/KLmAvIUS85e1rs+xZ+coU4/VKrnx3bsKkXb/n6oc7cvzC5Ad
zuV27RFJnIkRLkPxTYButhVBjrKILzNTI8PPjGqszV2iha+Xcg25SUQnljEGFVC7
+toi/hFP5KdDyMmRy5Eq/sStWYQfejIlZ56vlKiMKMiOipQsalU7mueKDOMbKuyo
CuYp9Hizn1VdJ8m/1T6Ooyhom3mzJ12ul7jDVcLHbyzelFbO7x1FjYeM1eCPbolD
678=
-----END CERTIFICATE-----
Generated at Thu May 1 16:06:18 2025 by rpki-client