Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tgCkp8jmnb_w8mnQXnTfbsq91Fs.roa
File: tgCkp8jmnb_w8mnQXnTfbsq91Fs.roa (raw, json)
Hash identifier: SEiZWI5xR6nw95QL7rsuOLcitHaTXCsiErEYb9Pg3DM=
Subject key identifier: B6:00:A4:A7:C8:E6:9D:BF:F0:F2:69:D0:5E:74:DF:6E:CA:BD:D4:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E7FA9FB0053824E903B31C7DE8DF6BD8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tgCkp8jmnb_w8mnQXnTfbsq91Fs.roa
Signing time: Thu 16 Mar 2023 01:13:27 +0000
ROA not before: Thu 16 Mar 2023 01:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e7:fa:9f:b0:05:38:24:e9:03:b3:1c:7d:e8:df:6b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 01:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b600a4a7c8e69dbff0f269d05e74df6ecabdd45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:6f:83:86:ff:8d:03:cd:f4:da:a7:42:88:
e2:e6:6a:cd:ca:5d:87:9b:62:1a:27:35:34:9e:33:
ba:fb:0e:5d:e8:b9:94:bb:53:a1:e6:a0:46:12:e2:
75:36:d2:7a:e4:9d:24:c2:5a:57:18:2e:fe:37:7b:
88:77:ce:f6:81:e0:71:87:3e:10:05:a6:b4:c5:7a:
6a:bc:45:74:09:c1:ac:0c:9a:5d:b0:0e:ff:5a:28:
86:5b:92:99:4a:65:bb:68:03:ee:8b:fd:d7:d6:9c:
bd:b1:8f:ac:b8:9b:22:cf:7c:29:86:ae:bc:04:e5:
db:63:ec:bd:87:95:9b:f8:2b:9f:b7:2f:57:63:88:
c7:0a:be:ec:08:69:d6:90:64:ce:71:19:88:8c:f8:
e9:26:61:b7:b6:ac:53:9c:ed:03:87:22:c8:39:86:
2c:c1:7e:e1:94:23:6b:40:5b:89:bf:a2:4d:81:fc:
e1:db:66:64:0a:02:39:91:f4:7d:f5:6d:2e:38:42:
ac:9b:d4:e8:cf:0f:c3:80:01:b0:52:df:26:30:f8:
9d:24:09:9b:20:96:0b:78:32:16:96:ad:7b:a0:3c:
4a:66:b4:b8:71:42:db:47:a0:21:ed:8f:8d:72:72:
0e:6d:71:01:15:d1:b4:d5:5f:4d:27:de:d1:73:23:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:A4:A7:C8:E6:9D:BF:F0:F2:69:D0:5E:74:DF:6E:CA:BD:D4:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tgCkp8jmnb_w8mnQXnTfbsq91Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:7e:7c:37:e0:67:4c:e7:c0:bc:5a:a4:7d:b9:b7:65:3f:8d:
43:b3:24:28:6d:1a:40:91:72:d8:21:0d:16:81:cc:f1:37:48:
75:1f:4c:ff:84:2a:29:96:b0:5b:3c:15:b7:13:50:7f:b0:34:
19:84:0c:23:ec:78:71:53:fe:8b:6d:84:74:92:e3:73:3d:0e:
e0:37:6b:ef:16:73:5a:4d:f5:40:d6:f0:f1:0d:b5:17:cf:4b:
23:c5:23:06:89:52:a2:a4:53:8f:2b:f6:d9:43:4f:d9:c2:c6:
62:7a:7a:6d:e5:fd:5b:93:6b:f8:02:01:5f:39:f8:78:46:fd:
0e:4a:c3:34:b3:63:f3:02:28:69:8a:6b:80:9c:34:7a:3b:63:
be:fd:f1:f0:b5:cb:c0:43:d4:5c:b6:05:08:70:ba:9f:e2:c7:
4a:d1:92:78:0c:be:e7:6f:de:c6:fa:9a:93:30:a9:e3:56:c2:
7a:35:02:9e:29:97:ae:92:98:2c:3e:12:ca:cc:0b:9b:72:23:
39:ad:66:a4:d5:47:97:8b:f1:5d:87:d4:9c:7b:74:a2:99:75:
84:36:10:5d:fa:0b:b4:4f:3a:21:cb:51:12:1e:3e:85:a4:93:
33:8f:3c:db:23:69:58:27:af:ec:e7:37:20:3a:fe:75:2c:15:
41:8d:46:c9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbn+p+wBTgk6QOzHH3o32vYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE2MDExMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjAwYTRhN2M4ZTY5ZGJmZjBmMjY5ZDA1ZTc0ZGY2ZWNhYmRkNDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fxvg4b/jQPN9NqnQoji5mrNyl2H
m2IaJzU0njO6+w5d6LmUu1Oh5qBGEuJ1NtJ65J0kwlpXGC7+N3uId872geBxhz4Q
Baa0xXpqvEV0CcGsDJpdsA7/WiiGW5KZSmW7aAPui/3X1py9sY+suJsiz3wphq68
BOXbY+y9h5Wb+Cufty9XY4jHCr7sCGnWkGTOcRmIjPjpJmG3tqxTnO0DhyLIOYYs
wX7hlCNrQFuJv6JNgfzh22ZkCgI5kfR99W0uOEKsm9Tozw/DgAGwUt8mMPidJAmb
IJYLeDIWlq17oDxKZrS4cULbR6Ah7Y+NcnIObXEBFdG01V9NJ97RcyOORwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLYApKfI5p2/8PJp0F50327KvdRbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdGdDa3A4am1uYl93OG1uUVhuVGZic3E5MUZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJR+fDfgZ0znwLxapH25
t2U/jUOzJChtGkCRctghDRaBzPE3SHUfTP+EKimWsFs8FbcTUH+wNBmEDCPseHFT
/otthHSS43M9DuA3a+8Wc1pN9UDW8PENtRfPSyPFIwaJUqKkU48r9tlDT9nCxmJ6
em3l/VuTa/gCAV85+HhG/Q5KwzSzY/MCKGmKa4CcNHo7Y7798fC1y8BD1Fy2BQhw
up/ix0rRkngMvudv3sb6mpMwqeNWwno1Ap4pl66SmCw+EsrMC5tyIzmtZqTVR5eL
8V2H1Jx7dKKZdYQ2EF36C7RPOiHLURIePoWkkzOPPNsjaVgnr+znNyA6/nUsFUGN
Rsk=
-----END CERTIFICATE-----
Generated at Fri May 2 00:05:28 2025 by rpki-client