Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tp57l8QQtXURUTn5tP85YEAqABs.roa
File: tp57l8QQtXURUTn5tP85YEAqABs.roa (raw, json)
Hash identifier: SH0O7gHXXjAv4PKOBVnIgWqN1iILh2B11uP4qCmFTgk=
Subject key identifier: B6:9E:7B:97:C4:10:B5:75:11:51:39:F9:B4:FF:39:60:40:2A:00:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186484DDF7AA49909AD15EF7CD2655AF750
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tp57l8QQtXURUTn5tP85YEAqABs.roa
Signing time: Mon 13 Feb 2023 01:05:08 +0000
ROA not before: Mon 13 Feb 2023 01:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:484c:f25e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:48:4d:df:7a:a4:99:09:ad:15:ef:7c:d2:65:5a:f7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 01:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b69e7b97c410b575115139f9b4ff3960402a001b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:fb:b4:00:a5:aa:30:16:6e:f9:33:86:30:
ff:bf:d4:06:87:4e:1c:2d:04:09:2f:b5:2b:02:4b:
83:bc:ad:14:dc:97:91:5c:31:10:b6:7f:ba:3f:ea:
ea:5f:fc:1c:d5:33:c0:42:08:9e:31:4a:29:81:da:
07:82:e0:80:b1:ef:b4:b8:d8:20:f9:ce:88:69:da:
b5:03:38:b5:24:83:86:f0:e2:a9:6f:f8:8c:85:7f:
28:a3:93:6d:1c:d6:d7:e5:e7:12:8a:47:7c:a6:53:
71:ba:de:13:b3:92:ff:11:90:d4:3a:0c:72:65:87:
a2:a4:9f:74:25:f1:b7:2a:55:65:54:20:86:4d:73:
8c:6a:98:07:7f:81:da:c0:3d:f2:03:b4:a3:bb:47:
f7:a5:0f:41:09:8f:f1:36:9d:52:42:0a:e2:a8:25:
ae:51:07:d6:ce:e7:1d:92:7e:89:34:a7:53:13:01:
c9:ab:31:9d:ca:33:ec:22:7e:00:82:7a:9e:90:e8:
44:3d:38:aa:19:cb:65:da:88:7d:99:9c:62:41:8a:
11:1f:ff:7a:a5:f8:5f:cf:aa:c5:99:60:54:49:b1:
a0:7f:e6:6d:fd:2f:61:e2:ce:dc:fb:4e:dd:46:b5:
77:e9:0c:aa:c7:f9:1f:7b:ba:3e:05:90:c7:f7:81:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9E:7B:97:C4:10:B5:75:11:51:39:F9:B4:FF:39:60:40:2A:00:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tp57l8QQtXURUTn5tP85YEAqABs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:fd:3f:55:28:1d:48:1e:95:6c:c1:66:33:a0:b4:c3:64:81:
03:1a:e2:d7:ac:c6:2f:33:90:8a:c5:79:7c:b5:32:c2:70:38:
ad:ad:22:55:2a:e3:6d:ff:48:38:5d:78:b3:0a:cc:ad:3c:08:
05:03:32:97:08:fb:9b:04:96:8b:cc:b7:9e:d7:67:2c:c8:43:
26:a8:7f:e6:12:61:6c:27:4c:06:f3:a7:be:f4:1e:b1:75:1a:
09:08:cc:98:65:92:42:6d:21:66:ed:2b:cf:59:40:67:14:e0:
69:f6:63:a1:cb:d9:4b:65:73:b4:23:e3:f9:2e:0a:d7:62:3a:
20:fe:fc:21:88:d5:b8:74:a7:52:c2:fb:bb:e9:1a:ad:8c:d2:
b6:df:82:3b:02:7e:27:f9:1b:f7:13:d9:af:8e:ef:99:71:74:
5f:d3:a6:95:68:31:d0:48:55:20:af:bf:10:e5:d9:11:3f:99:
62:2a:ee:f5:ed:9c:7d:93:ff:6a:1c:ef:0c:82:89:e2:c7:95:
04:d2:e2:ba:2b:1a:14:27:17:da:6f:51:00:ac:c6:c9:31:f1:
05:65:d2:0a:60:d2:bf:5b:29:35:d9:65:3b:b0:2a:d2:9a:3f:
53:05:c3:97:f3:b6:75:d3:15:2e:48:fb:8b:3b:b0:41:8d:9c:
55:c5:6b:b2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZITd96pJkJrRXvfNJlWvdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEzMDEwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjllN2I5N2M0MTBiNTc1MTE1MTM5ZjliNGZmMzk2MDQwMmEwMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzP7tAClqjAWbvkzhjD/v9QGh04c
LQQJL7UrAkuDvK0U3JeRXDEQtn+6P+rqX/wc1TPAQgieMUopgdoHguCAse+0uNgg
+c6Iadq1Azi1JIOG8OKpb/iMhX8oo5NtHNbX5ecSikd8plNxut4Ts5L/EZDUOgxy
ZYeipJ90JfG3KlVlVCCGTXOMapgHf4HawD3yA7Sju0f3pQ9BCY/xNp1SQgriqCWu
UQfWzucdkn6JNKdTEwHJqzGdyjPsIn4AgnqekOhEPTiqGctl2oh9mZxiQYoRH/96
pfhfz6rFmWBUSbGgf+Zt/S9h4s7c+07dRrV36Qyqx/kfe7o+BZDH94He+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLaee5fEELV1EVE5+bT/OWBAKgAbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdHA1N2w4UVF0WFVSVVRuNXRQODVZRUFxQUJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKD9P1UoHUgelWzBZjOg
tMNkgQMa4tesxi8zkIrFeXy1MsJwOK2tIlUq423/SDhdeLMKzK08CAUDMpcI+5sE
lovMt57XZyzIQyaof+YSYWwnTAbzp770HrF1GgkIzJhlkkJtIWbtK89ZQGcU4Gn2
Y6HL2Utlc7Qj4/kuCtdiOiD+/CGI1bh0p1LC+7vpGq2M0rbfgjsCfif5G/cT2a+O
75lxdF/TppVoMdBIVSCvvxDl2RE/mWIq7vXtnH2T/2oc7wyCieLHlQTS4rorGhQn
F9pvUQCsxskx8QVl0gpg0r9bKTXZZTuwKtKaP1MFw5fztnXTFS5I+4s7sEGNnFXF
a7I=
-----END CERTIFICATE-----
Generated at Thu May 1 05:42:41 2025 by rpki-client