Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tvCC6rVR_tSbXunbCUURwct22Jw.roa
File: tvCC6rVR_tSbXunbCUURwct22Jw.roa (raw, json)
Hash identifier: b8UD+dS4wfGS2VCfWOJoXTr5vzzpgBpwBxWrOXjHXqI=
Subject key identifier: B6:F0:82:EA:B5:51:FE:D4:9B:5E:E9:DB:09:45:11:C1:CB:76:D8:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A5AAC0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tvCC6rVR_tSbXunbCUURwct22Jw.roa
Signing time: Sun 13 Feb 2022 20:08:15 +0000
ROA not before: Sun 13 Feb 2022 20:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784327183 (0x6a5aac0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 20:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6f082eab551fed49b5ee9db094511c1cb76d89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:29:a5:a6:c0:ed:99:8a:46:e5:29:ba:d2:
40:54:09:f2:79:b0:39:4b:57:5c:64:24:73:72:e9:
8b:45:ff:6b:94:f0:0d:0e:c9:53:12:34:f1:66:c4:
32:b6:e0:72:2a:bc:e6:c6:66:d0:1f:4d:e6:41:1a:
18:76:45:fa:40:36:b2:9d:68:16:c7:17:de:56:7c:
06:f1:5f:67:9a:7d:04:b0:72:73:24:9b:a1:93:0b:
8c:4b:df:b5:05:75:29:c3:8f:0a:3f:c2:01:2c:39:
88:85:5d:65:4d:7b:51:e4:5f:ef:90:c8:0c:be:c9:
1e:10:37:50:b7:a2:95:45:f1:76:2f:53:00:45:4c:
88:2f:2c:dc:6c:44:0f:31:f7:20:44:64:f1:21:07:
60:ad:cb:31:55:00:4d:bd:b3:6c:91:9e:f1:9a:96:
bf:e9:70:e8:98:be:ff:3e:2f:5b:57:d2:77:5d:e5:
ff:65:6a:4e:6c:85:c1:09:fe:b2:e2:4d:40:11:0f:
9f:6b:d9:95:5b:36:a7:eb:b6:08:3f:e2:19:c3:ed:
29:05:51:89:74:be:fb:a4:3c:3b:49:17:67:48:53:
0b:a3:c1:7a:22:60:f1:13:70:37:55:fd:16:ac:da:
5b:4c:fe:39:64:5b:b0:06:53:ef:92:dd:a2:c1:47:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F0:82:EA:B5:51:FE:D4:9B:5E:E9:DB:09:45:11:C1:CB:76:D8:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tvCC6rVR_tSbXunbCUURwct22Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:2c:cf:3b:00:3b:19:b7:0e:be:49:c1:a9:00:2f:03:68:18:
51:35:84:52:11:30:17:58:4c:bf:ab:e8:40:13:d4:cc:7d:75:
36:de:bf:b4:24:b7:34:36:0d:11:87:8c:ff:c2:c3:62:ca:2a:
cb:e1:b9:7a:26:73:24:cd:3e:21:4b:f2:3f:fa:05:3c:4f:80:
bc:ca:46:8f:34:12:a4:a6:7a:ec:56:ec:d8:89:7f:f6:e3:2c:
7c:18:a9:5e:a3:0a:96:10:ba:03:e7:bd:10:be:f9:d4:61:ad:
83:1f:3a:ca:cb:32:70:41:d1:29:8d:05:15:9d:5a:49:ac:93:
84:03:46:37:a5:ad:70:a2:f6:33:3b:82:41:14:79:2f:49:d7:
a4:3b:a5:de:ba:d1:5a:ae:05:25:d9:fd:a6:ef:86:c4:eb:64:
9c:0a:67:7a:d7:40:c4:9d:31:ce:0b:fd:57:58:a3:45:08:37:
89:8b:9c:e2:8b:c3:b4:d1:ca:0a:80:90:65:83:1f:77:08:01:
ae:20:14:79:6f:45:60:e2:97:dd:af:7b:db:d5:0d:a8:b1:c9:
95:d6:01:e2:e2:e4:61:3f:ee:ce:8e:73:02:cc:3e:b4:37:81:
eb:9e:3c:d1:ad:2e:6a:46:75:54:96:6b:0b:eb:70:28:76:e9:
94:a8:78:5c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEalqsDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
MzIwMDgxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZmMDgyZWFiNTUx
ZmVkNDliNWVlOWRiMDk0NTExYzFjYjc2ZDg5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMkvKaWmwO2ZikblKbrSQFQJ8nmwOUtXXGQkc3Lpi0X/a5Tw
DQ7JUxI08WbEMrbgciq85sZm0B9N5kEaGHZF+kA2sp1oFscX3lZ8BvFfZ5p9BLBy
cySboZMLjEvftQV1KcOPCj/CASw5iIVdZU17UeRf75DIDL7JHhA3ULeilUXxdi9T
AEVMiC8s3GxEDzH3IERk8SEHYK3LMVUATb2zbJGe8ZqWv+lw6Ji+/z4vW1fSd13l
/2VqTmyFwQn+suJNQBEPn2vZlVs2p+u2CD/iGcPtKQVRiXS++6Q8O0kXZ0hTC6PB
eiJg8RNwN1X9FqzaW0z+OWRbsAZT75LdosFHxTUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS28ILqtVH+1Jte6dsJRRHBy3bYnDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3R2Q0M2clZSX3RTYlh1bmJDVVVSd2N0MjJKdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAnLM87ADsZtw6+ScGpAC8DaBhRNYRSETAXWEy/
q+hAE9TMfXU23r+0JLc0Ng0Rh4z/wsNiyirL4bl6JnMkzT4hS/I/+gU8T4C8ykaP
NBKkpnrsVuzYiX/24yx8GKleowqWELoD570QvvnUYa2DHzrKyzJwQdEpjQUVnVpJ
rJOEA0Y3pa1wovYzO4JBFHkvSdekO6XeutFargUl2f2m74bE62ScCmd610DEnTHO
C/1XWKNFCDeJi5zii8O00coKgJBlgx93CAGuIBR5b0Vg4pfdr3vb1Q2oscmV1gHi
4uRhP+7OjnMCzD60N4HrnjzRrS5qRnVUlmsL63AodumUqHhc
-----END CERTIFICATE-----
Generated at Sun May 4 07:22:12 2025 by rpki-client