Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tyRazGYxeyVUl-_ZuDlCwriDSMU.roa
File: tyRazGYxeyVUl-_ZuDlCwriDSMU.roa (raw, json)
Hash identifier: lamaWnrMTEfaOjW2UaY8IPnai1bR7o+C7J6Qc7GZZ6k=
Subject key identifier: B7:24:5A:CC:66:31:7B:25:54:97:EF:D9:B8:39:42:C2:B8:83:48:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A1FEB57CFC3CD2C1AC6551F18B9F2043
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tyRazGYxeyVUl-_ZuDlCwriDSMU.roa
Signing time: Thu 02 Mar 2023 11:04:29 +0000
ROA not before: Thu 02 Mar 2023 11:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:a1fe:a695/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:fe:b5:7c:fc:3c:d2:c1:ac:65:51:f1:8b:9f:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 11:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7245acc66317b255497efd9b83942c2b88348c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:5e:17:0b:8d:40:fe:54:da:e5:63:93:5f:
08:e6:7c:6a:9b:a7:21:76:fa:c8:7e:7a:f3:0a:cb:
3a:e4:3a:42:0e:e9:0e:13:1c:4c:e9:90:cb:af:57:
8f:0c:6c:62:dc:d0:08:53:c7:37:c0:af:ca:b6:8e:
90:85:90:1a:a9:3a:9a:3a:92:28:d5:11:f1:f2:e2:
34:1c:74:c4:27:b9:2e:10:7b:a5:0f:14:71:36:e2:
75:6d:29:16:b5:1d:92:32:20:04:d3:76:a9:fe:7c:
b4:ba:a5:19:e2:ce:75:c2:04:08:62:03:34:59:9d:
d2:84:55:de:18:cf:cb:9b:b9:bd:82:a6:ed:c9:98:
60:d4:1a:97:52:6c:84:5f:a7:7f:0d:1f:1c:3b:5a:
d3:4b:3c:3a:31:90:36:be:30:ca:d8:d9:6f:c5:da:
f3:25:db:4a:79:ee:91:e8:e3:27:3b:cd:1d:d4:68:
ef:dc:71:69:d1:2a:75:24:70:fa:24:44:1f:a6:8f:
57:16:5e:89:c7:3d:c4:88:86:23:7f:c4:01:32:37:
cc:9e:f6:3e:5a:64:20:22:e8:b5:22:1d:ce:3a:37:
3f:6f:f2:87:a9:c5:2c:cc:cc:90:d5:46:fd:17:a6:
3d:e1:e5:a5:d5:9d:ea:70:d0:60:99:68:64:c2:af:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:24:5A:CC:66:31:7B:25:54:97:EF:D9:B8:39:42:C2:B8:83:48:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tyRazGYxeyVUl-_ZuDlCwriDSMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:a2:12:db:e0:0a:bc:f1:73:9d:48:0f:4e:f7:cc:8b:f3:94:
3f:59:1e:af:80:ec:4d:1e:43:21:ba:89:a6:75:d2:0a:c7:01:
af:31:2a:41:72:0d:11:14:f4:85:2c:97:ad:d2:28:da:65:e8:
6b:e2:06:28:c2:25:51:13:df:c7:fa:b2:c8:3e:d1:ea:36:d0:
66:95:13:ab:4a:46:82:68:00:25:a6:3c:56:ee:96:a9:8a:16:
a7:44:28:87:a5:be:21:a5:24:2a:82:1f:55:e3:fc:0f:13:3d:
98:1c:49:15:c1:80:45:5c:22:23:7b:77:58:bc:db:00:f9:45:
ea:6d:93:8c:a5:42:b4:61:01:74:f1:ce:a5:c1:eb:c0:d5:d7:
a4:b4:41:ff:00:07:f1:37:e9:59:f8:e4:ea:8d:db:7d:a0:ed:
9d:bd:aa:35:de:bd:e3:9a:7d:df:30:a5:dc:b3:67:ee:6c:3f:
11:c6:6f:d4:3c:60:9d:35:83:c2:b8:e5:02:0d:3d:0e:3a:03:
09:e8:85:a2:f1:29:bd:7b:56:fa:a9:fe:56:d3:33:65:a6:ab:
55:fe:6c:b6:ba:25:92:76:21:95:24:03:c2:73:20:32:6b:cc:
7b:27:47:05:06:d3:09:70:fe:23:64:c3:af:a1:7f:c6:64:b5:
74:a2:dc:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYah/rV8/DzSwaxlUfGLnyBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMTEwNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzI0NWFjYzY2MzE3YjI1NTQ5N2VmZDliODM5NDJjMmI4ODM0OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFteFwuNQP5U2uVjk18I5nxqm6ch
dvrIfnrzCss65DpCDukOExxM6ZDLr1ePDGxi3NAIU8c3wK/Kto6QhZAaqTqaOpIo
1RHx8uI0HHTEJ7kuEHulDxRxNuJ1bSkWtR2SMiAE03ap/ny0uqUZ4s51wgQIYgM0
WZ3ShFXeGM/Lm7m9gqbtyZhg1BqXUmyEX6d/DR8cO1rTSzw6MZA2vjDK2Nlvxdrz
JdtKee6R6OMnO80d1Gjv3HFp0Sp1JHD6JEQfpo9XFl6Jxz3EiIYjf8QBMjfMnvY+
WmQgIui1Ih3OOjc/b/KHqcUszMyQ1Ub9F6Y94eWl1Z3qcNBgmWhkwq9bCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLckWsxmMXslVJfv2bg5QsK4g0jFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdHlSYXpHWXhleVZVbC1fWnVEbEN3cmlEU01VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACyiEtvgCrzxc51ID073
zIvzlD9ZHq+A7E0eQyG6iaZ10grHAa8xKkFyDREU9IUsl63SKNpl6GviBijCJVET
38f6ssg+0eo20GaVE6tKRoJoACWmPFbulqmKFqdEKIelviGlJCqCH1Xj/A8TPZgc
SRXBgEVcIiN7d1i82wD5Reptk4ylQrRhAXTxzqXB68DV16S0Qf8AB/E36Vn45OqN
232g7Z29qjXeveOafd8wpdyzZ+5sPxHGb9Q8YJ01g8K45QINPQ46AwnohaLxKb17
Vvqp/lbTM2Wmq1X+bLa6JZJ2IZUkA8JzIDJrzHsnRwUG0wlw/iNkw6+hf8ZktXSi
3DI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:43 2025 by rpki-client