Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tybGZ4sBjb0yZxs62-sO9N_4Kus.roa
File: tybGZ4sBjb0yZxs62-sO9N_4Kus.roa (raw, json)
Hash identifier: U23fJAarQ/RGe/hKMNgiIiUMIifKFW4HPYluSZ6xwPE=
Subject key identifier: B7:26:C6:67:8B:01:8D:BD:32:67:1B:3A:DB:EB:0E:F4:DF:F8:2A:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855B6E6D8FD742BE023FB8DAE96625F80C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tybGZ4sBjb0yZxs62-sO9N_4Kus.roa
Signing time: Thu 29 Dec 2022 01:10:41 +0000
ROA not before: Thu 29 Dec 2022 01:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5b:6e:6d:8f:d7:42:be:02:3f:b8:da:e9:66:25:f8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 01:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b726c6678b018dbd32671b3adbeb0ef4dff82aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:32:d9:3c:fb:54:7f:2e:b1:2c:e0:a7:f1:
cf:81:34:01:96:d2:11:6a:9e:d6:a5:d2:f9:6d:85:
f5:6e:cc:27:b5:d2:6c:b1:cc:c1:26:fc:14:ce:b4:
bf:1c:74:e2:fd:42:3d:80:75:5c:e3:61:b1:b2:1d:
8b:40:7a:1b:54:ce:1c:7c:ff:b1:34:e0:a0:11:d9:
c4:7c:bc:1c:e7:dc:64:52:dc:a6:1d:87:7a:6c:3f:
a8:37:6c:fb:16:a3:32:35:9f:1b:08:09:65:4c:ba:
ee:af:3f:a2:cf:11:1f:18:b5:db:0c:d5:55:e5:49:
c6:5b:a2:01:90:37:f0:9c:92:10:f3:5d:22:ce:33:
bc:68:2f:2e:3c:43:77:2d:b0:7d:ac:8f:a7:fb:25:
b2:27:1f:c3:c1:78:a4:85:a7:29:8e:26:3e:75:21:
d3:5c:da:2a:36:7d:67:33:b8:ef:1f:3c:c1:4f:37:
79:51:06:3e:7d:3a:f0:79:1e:b7:91:0a:d6:12:d2:
34:bf:e1:7c:25:61:50:1e:91:05:19:81:c3:0b:57:
ea:3d:9a:ac:c7:6e:83:4a:c2:c7:f6:b3:dc:d9:e7:
38:12:e4:c9:1a:26:34:11:62:6a:a5:f5:0f:77:c3:
70:11:05:fe:49:e6:34:20:47:3c:e1:f2:33:9e:b5:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:C6:67:8B:01:8D:BD:32:67:1B:3A:DB:EB:0E:F4:DF:F8:2A:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tybGZ4sBjb0yZxs62-sO9N_4Kus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:f5:23:08:85:fb:92:5e:a1:34:28:66:b4:c3:db:8e:a3:ea:
ab:15:e9:2b:e9:32:42:64:2d:60:be:ec:47:d8:12:d4:19:4b:
0d:ea:8f:86:cd:a4:43:ef:7d:78:e7:dd:ac:b1:d5:70:b0:a3:
d1:86:cc:fe:e3:32:64:8a:de:25:a4:3d:23:e2:5f:2c:5d:26:
fa:1a:1d:e6:49:81:05:6a:da:fc:eb:6c:1c:15:06:69:e1:97:
55:ef:78:f8:51:19:e8:50:8e:20:62:a1:ab:82:5b:3a:88:9c:
1d:ff:aa:4c:10:0f:f9:2d:88:63:c6:f2:25:04:b3:ea:8b:be:
73:d5:1b:0a:b5:65:53:15:90:53:6d:c8:89:08:98:2b:b1:7e:
3d:34:99:55:6b:9c:e5:41:35:82:70:c5:35:5b:d0:7a:a5:db:
ed:9d:bc:cc:26:8c:5d:1b:eb:3c:49:4b:3c:67:95:81:cc:51:
c3:46:e3:a2:89:10:2d:8f:78:7a:42:bd:50:46:1b:a2:78:d1:
65:e4:0c:26:a7:da:31:e6:bc:0c:04:cb:25:51:ba:32:90:61:
f5:b8:0d:4b:5a:0c:fc:bc:ff:e4:7e:57:81:2c:6a:47:b8:32:
64:45:19:cc:6e:d1:16:ac:d1:93:c9:c4:de:3f:38:e7:e9:cf:
ed:1b:6c:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVbbm2P10K+Aj+42ulmJfgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI5MDExMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzI2YzY2NzhiMDE4ZGJkMzI2NzFiM2FkYmViMGVmNGRmZjgyYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw8y2Tz7VH8usSzgp/HPgTQBltIR
ap7WpdL5bYX1bswntdJssczBJvwUzrS/HHTi/UI9gHVc42Gxsh2LQHobVM4cfP+x
NOCgEdnEfLwc59xkUtymHYd6bD+oN2z7FqMyNZ8bCAllTLrurz+izxEfGLXbDNVV
5UnGW6IBkDfwnJIQ810izjO8aC8uPEN3LbB9rI+n+yWyJx/DwXikhacpjiY+dSHT
XNoqNn1nM7jvHzzBTzd5UQY+fTrweR63kQrWEtI0v+F8JWFQHpEFGYHDC1fqPZqs
x26DSsLH9rPc2ec4EuTJGiY0EWJqpfUPd8NwEQX+SeY0IEc84fIznrXr6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLcmxmeLAY29MmcbOtvrDvTf+CrrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdHliR1o0c0JqYjB5WnhzNjItc085Tl80S3VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK31IwiF+5JeoTQoZrTD
246j6qsV6SvpMkJkLWC+7EfYEtQZSw3qj4bNpEPvfXjn3ayx1XCwo9GGzP7jMmSK
3iWkPSPiXyxdJvoaHeZJgQVq2vzrbBwVBmnhl1XvePhRGehQjiBioauCWzqInB3/
qkwQD/ktiGPG8iUEs+qLvnPVGwq1ZVMVkFNtyIkImCuxfj00mVVrnOVBNYJwxTVb
0Hql2+2dvMwmjF0b6zxJSzxnlYHMUcNG46KJEC2PeHpCvVBGG6J40WXkDCan2jHm
vAwEyyVRujKQYfW4DUtaDPy8/+R+V4Esake4MmRFGcxu0Ras0ZPJxN4/OOfpz+0b
bIg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:11:02 2025 by rpki-client