Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TpS_y0KUgNbZHwwL12DJ1YqfhOo.roa
File: TpS_y0KUgNbZHwwL12DJ1YqfhOo.roa (raw, json)
Hash identifier: HD6cxpu5FlRY5Km40qifz//qahxJpgVbzj8laSOhIWg=
Subject key identifier: 4E:94:BF:CB:42:94:80:D6:D9:1F:0C:0B:D7:60:C9:D5:8A:9F:84:EA
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F16AC2AE7922FFFBC7A10E8204A750F0F
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TpS_y0KUgNbZHwwL12DJ1YqfhOo.roa
Signing time: Thu 25 Apr 2024 19:12:12 +0000
ROA not before: Thu 25 Apr 2024 19:12:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:16:ac:2a:e7:92:2f:ff:bc:7a:10:e8:20:4a:75:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 25 19:12:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e94bfcb429480d6d91f0c0bd760c9d58a9f84ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:08:ee:7a:22:f3:c4:cc:e0:90:13:da:af:
43:da:bb:59:03:16:d5:68:33:1b:83:f5:82:43:09:
33:8e:1d:68:d7:f1:be:44:6d:2c:7a:38:ad:ca:82:
1d:6a:d5:82:cc:cc:1c:97:97:08:fd:26:43:c3:8f:
b8:7f:69:b3:ff:4b:35:65:4a:13:d2:66:1e:7e:ed:
a2:af:c0:80:08:e5:6b:09:6c:c1:87:a2:8c:b5:d6:
df:f8:63:aa:f2:7b:f2:38:0a:5c:e2:51:02:51:c3:
68:98:c1:8c:6a:1c:9d:7d:33:59:eb:d2:5d:59:18:
e5:7c:ea:41:33:3d:1c:9f:41:98:4b:c8:20:11:98:
e1:b0:36:c0:39:72:20:6e:32:44:1e:22:be:bd:2e:
d4:a6:c0:8f:80:3c:82:40:a5:15:34:2a:b4:2a:c5:
ef:ec:70:6b:f9:fd:18:0b:ac:04:80:f4:48:8f:ad:
c6:b7:90:82:98:ee:6b:1b:72:9b:09:87:51:01:a4:
26:5e:9f:e4:35:8a:14:be:ae:b2:46:ff:06:3f:28:
d8:54:88:90:eb:45:3f:0b:27:8a:a6:6c:ae:4e:c4:
7c:d6:b9:0d:74:34:3e:71:a5:42:9b:60:91:ca:c3:
31:bb:e2:ae:8c:64:bf:e2:8d:89:07:40:43:2d:f0:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:BF:CB:42:94:80:D6:D9:1F:0C:0B:D7:60:C9:D5:8A:9F:84:EA
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TpS_y0KUgNbZHwwL12DJ1YqfhOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
c5:c0:5e:da:b5:6b:81:fb:dc:b0:e9:72:5c:15:78:1e:af:5d:
d6:46:8e:56:8b:0f:34:d7:79:46:7d:ac:c4:6f:86:f3:86:c6:
c4:95:ff:d6:04:47:46:38:7b:bb:f8:09:f6:09:fe:20:09:65:
18:c1:ac:8e:1d:4c:17:99:30:25:6d:f6:17:6f:82:87:6d:58:
99:9b:c4:6a:5f:bf:4c:7f:37:75:c2:21:d5:33:c6:f6:ec:2c:
20:1a:99:8a:93:c0:a8:e2:47:0d:69:d5:9b:5d:fb:ed:ec:11:
40:c6:41:5e:36:ab:0b:98:e3:e0:0b:59:30:68:71:3a:13:f8:
ae:70:c2:3b:b7:da:d7:4d:9f:0f:0f:7f:fc:8d:4f:84:54:49:
16:29:a3:40:cf:2b:91:9e:80:17:d0:1b:e1:4f:ce:58:fa:97:
57:fb:3d:da:22:78:f0:7d:9a:8c:19:69:e5:93:e9:9b:aa:82:
84:c7:44:f5:e2:31:8f:ec:a5:9c:ed:c0:54:ca:78:06:75:64:
ae:a7:b4:53:b0:24:58:ac:39:af:c9:98:66:12:a2:29:56:60:
07:6f:74:d6:aa:6f:70:6e:af:83:6c:16:84:da:c5:33:18:c6:
5f:ee:21:16:05:5a:5d:41:ee:9c:25:4a:fb:50:c3:90:b0:32:
4f:be:fe:52
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY8WrCrnki//vHoQ6CBKdQ8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNDI1MTkxMjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTk0YmZjYjQyOTQ4MGQ2ZDkxZjBjMGJkNzYwYzlkNThhOWY4NGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY8I7noi88TM4JAT2q9D2rtZAxbV
aDMbg/WCQwkzjh1o1/G+RG0sejityoIdatWCzMwcl5cI/SZDw4+4f2mz/0s1ZUoT
0mYefu2ir8CACOVrCWzBh6KMtdbf+GOq8nvyOApc4lECUcNomMGMahydfTNZ69Jd
WRjlfOpBMz0cn0GYS8ggEZjhsDbAOXIgbjJEHiK+vS7UpsCPgDyCQKUVNCq0KsXv
7HBr+f0YC6wEgPRIj63Gt5CCmO5rG3KbCYdRAaQmXp/kNYoUvq6yRv8GPyjYVIiQ
60U/CyeKpmyuTsR81rkNdDQ+caVCm2CRysMxu+KujGS/4o2JB0BDLfCWPQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFE6Uv8tClIDW2R8MC9dgydWKn4TqMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvVHBTX3kwS1VnTmJaSHd3TDEyREoxWXFmaE9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAMBAIAATAGAwQDwQAYMBkE
AgACMBMDEQAgAQZ8AGT//wAAAY8FQ55BMA0GCSqGSIb3DQEBCwUAA4IBAQDFwF7a
tWuB+9yw6XJcFXger13WRo5Wiw8013lGfazEb4bzhsbElf/WBEdGOHu7+An2Cf4g
CWUYwayOHUwXmTAlbfYXb4KHbViZm8RqX79Mfzd1wiHVM8b27CwgGpmKk8Co4kcN
adWbXfvt7BFAxkFeNqsLmOPgC1kwaHE6E/iucMI7t9rXTZ8PD3/8jU+EVEkWKaNA
zyuRnoAX0BvhT85Y+pdX+z3aInjwfZqMGWnlk+mbqoKEx0T14jGP7KWc7cBUyngG
dWSup7RTsCRYrDmvyZhmEqIpVmAHb3TWqm9wbq+DbBaE2sUzGMZf7iEWBVpdQe6c
JUr7UMOQsDJPvv5S
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:03:52 2025 by rpki-client