Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TZutnAwPrlv-Wrl-jSV9dVerL9o.roa
File: TZutnAwPrlv-Wrl-jSV9dVerL9o.roa (raw, json)
Hash identifier: UNO942zpIpM6hVKo6GlYycc2DXMHJxZttjwjwX0B7Vk=
Subject key identifier: 4D:9B:AD:9C:0C:0F:AE:5B:FE:5A:B9:7E:8D:25:7D:75:57:AB:2F:DA
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F92E97553EA49A55E558E712B6661EF20
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TZutnAwPrlv-Wrl-jSV9dVerL9o.roa
Signing time: Sun 19 May 2024 22:12:04 +0000
ROA not before: Sun 19 May 2024 22:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:92:e9:75:53:ea:49:a5:5e:55:8e:71:2b:66:61:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 19 22:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d9bad9c0c0fae5bfe5ab97e8d257d7557ab2fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:48:33:c1:52:e9:ac:84:6f:19:87:8e:45:
00:de:88:82:d3:e8:de:10:31:f5:93:64:c0:9d:69:
1e:28:84:58:03:34:c9:85:7b:99:33:6b:3c:21:fa:
27:b5:2c:9e:16:57:cc:60:a2:01:7d:fc:9c:91:4e:
f2:2a:a4:a3:8c:1b:2b:cf:54:4c:1a:d6:bd:af:7d:
af:64:f2:03:d5:0c:a8:54:85:61:a4:c8:40:3f:7e:
d7:0d:aa:95:19:20:74:c6:7d:40:cd:55:51:de:1a:
52:d5:19:ae:24:09:ec:1e:5f:9d:9a:8e:90:c9:94:
9a:f3:7c:3c:86:36:68:ad:64:03:cb:14:0e:d7:b8:
bd:c7:cf:8a:1a:65:c0:8b:2f:97:1f:e0:0c:fe:cb:
24:6c:1f:62:53:9e:cc:d4:e5:1f:c7:86:16:d9:3b:
e6:27:17:9d:42:b4:b0:60:c3:27:34:d1:9c:f3:03:
6b:fd:14:8f:96:db:48:4d:1c:f7:fa:70:d9:db:e9:
bf:b8:dd:9a:a6:14:46:d0:72:63:f3:ba:dc:9d:e9:
60:57:05:a8:d7:54:7d:74:c6:22:1f:40:5e:74:d9:
ba:79:ff:02:7a:b1:4f:35:a0:b2:14:2d:ee:b8:b0:
87:34:25:fd:d2:43:77:c3:00:ea:0c:f6:07:56:d8:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9B:AD:9C:0C:0F:AE:5B:FE:5A:B9:7E:8D:25:7D:75:57:AB:2F:DA
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/TZutnAwPrlv-Wrl-jSV9dVerL9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:7e:21:cc:e7:a5:e9:e6:cf:c7:c8:8c:bf:02:bd:90:9f:da:
c2:e5:33:59:30:ba:1a:89:c8:91:63:10:97:3b:74:c3:dc:02:
7a:69:38:62:67:8c:98:d4:a3:d3:aa:f1:39:65:18:4a:7f:91:
c7:f2:6a:fe:52:04:34:f7:c6:7f:f3:b8:ae:31:fd:f6:de:1f:
e8:11:95:f2:67:c4:0c:b5:1e:b5:10:3b:a9:76:b5:b4:60:44:
a6:0d:e8:9e:3b:52:e0:c6:4a:8d:e0:3d:75:8a:c6:05:d0:b9:
cc:15:c6:89:3a:97:46:7e:c8:b5:2c:fd:32:c3:15:0c:a8:01:
81:31:39:69:25:4b:5a:3e:d9:c2:8e:97:9a:ce:4f:75:63:ab:
42:d4:d4:d0:e3:45:e8:4d:02:6d:63:85:e8:59:64:79:b2:da:
68:3f:26:06:8c:44:16:cc:02:9a:f7:67:ef:99:ed:22:5b:2c:
6b:42:c9:6e:ab:20:67:ac:17:88:39:97:5a:56:f0:48:00:0b:
4b:bf:b7:a1:f9:8a:ff:0f:d1:65:63:2a:4a:aa:d5:9e:8b:a3:
43:d9:f0:25:2b:21:93:66:13:8d:0c:fc:14:e8:c4:c0:e9:7c:
ca:c6:50:62:96:d5:63:fe:cf:4e:d3:e2:fc:b5:70:4f:86:e7:
e0:3f:c6:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+S6XVT6kmlXlWOcStmYe8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE5MjIxMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDliYWQ5YzBjMGZhZTViZmU1YWI5N2U4ZDI1N2Q3NTU3YWIyZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYhIM8FS6ayEbxmHjkUA3oiC0+je
EDH1k2TAnWkeKIRYAzTJhXuZM2s8IfontSyeFlfMYKIBffyckU7yKqSjjBsrz1RM
Gta9r32vZPID1QyoVIVhpMhAP37XDaqVGSB0xn1AzVVR3hpS1RmuJAnsHl+dmo6Q
yZSa83w8hjZorWQDyxQO17i9x8+KGmXAiy+XH+AM/sskbB9iU57M1OUfx4YW2Tvm
JxedQrSwYMMnNNGc8wNr/RSPlttITRz3+nDZ2+m/uN2aphRG0HJj87rcnelgVwWo
11R9dMYiH0BedNm6ef8CerFPNaCyFC3uuLCHNCX90kN3wwDqDPYHVtgIZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE2brZwMD65b/lq5fo0lfXVXqy/aMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvVFp1dG5Bd1BybHYtV3JsLWpTVjlkVmVyTDlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAM1+Icznpenmz8fIjL8C
vZCf2sLlM1kwuhqJyJFjEJc7dMPcAnppOGJnjJjUo9Oq8TllGEp/kcfyav5SBDT3
xn/zuK4x/fbeH+gRlfJnxAy1HrUQO6l2tbRgRKYN6J47UuDGSo3gPXWKxgXQucwV
xok6l0Z+yLUs/TLDFQyoAYExOWklS1o+2cKOl5rOT3Vjq0LU1NDjRehNAm1jhehZ
ZHmy2mg/JgaMRBbMApr3Z++Z7SJbLGtCyW6rIGesF4g5l1pW8EgAC0u/t6H5iv8P
0WVjKkqq1Z6Lo0PZ8CUrIZNmE40M/BToxMDpfMrGUGKW1WP+z07T4vy1cE+G5+A/
xhk=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:04 2025 by rpki-client