Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/THPboFyq2MCRBhKPcU2lreA0A5g.roa
File: THPboFyq2MCRBhKPcU2lreA0A5g.roa (raw, json)
Hash identifier: RFDofRhCpCywHgG1brL/yoyK76W4n8CTHlo6KfUDO1o=
Subject key identifier: 4C:73:DB:A0:5C:AA:D8:C0:91:06:12:8F:71:4D:A5:AD:E0:34:03:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182EFC022FC4606F1B50FBB434617F24A32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/THPboFyq2MCRBhKPcU2lreA0A5g.roa
Signing time: Tue 30 Aug 2022 17:15:22 +0000
ROA not before: Tue 30 Aug 2022 17:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:c0:22:fc:46:06:f1:b5:0f:bb:43:46:17:f2:4a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 17:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c73dba05caad8c09106128f714da5ade0340398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:59:e5:91:be:09:93:55:aa:33:c6:21:b7:
79:03:6c:b9:ce:c9:46:41:94:d5:69:5e:01:f3:8a:
f7:58:39:32:56:ce:05:66:8d:93:18:86:5b:0e:53:
18:e8:07:27:0e:02:de:e0:a9:cb:0c:7b:cc:a8:99:
cc:e8:77:7e:60:e8:a3:63:8c:d5:0f:c2:82:37:e5:
05:33:b9:24:8f:f1:7e:28:a8:60:80:38:e2:bd:00:
41:19:36:7b:a4:20:55:1e:07:ea:af:fe:c0:69:fb:
4f:7e:08:bf:47:9d:c0:03:3f:af:42:61:4f:9b:b0:
fa:34:e9:db:49:2c:74:52:7a:3c:ed:2a:84:6d:5d:
5f:c4:fc:bf:ca:5f:ae:05:0b:e9:2a:47:9b:23:6b:
63:8d:b4:a2:44:45:2c:d1:cf:73:4a:5a:69:65:37:
d3:94:3a:8e:dd:c0:08:6b:a1:df:c3:b7:d0:eb:ad:
d6:7e:41:a7:97:17:f9:57:f1:2e:18:a0:3c:a2:7b:
63:8f:f6:62:89:7d:c8:86:3b:c4:27:85:54:f6:8e:
d8:eb:d8:ce:12:a0:7c:6b:f1:5a:85:d1:8c:1b:df:
e9:99:60:f2:b0:40:10:41:b0:5e:38:80:f1:8e:b1:
d0:c6:55:7e:ec:7f:d4:05:cc:bd:4a:e3:83:33:4f:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:DB:A0:5C:AA:D8:C0:91:06:12:8F:71:4D:A5:AD:E0:34:03:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/THPboFyq2MCRBhKPcU2lreA0A5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:41:22:41:1e:f6:78:f1:af:f6:a6:47:e5:d2:87:88:80:ab:
45:5a:1f:0e:92:64:a8:71:d5:ad:a5:85:58:e1:15:5b:28:5b:
98:3a:3d:69:fe:a7:ed:51:cb:7e:70:1f:cd:a5:5f:03:10:d3:
46:d7:96:52:5d:19:eb:d0:31:bd:3a:0c:35:e5:56:aa:b9:2c:
ae:68:13:76:11:d6:7e:c8:0b:30:02:ee:2f:d5:5c:97:fb:27:
61:c7:fa:0a:8c:56:ba:fb:5b:99:a4:8f:1b:5d:03:f3:4e:aa:
ce:b5:7e:da:6d:f9:e0:3f:0d:09:dc:89:0c:04:a9:8f:0f:23:
74:e2:a8:8c:80:d6:e6:7e:ea:79:cd:d0:80:48:06:f8:c3:63:
9f:ca:53:19:7d:c4:63:8c:df:d6:ea:2b:39:a2:e2:7b:32:f2:
cf:24:1b:d1:6d:11:91:d6:49:26:e2:df:c8:a7:cd:3f:7c:8a:
81:e7:54:cc:35:8c:15:97:d0:b4:93:e9:f1:df:92:d1:be:7f:
b8:62:67:6b:cd:ae:ca:04:0d:6e:33:51:e1:f7:5a:8f:bf:a0:
97:5c:9e:9b:c2:d0:84:f5:54:e6:d4:dc:f8:cc:16:e8:43:33:
d6:5a:e6:6c:6b:af:66:49:6c:3b:b9:3b:35:28:a3:e3:cf:41:
cb:bf:1c:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLvwCL8RgbxtQ+7Q0YX8koyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODMwMTcxNTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzczZGJhMDVjYWFkOGMwOTEwNjEyOGY3MTRkYTVhZGUwMzQwMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH1Z5ZG+CZNVqjPGIbd5A2y5zslG
QZTVaV4B84r3WDkyVs4FZo2TGIZbDlMY6AcnDgLe4KnLDHvMqJnM6Hd+YOijY4zV
D8KCN+UFM7kkj/F+KKhggDjivQBBGTZ7pCBVHgfqr/7AaftPfgi/R53AAz+vQmFP
m7D6NOnbSSx0Uno87SqEbV1fxPy/yl+uBQvpKkebI2tjjbSiREUs0c9zSlppZTfT
lDqO3cAIa6Hfw7fQ663WfkGnlxf5V/EuGKA8ontjj/ZiiX3IhjvEJ4VU9o7Y69jO
EqB8a/FahdGMG9/pmWDysEAQQbBeOIDxjrHQxlV+7H/UBcy9SuODM0/E0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFExz26BcqtjAkQYSj3FNpa3gNAOYMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVEhQYm9GeXEyTUNSQmhLUGNVMmxyZUEwQTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIBBIkEe9njxr/amR+XS
h4iAq0VaHw6SZKhx1a2lhVjhFVsoW5g6PWn+p+1Ry35wH82lXwMQ00bXllJdGevQ
Mb06DDXlVqq5LK5oE3YR1n7ICzAC7i/VXJf7J2HH+gqMVrr7W5mkjxtdA/NOqs61
ftpt+eA/DQnciQwEqY8PI3TiqIyA1uZ+6nnN0IBIBvjDY5/KUxl9xGOM39bqKzmi
4nsy8s8kG9FtEZHWSSbi38inzT98ioHnVMw1jBWX0LST6fHfktG+f7hiZ2vNrsoE
DW4zUeH3Wo+/oJdcnpvC0IT1VObU3PjMFuhDM9Za5mxrr2ZJbDu5OzUoo+PPQcu/
HOo=
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:44:59 2025 by rpki-client