Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TPdZABkH-STcxowW10XY77urNqI.roa
File: TPdZABkH-STcxowW10XY77urNqI.roa (raw, json)
Hash identifier: 3hP0Mz+59IfU/OVVu4cPBaeP0t0RjM2ZQE15OorvmMI=
Subject key identifier: 4C:F7:59:00:19:07:F9:24:DC:C6:8C:16:D7:45:D8:EF:BB:AB:36:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018773708BA2F5D0F3D64F157FF564B7E658
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TPdZABkH-STcxowW10XY77urNqI.roa
Signing time: Wed 12 Apr 2023 03:09:28 +0000
ROA not before: Wed 12 Apr 2023 03:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:73:70:8b:a2:f5:d0:f3:d6:4f:15:7f:f5:64:b7:e6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 03:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf759001907f924dcc68c16d745d8efbbab36a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:d0:5f:a9:64:b1:8e:56:09:85:e6:13:38:
38:62:0b:07:4e:05:29:b6:85:96:8c:b4:84:83:1c:
a3:16:26:05:b4:43:54:50:c8:e6:7d:a2:b1:9c:bd:
0f:8b:40:ae:a2:2f:ba:dc:c8:18:35:a9:63:3d:0c:
ef:da:0d:85:46:fa:f7:f7:56:68:e8:61:3b:d3:f3:
4f:8e:7f:f8:8f:13:ce:4d:41:d8:8e:1e:77:47:f6:
6c:f2:4f:47:12:f0:06:ad:fa:80:4f:d0:bf:de:1b:
8b:25:5f:68:c8:f7:5a:bc:de:ac:8b:fd:45:92:cd:
96:7f:1d:01:1b:cb:5c:a2:c7:ae:a6:62:18:a7:86:
d9:81:dd:9e:40:2d:ef:a3:8b:21:58:79:ac:83:79:
fc:2c:dd:59:81:56:17:b0:bf:81:62:99:db:45:69:
3a:cd:bc:5e:90:8f:b6:52:03:27:f3:59:4e:a7:9b:
78:54:ea:bb:d2:d8:63:1a:ab:67:7f:d1:46:82:b3:
c2:70:3b:0b:cc:a8:6c:75:34:11:b5:36:04:10:dc:
22:1a:a6:09:18:43:1a:2c:65:b1:a3:e5:09:07:20:
93:c3:74:8e:07:11:9d:54:35:8f:f8:84:e4:28:f8:
7b:f6:70:de:65:7c:c9:6d:22:ee:a1:93:9d:db:f1:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:59:00:19:07:F9:24:DC:C6:8C:16:D7:45:D8:EF:BB:AB:36:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TPdZABkH-STcxowW10XY77urNqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:6b:98:75:73:55:25:a3:1e:8f:0a:36:7d:6d:a1:73:0f:f4:
01:73:f0:96:b4:e8:83:0e:80:8e:da:8d:fe:91:bc:c0:a7:c2:
96:2f:54:53:fe:e2:54:df:93:26:0a:75:8b:69:4f:e3:5e:77:
dd:a8:c5:82:5a:73:64:10:b1:f6:fc:54:27:b5:d3:ab:3c:db:
14:0d:0d:71:3d:d8:18:71:ac:aa:72:1b:f8:28:f8:ab:47:c7:
72:10:01:0f:1e:5e:89:b3:00:17:c6:b4:88:b5:75:c2:57:9f:
00:3e:59:3a:66:d9:d2:87:d1:36:c0:fc:65:62:6f:d7:7e:0a:
40:30:c8:76:56:35:0a:5c:c7:9a:91:57:d7:f6:f2:24:30:04:
36:38:cb:f6:47:b2:7e:a2:f9:91:6e:61:01:42:c5:f9:e3:05:
01:de:24:09:17:a5:a1:c1:1e:fd:88:9c:11:ad:48:36:38:7f:
76:80:55:00:ec:e4:09:f5:f1:cf:00:0e:b8:be:3a:f6:07:8a:
e6:77:80:96:28:86:14:05:8c:26:75:b6:40:d6:b6:db:0b:27:
87:c6:46:92:2a:f7:ab:e1:da:5f:35:3f:6b:fa:f4:00:0a:e3:
e4:32:3b:53:96:a1:ef:e7:f8:8a:6b:30:f0:66:9c:a6:79:2a:
2b:e8:28:ee
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdzcIui9dDz1k8Vf/Vkt+ZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEyMDMwOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Y3NTkwMDE5MDdmOTI0ZGNjNjhjMTZkNzQ1ZDhlZmJiYWIzNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSHQX6lksY5WCYXmEzg4YgsHTgUp
toWWjLSEgxyjFiYFtENUUMjmfaKxnL0Pi0Cuoi+63MgYNaljPQzv2g2FRvr391Zo
6GE70/NPjn/4jxPOTUHYjh53R/Zs8k9HEvAGrfqAT9C/3huLJV9oyPdavN6si/1F
ks2Wfx0BG8tcoseupmIYp4bZgd2eQC3vo4shWHmsg3n8LN1ZgVYXsL+BYpnbRWk6
zbxekI+2UgMn81lOp5t4VOq70thjGqtnf9FGgrPCcDsLzKhsdTQRtTYEENwiGqYJ
GEMaLGWxo+UJByCTw3SOBxGdVDWP+ITkKPh79nDeZXzJbSLuoZOd2/GeywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEz3WQAZB/kk3MaMFtdF2O+7qzaiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVFBkWkFCa0gtU1RjeG93VzEwWFk3N3VyTnFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKtrmHVzVSWjHo8KNn1t
oXMP9AFz8Ja06IMOgI7ajf6RvMCnwpYvVFP+4lTfkyYKdYtpT+Ned92oxYJac2QQ
sfb8VCe106s82xQNDXE92BhxrKpyG/go+KtHx3IQAQ8eXomzABfGtIi1dcJXnwA+
WTpm2dKH0TbA/GVib9d+CkAwyHZWNQpcx5qRV9f28iQwBDY4y/ZHsn6i+ZFuYQFC
xfnjBQHeJAkXpaHBHv2InBGtSDY4f3aAVQDs5An18c8ADri+OvYHiuZ3gJYohhQF
jCZ1tkDWttsLJ4fGRpIq96vh2l81P2v69AAK4+QyO1OWoe/n+IprMPBmnKZ5Kivo
KO4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:42 2025 by rpki-client