Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TafY37uFeg1ZGZhp7Fb3HNUkwGk.roa
File: TafY37uFeg1ZGZhp7Fb3HNUkwGk.roa (raw, json)
Hash identifier: Y21IK0A41dKp+3hRE6b+1bqzqkycCEjtxyeCcJ3j2ug=
Subject key identifier: 4D:A7:D8:DF:BB:85:7A:0D:59:19:98:69:EC:56:F7:1C:D5:24:C0:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A2DA8D8110BC8A327F2D29B10C0ABF7C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TafY37uFeg1ZGZhp7Fb3HNUkwGk.roa
Signing time: Sat 10 Jun 2023 01:10:12 +0000
ROA not before: Sat 10 Jun 2023 01:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a2:da:8d:81:10:bc:8a:32:7f:2d:29:b1:0c:0a:bf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 01:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4da7d8dfbb857a0d59199869ec56f71cd524c069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:34:23:bc:cc:23:49:a4:cd:35:2e:d2:dd:
e0:5b:57:be:52:a6:9c:67:13:76:1c:0a:63:75:d1:
a8:59:58:2c:41:e8:b1:40:f4:a1:f3:d8:85:b0:bd:
eb:f7:74:d5:84:4e:54:40:5f:53:4c:4d:bc:46:06:
6d:76:6c:4e:f9:73:80:0d:d3:61:cb:ed:a5:f9:58:
fb:5d:15:82:d1:df:49:4c:2e:94:dd:1d:c7:24:55:
df:8f:14:eb:ed:51:eb:30:21:b6:09:67:83:0b:66:
da:58:51:d9:a4:ab:ab:bb:38:c0:12:70:77:ec:ed:
2b:cc:28:ad:87:63:28:4e:86:e7:ee:3b:8a:b3:32:
4a:77:a2:ca:29:a1:71:35:1f:9d:8e:69:ac:02:c4:
e0:fc:e7:04:d5:dc:0b:33:14:d0:af:e1:22:06:96:
7f:d9:d8:91:48:7c:27:87:eb:99:ea:45:46:f0:f5:
3c:dd:16:62:ed:86:1a:53:e2:d8:f0:ca:01:47:40:
b4:b2:74:b5:f5:40:ab:6d:ea:27:88:ed:24:d9:03:
92:96:1e:20:95:ed:cd:83:89:af:89:45:15:1a:2f:
43:f0:91:c2:d8:c6:04:73:42:75:5c:81:30:b2:54:
c7:52:a0:e1:86:cd:e3:a4:ab:c0:e5:90:9f:e5:28:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:D8:DF:BB:85:7A:0D:59:19:98:69:EC:56:F7:1C:D5:24:C0:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TafY37uFeg1ZGZhp7Fb3HNUkwGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:7f:0a:83:c1:22:43:0e:d2:5e:a1:d4:e7:8c:b2:ec:d1:74:
61:00:b4:6a:e2:af:81:9b:6a:da:6a:c6:cc:00:39:5d:71:1e:
ad:a0:37:04:48:0c:af:13:4a:8e:cf:68:21:14:aa:3f:5f:03:
c2:a0:e9:68:19:b9:83:84:3b:a7:19:71:a7:9c:0b:95:ff:79:
17:44:51:c0:97:7f:05:3b:79:e7:a5:dc:79:c0:e1:2e:b5:9b:
a8:b3:0f:ac:d9:e6:71:28:b0:9f:42:70:f0:3e:e6:91:c7:0c:
4f:b7:9c:f2:83:36:94:af:d6:c8:e8:92:62:7f:78:8e:14:1e:
47:fd:fa:2c:e4:ed:93:ef:aa:8c:bb:86:b0:6e:2f:3a:6a:f6:
b4:90:ca:67:2a:13:8f:cd:6c:93:4c:be:f4:3a:e9:2c:9b:2a:
37:77:81:3b:47:4f:df:59:20:5c:dc:f4:63:f3:19:74:23:7b:
14:3a:11:ea:dd:23:66:df:6e:a9:6f:de:a6:f9:8a:48:dd:76:
ed:3d:b3:d6:6f:35:c6:7c:c9:0d:66:8a:67:71:5b:ca:90:54:
53:5c:30:c7:62:1c:85:1e:53:b7:59:8e:ba:b1:5a:94:50:ad:
70:0f:b6:fb:53:1d:46:92:47:d5:dd:aa:28:90:a9:57:65:27:
22:7c:3d:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYii2o2BELyKMn8tKbEMCr98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEwMDExMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGE3ZDhkZmJiODU3YTBkNTkxOTk4NjllYzU2ZjcxY2Q1MjRjMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMs0I7zMI0mkzTUu0t3gW1e+Uqac
ZxN2HApjddGoWVgsQeixQPSh89iFsL3r93TVhE5UQF9TTE28RgZtdmxO+XOADdNh
y+2l+Vj7XRWC0d9JTC6U3R3HJFXfjxTr7VHrMCG2CWeDC2baWFHZpKuruzjAEnB3
7O0rzCith2MoTobn7juKszJKd6LKKaFxNR+djmmsAsTg/OcE1dwLMxTQr+EiBpZ/
2diRSHwnh+uZ6kVG8PU83RZi7YYaU+LY8MoBR0C0snS19UCrbeoniO0k2QOSlh4g
le3Ng4mviUUVGi9D8JHC2MYEc0J1XIEwslTHUqDhhs3jpKvA5ZCf5ShmBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE2n2N+7hXoNWRmYaexW9xzVJMBpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVGFmWTM3dUZlZzFaR1pocDdGYjNITlVrd0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIF/CoPBIkMO0l6h1OeM
suzRdGEAtGrir4GbatpqxswAOV1xHq2gNwRIDK8TSo7PaCEUqj9fA8Kg6WgZuYOE
O6cZcaecC5X/eRdEUcCXfwU7eeel3HnA4S61m6izD6zZ5nEosJ9CcPA+5pHHDE+3
nPKDNpSv1sjokmJ/eI4UHkf9+izk7ZPvqoy7hrBuLzpq9rSQymcqE4/NbJNMvvQ6
6SybKjd3gTtHT99ZIFzc9GPzGXQjexQ6EerdI2bfbqlv3qb5ikjddu09s9ZvNcZ8
yQ1mimdxW8qQVFNcMMdiHIUeU7dZjrqxWpRQrXAPtvtTHUaSR9XdqiiQqVdlJyJ8
Pes=
-----END CERTIFICATE-----
Generated at Thu Jun 12 17:52:44 2025 by rpki-client