Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tpm94V7uki9vE7RLiSh-Gd0KbJU.roa
File: Tpm94V7uki9vE7RLiSh-Gd0KbJU.roa (raw, json)
Hash identifier: +fHy+S0wIBp/MBl8vDhYVvd2HXJoPMWvmK0+zfS4IDo=
Subject key identifier: 4E:99:BD:E1:5E:EE:92:2F:6F:13:B4:4B:89:28:7E:19:DD:0A:6C:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855836794830DDD7F59A13832495794B84
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tpm94V7uki9vE7RLiSh-Gd0KbJU.roa
Signing time: Wed 28 Dec 2022 10:10:42 +0000
ROA not before: Wed 28 Dec 2022 10:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:36:79:48:30:dd:d7:f5:9a:13:83:24:95:79:4b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 10:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e99bde15eee922f6f13b44b89287e19dd0a6c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:4e:45:c2:1c:f8:b1:47:aa:a3:77:85:e6:
86:eb:ac:79:8c:d2:5b:a1:ec:7c:32:3c:87:e9:a4:
3e:d6:20:ab:6b:51:9e:13:7a:ea:7c:6d:0e:5c:4c:
06:92:6a:22:4b:5e:4a:93:84:35:35:ab:2d:07:84:
2f:64:38:16:cd:df:4a:7d:c0:50:18:50:b1:a7:2a:
3d:91:b3:af:a2:50:78:6e:cb:49:5d:77:b7:de:d8:
68:d5:aa:bc:c1:8e:87:ad:03:67:57:6d:16:1f:90:
04:bb:90:dc:00:bd:bc:2d:99:d4:91:54:cf:af:5a:
7e:d7:5a:7a:9a:2c:43:8f:a7:27:fe:ad:eb:b1:f9:
ea:6a:aa:ec:43:ba:dd:51:9c:57:33:0e:70:52:7b:
05:36:e4:84:ee:4a:af:a8:27:6e:92:cc:ed:93:99:
5e:81:af:8a:54:ec:2d:ed:4a:e0:f3:9b:db:79:b9:
cb:59:e9:be:93:d8:40:b4:50:0f:85:0c:d8:ff:e3:
24:df:77:9f:35:bf:e4:79:73:9d:15:0b:48:19:7e:
4c:d9:b2:46:79:5c:1b:7c:b3:74:89:c6:08:72:87:
8c:e7:85:2e:c6:92:ab:37:a1:04:b8:be:d8:b7:45:
83:51:b5:50:68:d7:ac:0c:83:90:56:98:94:b7:75:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:BD:E1:5E:EE:92:2F:6F:13:B4:4B:89:28:7E:19:DD:0A:6C:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Tpm94V7uki9vE7RLiSh-Gd0KbJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:7e:3f:73:c1:61:20:6f:82:59:10:35:4c:25:e6:fa:87:df:
51:44:50:d7:03:af:b3:fe:f1:89:74:f4:87:bc:3c:af:a6:04:
e3:f1:38:52:f6:a8:c1:55:fa:7e:33:79:08:20:64:be:55:e9:
71:26:55:e8:47:00:34:f0:94:4d:df:56:d5:11:3c:1d:87:65:
c1:8c:aa:4f:82:1d:c6:bc:64:65:bf:41:da:3e:34:7d:ff:fc:
f6:9e:9f:a0:96:c9:ea:f5:44:4c:ef:74:d2:f4:b4:93:0b:8f:
89:15:70:9c:3b:c1:f8:1c:0a:f2:73:2e:36:55:13:f9:b0:41:
2d:b0:a8:ca:b5:bc:d9:4e:f8:11:f5:84:a2:8f:a2:62:94:fb:
df:16:da:ec:fe:18:61:12:82:2e:16:52:aa:08:ed:34:c3:42:
a0:da:4f:1b:a9:07:9a:bd:85:cf:a1:10:47:cc:8f:f9:bd:64:
b9:5f:f5:94:e4:c0:c8:9c:ee:cf:a7:89:f7:70:4d:0a:dc:2a:
77:61:87:e5:c1:d1:ec:4e:08:ef:27:ec:4b:9a:c7:10:cc:89:
05:b3:5d:40:8f:2f:76:57:8c:a4:32:2b:a7:a0:ca:b9:4c:68:
7f:65:74:ac:17:b9:ff:6f:00:a2:c4:98:f0:d8:32:3a:23:f2:
fc:1f:b9:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVYNnlIMN3X9ZoTgySVeUuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI4MTAxMDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTk5YmRlMTVlZWU5MjJmNmYxM2I0NGI4OTI4N2UxOWRkMGE2Yzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzRORcIc+LFHqqN3heaG66x5jNJb
oex8MjyH6aQ+1iCra1GeE3rqfG0OXEwGkmoiS15Kk4Q1NastB4QvZDgWzd9KfcBQ
GFCxpyo9kbOvolB4bstJXXe33tho1aq8wY6HrQNnV20WH5AEu5DcAL28LZnUkVTP
r1p+11p6mixDj6cn/q3rsfnqaqrsQ7rdUZxXMw5wUnsFNuSE7kqvqCduksztk5le
ga+KVOwt7Urg85vbebnLWem+k9hAtFAPhQzY/+Mk33efNb/keXOdFQtIGX5M2bJG
eVwbfLN0icYIcoeM54UuxpKrN6EEuL7Yt0WDUbVQaNesDIOQVpiUt3WFhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE6ZveFe7pIvbxO0S4kofhndCmyVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVHBtOTRWN3VraTl2RTdSTGlTaC1HZDBLYkpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHl+P3PBYSBvglkQNUwl
5vqH31FEUNcDr7P+8Yl09Ie8PK+mBOPxOFL2qMFV+n4zeQggZL5V6XEmVehHADTw
lE3fVtURPB2HZcGMqk+CHca8ZGW/Qdo+NH3//Paen6CWyer1REzvdNL0tJMLj4kV
cJw7wfgcCvJzLjZVE/mwQS2wqMq1vNlO+BH1hKKPomKU+98W2uz+GGESgi4WUqoI
7TTDQqDaTxupB5q9hc+hEEfMj/m9ZLlf9ZTkwMic7s+nifdwTQrcKndhh+XB0exO
CO8n7EuaxxDMiQWzXUCPL3ZXjKQyK6egyrlMaH9ldKwXuf9vAKLEmPDYMjoj8vwf
uY0=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:25 2025 by rpki-client