Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tLqmSEEmRIX7iUDA2v5pbQT8_y4.roa
File: tLqmSEEmRIX7iUDA2v5pbQT8_y4.roa (raw, json)
Hash identifier: uyPLLTcbkKNIbcRZ4XFBt53pt6XRIbPgn1UWIthskek=
Subject key identifier: B4:BA:A6:48:41:26:44:85:FB:89:40:C0:DA:FE:69:6D:04:FC:FF:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018641E36A29F61E15B4DC5FA29146CDB20F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tLqmSEEmRIX7iUDA2v5pbQT8_y4.roa
Signing time: Sat 11 Feb 2023 19:11:08 +0000
ROA not before: Sat 11 Feb 2023 19:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:41:e3:6a:29:f6:1e:15:b4:dc:5f:a2:91:46:cd:b2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 19:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4baa64841264485fb8940c0dafe696d04fcff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:c3:df:09:90:90:39:0c:3d:19:30:a8:81:
84:40:8c:cf:27:4d:08:3a:ee:2b:5e:9c:d0:3b:79:
d9:83:17:92:9a:f6:1b:2e:fe:98:41:84:1f:61:91:
0e:36:60:fa:c5:30:73:03:a9:88:70:4f:b6:3d:89:
7e:ac:25:0b:27:5b:c6:a3:9b:4d:ca:b4:fb:91:94:
11:96:19:72:e3:e0:35:e8:97:9c:cd:91:00:28:13:
50:2a:74:11:d4:06:ee:83:3f:60:a5:40:b3:65:ab:
96:54:e4:eb:01:09:fb:98:82:0b:c4:a6:4e:9d:a7:
90:d6:c3:8a:0e:56:6d:d1:3b:57:3b:ff:eb:9b:74:
c8:35:b4:f2:61:74:35:80:15:ca:0e:fd:d8:ff:fa:
67:bc:a0:10:63:26:45:81:1e:9a:3c:87:92:67:ef:
da:22:65:1e:31:75:4a:ca:cb:0c:8e:cb:df:07:46:
4b:dc:c1:57:c5:14:03:66:8e:3b:2e:3f:49:9f:be:
a4:76:a3:48:8b:96:e1:40:6b:2a:70:4f:9a:4f:fd:
28:70:e6:d8:91:cf:f7:d9:1f:95:16:0a:9f:2a:62:
dd:ec:dd:5f:0d:3d:a6:52:9d:2a:67:9f:4b:7c:77:
e5:b5:1b:d1:6a:96:4b:0a:62:d5:c3:7e:f3:aa:69:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:A6:48:41:26:44:85:FB:89:40:C0:DA:FE:69:6D:04:FC:FF:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tLqmSEEmRIX7iUDA2v5pbQT8_y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:6f:1b:54:f4:34:4f:4e:9d:5c:a2:5a:f6:b1:11:03:9b:1e:
5c:6c:96:da:02:d8:30:c3:53:35:c6:d9:86:72:dd:34:7e:b6:
84:c6:ae:b7:92:cc:66:19:51:78:95:cf:80:3b:40:fe:45:4b:
f8:6d:70:b0:ab:f4:d7:cf:75:aa:e1:95:c7:c0:fa:2d:03:18:
ac:f4:ef:41:c9:75:2c:54:22:46:85:63:95:2f:a7:06:86:0f:
f4:c9:5f:30:8e:b0:08:53:90:b2:9f:4b:54:fc:4e:5a:49:29:
43:32:9a:1b:a0:cb:04:49:0c:db:31:75:c1:cb:76:89:52:0f:
fc:13:87:d2:33:83:60:03:2a:f5:90:95:0f:ff:79:9c:39:49:
3d:c5:dc:49:0a:a7:e3:92:f1:e0:36:dc:be:bb:a4:42:fb:1e:
d4:89:50:bc:06:50:aa:68:80:ff:3e:3c:01:61:7d:00:4d:a7:
e9:62:99:a4:f2:37:eb:04:fa:76:c3:57:76:e9:66:e6:cf:e6:
ff:36:53:a8:01:5d:76:20:19:9c:57:b6:75:cc:17:1f:a4:42:
8a:87:65:dc:12:2e:83:d8:78:a9:38:8e:7f:1a:92:99:97:7a:
dd:8b:83:f9:83:3d:a8:01:d4:50:0b:fc:f6:61:ec:1f:ae:44:
6b:cd:84:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZB42op9h4VtNxfopFGzbIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjExMTkxMTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGJhYTY0ODQxMjY0NDg1ZmI4OTQwYzBkYWZlNjk2ZDA0ZmNmZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWjD3wmQkDkMPRkwqIGEQIzPJ00I
Ou4rXpzQO3nZgxeSmvYbLv6YQYQfYZEONmD6xTBzA6mIcE+2PYl+rCULJ1vGo5tN
yrT7kZQRlhly4+A16JeczZEAKBNQKnQR1Abugz9gpUCzZauWVOTrAQn7mIILxKZO
naeQ1sOKDlZt0TtXO//rm3TINbTyYXQ1gBXKDv3Y//pnvKAQYyZFgR6aPIeSZ+/a
ImUeMXVKyssMjsvfB0ZL3MFXxRQDZo47Lj9Jn76kdqNIi5bhQGsqcE+aT/0ocObY
kc/32R+VFgqfKmLd7N1fDT2mUp0qZ59LfHfltRvRapZLCmLVw37zqmnZJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLS6pkhBJkSF+4lAwNr+aW0E/P8uMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdExxbVNFRW1SSVg3aVVEQTJ2NXBiUVQ4X3k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHtvG1T0NE9OnVyiWvax
EQObHlxsltoC2DDDUzXG2YZy3TR+toTGrreSzGYZUXiVz4A7QP5FS/htcLCr9NfP
darhlcfA+i0DGKz070HJdSxUIkaFY5UvpwaGD/TJXzCOsAhTkLKfS1T8TlpJKUMy
mhugywRJDNsxdcHLdolSD/wTh9Izg2ADKvWQlQ//eZw5ST3F3EkKp+OS8eA23L67
pEL7HtSJULwGUKpogP8+PAFhfQBNp+limaTyN+sE+nbDV3bpZubP5v82U6gBXXYg
GZxXtnXMFx+kQoqHZdwSLoPYeKk4jn8akpmXet2Lg/mDPagB1FAL/PZh7B+uRGvN
hFM=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:36:02 2025 by rpki-client