Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tXXOcLO3zBBCw3da-SzHOjyRU-U.roa
File: tXXOcLO3zBBCw3da-SzHOjyRU-U.roa (raw, json)
Hash identifier: HPnRSsZ1bZF+0RNJ37axUeMYm8/khzh8PyAEonMDBQc=
Subject key identifier: B5:75:CE:70:B3:B7:CC:10:42:C3:77:5A:F9:2C:C7:3A:3C:91:53:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185364EC8412E0D548F6A67F6134E1C8109
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tXXOcLO3zBBCw3da-SzHOjyRU-U.roa
Signing time: Wed 21 Dec 2022 20:10:10 +0000
ROA not before: Wed 21 Dec 2022 20:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:4e:c8:41:2e:0d:54:8f:6a:67:f6:13:4e:1c:81:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 20:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b575ce70b3b7cc1042c3775af92cc73a3c9153e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:ec:13:7c:95:23:08:8b:a2:0e:cc:d9:82:
64:e9:c1:25:10:6f:f9:a4:1b:c9:22:ee:20:d9:53:
30:1f:83:18:75:d9:d8:71:0e:30:85:2c:07:1e:a9:
d4:0a:63:31:79:f6:29:5b:ec:f0:da:a5:06:c5:cc:
ca:03:70:ca:7f:5f:23:43:2e:89:1a:a7:82:ff:f5:
a7:3d:76:28:92:80:d6:3b:f0:fb:f9:98:29:43:f1:
81:8e:44:01:51:1d:1c:c8:cc:25:34:94:2a:9b:13:
e9:8d:c3:8d:ad:90:9b:13:b9:63:17:68:4d:36:09:
27:84:a9:b0:d3:33:b2:d3:c4:46:72:05:90:ac:a4:
93:4f:c5:cc:72:d9:9c:24:ae:56:a9:ec:92:e5:39:
9c:23:df:6c:d7:e1:76:7e:93:34:54:08:5e:54:dc:
29:36:a4:6e:ee:b7:23:61:aa:40:46:53:a6:ba:89:
09:dc:df:25:08:9e:55:e4:e6:f2:b1:d5:66:59:6b:
ee:38:66:95:6a:d4:32:7d:4d:c0:3c:28:39:d4:b9:
71:25:f6:3b:ad:08:fd:d1:91:b3:10:a3:b8:13:19:
b4:95:2d:b8:c7:ea:b7:68:11:1d:c1:ad:4a:83:2d:
23:7e:b0:04:ff:58:ae:8b:70:c1:3e:de:dc:9b:75:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:75:CE:70:B3:B7:CC:10:42:C3:77:5A:F9:2C:C7:3A:3C:91:53:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tXXOcLO3zBBCw3da-SzHOjyRU-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:1d:1f:9f:6f:f3:38:b1:7b:2e:e9:c1:d6:bb:51:99:24:e4:
03:a4:1b:f7:4e:1e:cc:67:04:ed:b1:f0:7a:73:f8:a9:9c:91:
15:ca:ea:ac:57:3b:69:75:6b:8e:fe:59:ae:43:24:be:79:d5:
f4:66:3b:2f:19:03:99:c2:1e:94:b8:9b:2f:95:a7:dc:bb:69:
e7:75:b3:59:af:54:8f:f0:59:1a:c4:42:1b:a8:7f:31:7b:57:
d4:22:5d:dc:31:8e:8d:50:c9:64:f0:f4:2e:b6:35:24:49:c2:
80:53:d1:bc:42:17:d3:c9:9d:37:91:b6:2e:7f:53:d1:ba:92:
c1:db:da:bb:04:b0:21:69:37:d9:92:4e:bb:72:66:1d:a9:30:
4a:93:82:f7:41:83:88:d3:e3:38:e7:24:55:7e:74:0e:15:6e:
ca:3d:9f:2d:6a:da:84:05:bc:ac:5c:9b:ae:b4:93:ed:0b:cd:
f3:46:cd:fd:74:ac:df:f7:92:aa:36:7f:5d:e4:34:2b:bb:2b:
7d:40:e1:23:c1:ee:6d:14:26:9a:c2:e0:28:4d:45:8b:67:c6:
85:ac:bc:06:42:6b:3f:bd:a9:01:07:fc:5b:cd:e6:4b:1d:bf:
cb:00:f5:c4:d9:66:b8:d5:37:35:83:b7:db:e7:1a:7c:71:ec:
bf:04:95:91
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYU2TshBLg1Uj2pn9hNOHIEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIxMjAxMDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTc1Y2U3MGIzYjdjYzEwNDJjMzc3NWFmOTJjYzczYTNjOTE1M2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSjsE3yVIwiLog7M2YJk6cElEG/5
pBvJIu4g2VMwH4MYddnYcQ4whSwHHqnUCmMxefYpW+zw2qUGxczKA3DKf18jQy6J
GqeC//WnPXYokoDWO/D7+ZgpQ/GBjkQBUR0cyMwlNJQqmxPpjcONrZCbE7ljF2hN
NgknhKmw0zOy08RGcgWQrKSTT8XMctmcJK5WqeyS5TmcI99s1+F2fpM0VAheVNwp
NqRu7rcjYapARlOmuokJ3N8lCJ5V5ObysdVmWWvuOGaVatQyfU3APCg51LlxJfY7
rQj90ZGzEKO4Exm0lS24x+q3aBEdwa1Kgy0jfrAE/1iui3DBPt7cm3V9yQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLV1znCzt8wQQsN3Wvksxzo8kVPlMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdFhYT2NMTzN6QkJDdzNkYS1TekhPanlSVS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADIdH59v8zixey7pwda7
UZkk5AOkG/dOHsxnBO2x8Hpz+KmckRXK6qxXO2l1a47+Wa5DJL551fRmOy8ZA5nC
HpS4my+Vp9y7aed1s1mvVI/wWRrEQhuofzF7V9QiXdwxjo1QyWTw9C62NSRJwoBT
0bxCF9PJnTeRti5/U9G6ksHb2rsEsCFpN9mSTrtyZh2pMEqTgvdBg4jT4zjnJFV+
dA4Vbso9ny1q2oQFvKxcm660k+0LzfNGzf10rN/3kqo2f13kNCu7K31A4SPB7m0U
JprC4ChNRYtnxoWsvAZCaz+9qQEH/FvN5ksdv8sA9cTZZrjVNzWDt9vnGnxx7L8E
lZE=
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:24:34 2025 by rpki-client