Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1TP5WVNO7GLcPyRIju-mSrol2os.roa
File: 1TP5WVNO7GLcPyRIju-mSrol2os.roa (raw, json)
Hash identifier: 2aEqf9vx6a8ryormZOCldo5pvK3DJzpZjVi5H15+BPM=
Subject key identifier: D5:33:F9:59:53:4E:EC:62:DC:3F:24:48:8E:EF:A6:4A:BA:25:DA:8B
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F528AC3502B3244CA4981E42281822F6E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1TP5WVNO7GLcPyRIju-mSrol2os.roa
Signing time: Tue 07 May 2024 10:12:56 +0000
ROA not before: Tue 07 May 2024 10:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:8a:c3:50:2b:32:44:ca:49:81:e4:22:81:82:2f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 7 10:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d533f959534eec62dc3f24488eefa64aba25da8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:53:77:8b:a1:2b:99:32:f7:af:89:56:14:
ac:5a:09:f0:d4:f1:25:23:cb:ae:78:09:89:64:6d:
04:4f:6d:44:f3:b4:ee:ca:1a:23:d7:fa:85:43:78:
85:46:f4:ee:d9:56:d7:24:bf:40:33:5d:54:b1:07:
eb:e9:7e:4d:28:67:43:dd:d8:5a:a0:4f:61:36:27:
05:0b:73:bd:c3:97:5d:9e:f1:46:05:86:a9:df:2e:
2b:2c:52:0a:7f:b4:c0:98:3f:13:01:96:a3:5a:ad:
55:ff:f3:29:13:3a:10:9d:dc:86:6f:09:c7:5b:da:
21:04:4a:06:2f:34:eb:2f:61:0d:06:bd:35:59:8a:
d0:3b:a5:7e:13:46:9f:77:db:79:68:db:37:6d:41:
16:fe:14:46:5a:87:10:33:85:cf:e6:a5:2e:26:ae:
d8:2e:99:61:b4:82:5c:d6:0d:97:e3:38:16:a8:92:
96:d4:2d:42:7c:78:20:c1:1b:d5:d8:83:c1:ca:d2:
de:91:88:96:81:1e:d3:a7:64:11:89:46:62:1b:c2:
07:a7:5d:d3:aa:79:9a:0b:c6:8f:5f:ef:1c:df:9f:
89:d8:02:14:26:f6:27:33:21:97:a7:49:f8:9d:bf:
1b:7c:bd:56:9e:71:44:89:5e:98:35:e2:87:d9:a4:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:F9:59:53:4E:EC:62:DC:3F:24:48:8E:EF:A6:4A:BA:25:DA:8B
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/1TP5WVNO7GLcPyRIju-mSrol2os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:c5:23:dd:59:cf:5e:85:5f:d4:9f:81:aa:97:89:49:50:f2:
85:d1:d1:ba:2f:0e:14:ec:a4:51:ed:0e:e9:6c:6c:47:6c:e9:
98:24:0d:ac:c8:25:df:7a:d4:33:be:59:a7:49:f0:fc:1b:4f:
2b:03:db:90:2b:0e:ba:1a:b0:db:b2:2c:db:11:c3:17:7a:f8:
51:e6:01:6f:c5:81:87:4d:d5:6e:ec:e4:5e:41:01:84:1f:ec:
79:39:cd:a2:e6:c1:08:96:ee:0d:82:55:94:9a:01:f7:26:07:
90:8b:16:66:f4:94:4e:dc:5b:93:8b:49:62:df:59:a1:49:3a:
ee:0a:46:59:b3:52:aa:90:9b:db:ba:3a:c5:bd:0d:35:bb:ee:
3d:18:a9:23:e4:46:01:6f:87:09:fd:45:c2:8b:a6:46:86:13:
ed:c2:f6:86:a6:24:3f:1a:ae:0d:12:36:25:8d:9b:e0:b8:b1:
f0:27:2b:f3:c4:4f:54:5b:49:85:84:4b:6b:fc:db:d7:09:a7:
34:70:64:fe:36:c4:7e:10:13:e1:f8:7b:b2:75:1c:c3:e3:d7:
a4:72:f4:31:12:41:56:fa:cb:b5:94:1b:7d:63:08:4c:bc:44:
d8:7c:df:46:e5:5a:bc:52:57:71:83:3e:59:df:5f:1c:41:60:
6e:53:8a:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9SisNQKzJEykmB5CKBgi9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA3MTAxMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTMzZjk1OTUzNGVlYzYyZGMzZjI0NDg4ZWVmYTY0YWJhMjVkYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDlTd4uhK5ky96+JVhSsWgnw1PEl
I8uueAmJZG0ET21E87Tuyhoj1/qFQ3iFRvTu2VbXJL9AM11UsQfr6X5NKGdD3dha
oE9hNicFC3O9w5ddnvFGBYap3y4rLFIKf7TAmD8TAZajWq1V//MpEzoQndyGbwnH
W9ohBEoGLzTrL2ENBr01WYrQO6V+E0afd9t5aNs3bUEW/hRGWocQM4XP5qUuJq7Y
LplhtIJc1g2X4zgWqJKW1C1CfHggwRvV2IPBytLekYiWgR7Tp2QRiUZiG8IHp13T
qnmaC8aPX+8c35+J2AIUJvYnMyGXp0n4nb8bfL1WnnFEiV6YNeKH2aSpmQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNUz+VlTTuxi3D8kSI7vpkq6JdqLMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvMVRQNVdWTk83R0xjUHlSSWp1LW1Tcm9sMm9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHjFI91Zz16FX9SfgaqX
iUlQ8oXR0bovDhTspFHtDulsbEds6ZgkDazIJd961DO+WadJ8PwbTysD25ArDroa
sNuyLNsRwxd6+FHmAW/FgYdN1W7s5F5BAYQf7Hk5zaLmwQiW7g2CVZSaAfcmB5CL
Fmb0lE7cW5OLSWLfWaFJOu4KRlmzUqqQm9u6OsW9DTW77j0YqSPkRgFvhwn9RcKL
pkaGE+3C9oamJD8arg0SNiWNm+C4sfAnK/PET1RbSYWES2v829cJpzRwZP42xH4Q
E+H4e7J1HMPj16Ry9DESQVb6y7WUG31jCEy8RNh830blWrxSV3GDPlnfXxxBYG5T
ino=
-----END CERTIFICATE-----
Generated at Thu May 8 22:23:06 2025 by rpki-client