Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/Td-X_LHMcK8tXX2GLSOCn7dOfJg.roa
File: Td-X_LHMcK8tXX2GLSOCn7dOfJg.roa (raw, json)
Hash identifier: 8I802rCmUK75+NbzwzqRQAL8/goLCJeR/0H94/d7BrY=
Subject key identifier: 4D:DF:97:FC:B1:CC:70:AF:2D:5D:7D:86:2D:23:82:9F:B7:4E:7C:98
Certificate issuer: /CN=f216f18389a0e1ec3b6c0af9eb16dca2bfbfac6e
Certificate serial: 018EF5C3AE7558FD59EA38931B67944E9263
Authority key identifier: F2:16:F1:83:89:A0:E1:EC:3B:6C:0A:F9:EB:16:DC:A2:BF:BF:AC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hbxg4mg4ew7bAr56xbcor-_rG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/Td-X_LHMcK8tXX2GLSOCn7dOfJg.roa
Signing time: Fri 19 Apr 2024 09:50:25 +0000
ROA not before: Fri 19 Apr 2024 09:50:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:c3:ae:75:58:fd:59:ea:38:93:1b:67:94:4e:92:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f216f18389a0e1ec3b6c0af9eb16dca2bfbfac6e
Validity
Not Before: Apr 19 09:50:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ddf97fcb1cc70af2d5d7d862d23829fb74e7c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:89:c4:0a:ef:c0:6c:88:d8:95:19:c7:1a:
8a:ff:42:7f:2f:53:55:2a:d4:d9:ff:1e:2e:16:ac:
6e:46:de:36:31:51:c6:e3:94:e9:fa:95:49:3e:fc:
e8:3f:5f:7c:68:59:ca:2b:25:2b:2f:5c:e9:9b:d1:
71:45:1f:9d:bc:6e:dd:9e:75:08:13:d0:ca:7f:10:
bc:e7:74:2c:1a:a6:97:e4:5a:be:7b:21:b1:33:e2:
f6:16:fb:a5:f9:9c:ca:74:16:4b:71:ae:a4:46:13:
cd:26:7e:da:ab:80:da:33:85:52:57:fe:69:ca:0e:
c6:ea:b7:c9:cb:98:22:0b:a9:27:b3:ed:3f:95:9c:
86:00:83:11:d9:77:9f:b0:4f:1e:c1:6e:80:3f:dc:
a8:b4:98:33:7d:2f:9a:83:ad:59:8f:af:4a:1f:61:
bd:a4:f5:bf:93:e6:c1:db:b9:89:2d:d9:59:72:b0:
60:2f:71:89:0f:aa:4e:da:a0:f0:e1:1f:dd:aa:ba:
fc:6a:09:2b:37:99:bf:ac:ff:1a:d1:f5:0c:bf:33:
2e:d6:e6:fd:31:51:5a:60:81:28:8a:d6:49:90:ca:
20:eb:4c:7f:32:ae:c4:c5:5c:37:9f:74:a3:b1:80:
d8:9b:81:73:7c:b5:96:31:8a:f6:9d:21:58:38:53:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DF:97:FC:B1:CC:70:AF:2D:5D:7D:86:2D:23:82:9F:B7:4E:7C:98
X509v3 Authority Key Identifier:
keyid:F2:16:F1:83:89:A0:E1:EC:3B:6C:0A:F9:EB:16:DC:A2:BF:BF:AC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hbxg4mg4ew7bAr56xbcor-_rG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/Td-X_LHMcK8tXX2GLSOCn7dOfJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/8hbxg4mg4ew7bAr56xbcor-_rG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:d9:a6:c5:1b:27:d5:b3:1f:df:33:69:5e:ba:b8:7d:e6:09:
30:b9:26:57:98:0f:77:dc:d7:27:3b:bd:ef:a2:bf:af:3b:c8:
7a:e1:82:00:62:44:bd:99:67:13:24:04:a5:91:e3:43:05:c8:
7d:47:b8:b7:5c:06:7e:b7:66:59:9c:e4:e0:c3:a7:7b:79:c0:
68:bb:89:95:bb:9f:7c:ee:22:d3:7f:5a:bd:1f:70:24:5c:5a:
3d:51:ee:8e:97:ed:ac:a1:e0:dd:87:fe:a7:67:27:4b:70:34:
88:b5:fb:56:07:26:9a:01:ea:7c:a5:87:d6:19:26:70:dc:3c:
82:14:a4:00:1c:c4:73:61:e8:02:ca:73:0b:58:f5:16:eb:03:
6b:c5:10:49:e7:49:c8:06:e1:3a:56:c9:85:76:51:20:33:1c:
da:69:c6:ec:61:34:43:02:79:31:a4:75:0c:02:95:d6:42:28:
5e:37:66:5a:40:17:72:fa:5e:6c:f8:cb:34:bc:33:17:27:3e:
8e:75:c2:e0:dc:ce:a0:15:37:a2:eb:56:18:8b:38:ea:3a:4a:
76:4f:a0:fa:0b:0f:23:97:ed:8f:8f:54:3e:68:77:38:dc:bf:
e7:a9:ad:75:be:00:54:04:b4:39:26:e7:43:bd:03:84:10:92:
7c:d5:36:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY71w651WP1Z6jiTG2eUTpJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTZmMTgzODlhMGUxZWMzYjZjMGFmOWViMTZkY2EyYmZi
ZmFjNmUwHhcNMjQwNDE5MDk1MDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGRmOTdmY2IxY2M3MGFmMmQ1ZDdkODYyZDIzODI5ZmI3NGU3Yzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZeJxArvwGyI2JUZxxqK/0J/L1NV
KtTZ/x4uFqxuRt42MVHG45Tp+pVJPvzoP198aFnKKyUrL1zpm9FxRR+dvG7dnnUI
E9DKfxC853QsGqaX5Fq+eyGxM+L2Fvul+ZzKdBZLca6kRhPNJn7aq4DaM4VSV/5p
yg7G6rfJy5giC6kns+0/lZyGAIMR2XefsE8ewW6AP9yotJgzfS+ag61Zj69KH2G9
pPW/k+bB27mJLdlZcrBgL3GJD6pO2qDw4R/dqrr8agkrN5m/rP8a0fUMvzMu1ub9
MVFaYIEoitZJkMog60x/Mq7ExVw3n3SjsYDYm4FzfLWWMYr2nSFYOFN0SwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE3fl/yxzHCvLV19hi0jgp+3TnyYMB8GA1UdIwQY
MBaAFPIW8YOJoOHsO2wK+esW3KK/v6xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhieGc0bWc0ZXc3YkFyNTZ4YmNvci1fckc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jZjg4MTgtMGI3ZS00MGI2LWJjZWUt
ZmUzNzJhZmQzYmMzLzEvVGQtWF9MSE1jSzh0WFgyR0xTT0NuN2RPZkpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jZjg4MTgtMGI3ZS00MGI2LWJjZWUtZmUzNzJhZmQzYmMz
LzEvOGhieGc0bWc0ZXc3YkFyNTZ4YmNvci1fckc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG3ZpsUbJ9WzH98zaV66
uH3mCTC5JleYD3fc1yc7ve+iv687yHrhggBiRL2ZZxMkBKWR40MFyH1HuLdcBn63
Zlmc5ODDp3t5wGi7iZW7n3zuItN/Wr0fcCRcWj1R7o6X7ayh4N2H/qdnJ0twNIi1
+1YHJpoB6nylh9YZJnDcPIIUpAAcxHNh6ALKcwtY9RbrA2vFEEnnScgG4TpWyYV2
USAzHNppxuxhNEMCeTGkdQwCldZCKF43ZlpAF3L6Xmz4yzS8MxcnPo51wuDczqAV
N6LrVhiLOOo6SnZPoPoLDyOX7Y+PVD5odzjcv+eprXW+AFQEtDkm50O9A4QQknzV
NkE=
-----END CERTIFICATE-----
Generated at Fri May 9 20:50:28 2025 by rpki-client