Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8TpsTNxTTJ9AvSmJyaMLGRwWnvU.roa
File: 8TpsTNxTTJ9AvSmJyaMLGRwWnvU.roa (raw, json)
Hash identifier: MRNbNMpm2deUIS1N/NNtdNb/6DrtUsSHUsc5PrD4DJk=
Subject key identifier: F1:3A:6C:4C:DC:53:4C:9F:40:BD:29:89:C9:A3:0B:19:1C:16:9E:F5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C35D44C7DFFBED26AE9DB8631F37922BE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8TpsTNxTTJ9AvSmJyaMLGRwWnvU.roa
Signing time: Mon 04 Dec 2023 17:15:54 +0000
ROA not before: Mon 04 Dec 2023 17:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:d4:4c:7d:ff:be:d2:6a:e9:db:86:31:f3:79:22:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 17:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f13a6c4cdc534c9f40bd2989c9a30b191c169ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:8e:33:24:6e:51:dd:65:7f:22:b6:6b:8f:
42:b9:e1:72:c2:0a:49:c2:c0:9f:6a:d5:66:20:9e:
05:e6:7c:64:a4:7d:12:b4:5c:28:1b:4d:82:5d:64:
7a:4c:04:42:d8:8e:72:1b:d6:fd:07:27:db:25:b7:
6f:80:44:37:08:5d:2f:81:38:de:fa:23:40:15:5b:
0b:c7:4d:4b:50:05:68:cc:cf:d5:7c:1b:d6:28:bc:
41:ff:f8:66:48:34:b5:dd:df:9d:98:9c:3e:58:b6:
f0:39:78:d1:2a:d0:d1:6e:59:af:07:27:ed:cc:27:
a6:25:84:ea:e4:77:26:81:3d:d0:48:5d:a0:47:f8:
13:9e:e6:1b:3f:62:c9:d7:87:15:17:6b:96:0d:8f:
5b:73:cd:31:9d:6c:e8:8e:42:3e:94:85:30:3b:62:
4d:04:2b:ae:5b:2d:6e:7a:09:39:f7:de:c6:f7:3a:
cc:ed:b9:2e:27:79:18:f5:4f:56:1c:1b:01:4c:da:
32:a5:bb:64:92:12:7f:8b:e5:9a:44:05:6b:4d:09:
89:f0:ac:8f:15:18:b3:58:9f:bd:91:1f:14:16:8c:
8c:e1:fb:2a:cd:11:73:8b:82:94:61:fe:95:fc:38:
34:0a:e1:7f:9d:4d:e2:69:13:2d:fa:54:3c:e6:8b:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:6C:4C:DC:53:4C:9F:40:BD:29:89:C9:A3:0B:19:1C:16:9E:F5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8TpsTNxTTJ9AvSmJyaMLGRwWnvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:74:3c:e7:e3:81:f1:fb:ff:e1:81:41:20:0d:4e:29:1e:ac:
05:d9:ad:15:7a:a8:ab:79:e5:6c:7e:20:87:ae:e9:d7:d9:95:
bc:ef:f3:e1:5a:d7:3d:63:28:a2:5f:50:b2:49:1b:cf:ad:b4:
ec:bf:fe:9d:0d:e1:3b:f5:02:1d:58:6d:21:87:4d:8c:44:b1:
58:48:bb:b2:9f:08:3c:02:e1:3c:41:c2:f9:e2:50:68:9e:7c:
70:ae:df:0b:31:46:6c:b0:a5:ba:ac:c0:8f:6e:0d:96:94:ff:
43:f1:7d:a2:de:ec:4d:5f:95:ed:1e:1a:db:d4:a6:0e:62:57:
ec:fa:55:06:55:ae:c6:8a:c0:2c:b5:a2:da:2f:b7:4b:a1:81:
ed:c6:da:d3:c0:8a:2d:fa:85:13:92:0f:0a:91:7f:af:7a:67:
dd:71:a4:c1:cf:d1:b3:e4:b2:1c:e5:b8:fb:c8:62:bb:f6:72:
50:54:19:96:37:4a:64:d0:c6:4e:78:ab:cf:86:05:d3:67:22:
31:1e:e7:f7:98:5b:70:b5:ff:93:1c:da:6d:39:24:b5:76:ab:
79:1d:1d:d0:07:d6:73:0c:45:00:2e:12:58:2f:5c:00:cc:84:
85:b8:37:b2:df:93:56:34:9b:5b:89:92:f4:d0:07:53:fe:6c:
0e:13:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:01:57 2025 by rpki-client