Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DGLuqCbHBYkErhpYmSg-TISEO-4.roa
File: DGLuqCbHBYkErhpYmSg-TISEO-4.roa (raw, json)
Hash identifier: B+0Cj/KXSg+6wTfflfVSO1xBlWLOrYjBiCiMt3Xuh5Y=
Subject key identifier: 0C:62:EE:A8:26:C7:05:89:04:AE:1A:58:99:28:3E:4C:84:84:3B:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2028F054BF06C57A1E94634A5ADE261B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DGLuqCbHBYkErhpYmSg-TISEO-4.roa
Signing time: Wed 11 Oct 2023 19:13:55 +0000
ROA not before: Wed 11 Oct 2023 19:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:28:f0:54:bf:06:c5:7a:1e:94:63:4a:5a:de:26:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 19:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c62eea826c7058904ae1a5899283e4c84843bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:88:31:b6:42:05:c0:55:0d:b8:c5:83:ef:
82:bc:cd:eb:79:e3:de:37:7c:66:9f:91:dc:26:dc:
80:66:58:36:68:e7:0c:04:61:8d:3b:71:5f:3f:b6:
7d:6d:90:ad:10:cc:d4:1f:10:f8:4a:94:8b:94:13:
db:42:ca:1c:eb:9a:4a:83:96:e1:d8:9b:1f:45:6c:
e5:47:29:c9:fd:bf:06:38:25:8a:e7:df:74:de:65:
23:68:f2:fd:93:de:cf:34:92:23:72:de:6a:de:38:
a5:a1:fb:1d:ed:5f:b3:5a:2b:36:f6:6e:e5:62:99:
02:d3:ff:7a:66:0c:9c:e5:53:4f:ee:4b:6f:85:ad:
47:0c:aa:0d:b0:5a:b5:4b:55:e7:10:d6:93:09:a6:
c0:5b:6d:ed:fd:12:15:07:dd:73:1e:f3:3e:9c:94:
57:eb:a8:0d:61:c1:87:c7:16:c4:44:05:7b:87:b9:
85:b8:e9:e4:b0:b8:e9:eb:ef:c3:20:05:2c:57:2c:
7d:6d:97:cb:3b:87:31:6a:5e:5f:60:4f:fb:0d:fb:
c0:35:f5:d2:8e:57:60:e0:33:b9:9c:49:d5:ac:5d:
dc:3e:3c:45:0e:e3:2d:17:7f:cf:25:25:a5:3d:55:
b7:77:bd:6b:32:63:32:65:e2:e7:b8:3e:58:a6:9a:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:62:EE:A8:26:C7:05:89:04:AE:1A:58:99:28:3E:4C:84:84:3B:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DGLuqCbHBYkErhpYmSg-TISEO-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:fc:77:20:de:19:df:f8:c6:35:68:18:e7:ad:95:fd:0e:b4:
b2:71:15:16:f5:c5:23:e6:21:b9:6c:1c:36:62:fc:cb:3f:94:
c9:73:59:b1:02:a6:95:3a:59:2e:47:3a:33:9c:36:d1:87:70:
c0:0c:85:6c:e2:0d:4f:93:f1:f0:5f:4e:0c:95:01:ac:88:91:
61:18:2c:78:a4:8b:2a:1f:c2:d6:47:5d:08:72:9c:1e:fb:18:
aa:b2:17:43:35:3f:11:28:c3:8b:4a:f5:64:94:98:16:5a:66:
74:6b:06:2d:e3:50:d5:2e:42:1c:3f:9c:d2:97:93:e3:7a:f3:
3f:e2:0e:d7:52:81:82:bf:3f:7e:eb:60:a8:6b:25:d2:4a:3f:
09:15:4d:72:f0:00:41:6a:5a:84:37:64:e8:2a:f6:69:c2:fd:
ea:af:ff:e3:2a:28:ab:6d:32:67:bb:88:34:81:e4:b8:cf:23:
7c:80:70:35:76:81:bc:ce:22:b6:2a:e8:86:a0:55:35:4b:af:
9d:85:96:ec:bd:20:e9:6c:2b:a6:8e:5f:7c:35:d3:17:9f:02:
12:35:21:33:49:e3:5b:14:92:1e:fb:62:6a:fe:e5:b7:a9:2e:
6b:3a:de:7d:f8:57:bd:92:74:df:c2:24:d9:83:7c:b7:e7:19:
4e:15:e6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:27:53 2025 by rpki-client