Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T12OHjzRPNraSE8kzsIjEP4NoDE.roa
File: T12OHjzRPNraSE8kzsIjEP4NoDE.roa (raw, json)
Hash identifier: OoV15NTxeNNmxoa9M+oZCzvCDlSruDHoawLfaJT9tdM=
Subject key identifier: 4F:5D:8E:1E:3C:D1:3C:DA:DA:48:4F:24:CE:C2:23:10:FE:0D:A0:31
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1261FF97D4B91F576D965F41DE1937DC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T12OHjzRPNraSE8kzsIjEP4NoDE.roa
Signing time: Mon 27 Nov 2023 20:04:21 +0000
ROA not before: Mon 27 Nov 2023 20:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:1261:dc9b/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:61:ff:97:d4:b9:1f:57:6d:96:5f:41:de:19:37:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 20:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f5d8e1e3cd13cdada484f24cec22310fe0da031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:74:d7:3d:3e:f1:df:c4:32:8c:a8:8e:5a:
f4:b8:db:13:a0:ba:a7:a1:c4:f7:75:9b:a8:af:a4:
23:d1:93:5f:8e:e8:8a:71:40:ed:9f:8a:3e:56:1f:
a5:6e:18:46:aa:3d:a3:97:f8:e2:6b:b6:a4:79:97:
1c:cb:66:15:12:e9:3a:27:3f:f1:22:24:45:d0:1f:
0d:67:b8:85:97:3d:e0:85:98:47:be:f6:74:14:3c:
90:2e:ac:1e:e3:93:26:70:17:32:3c:ee:88:13:e3:
50:42:b0:0b:8a:54:a1:3e:d8:b0:24:f7:94:9f:71:
35:97:58:00:89:95:7b:44:72:b5:49:db:00:b9:ee:
8b:49:8c:92:54:19:da:dd:99:4a:19:02:38:ab:9a:
1b:9b:d4:62:e0:c8:2a:29:0f:af:6a:1f:34:c8:04:
49:bf:0a:4a:46:d0:23:4d:27:15:9a:66:32:c1:b9:
88:0b:90:ee:68:8b:a0:02:00:87:12:c1:ab:15:02:
b4:69:65:9b:ee:47:3e:05:50:3e:56:09:e5:67:2b:
1a:90:d2:b3:05:c7:0a:2d:4a:b0:f0:6f:59:19:9f:
3a:7f:64:13:e5:c5:93:80:bb:86:8b:be:dd:8f:5e:
fa:b7:75:84:45:2a:76:5f:3a:f5:bc:51:88:98:ac:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:8E:1E:3C:D1:3C:DA:DA:48:4F:24:CE:C2:23:10:FE:0D:A0:31
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T12OHjzRPNraSE8kzsIjEP4NoDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:2b:5c:4d:75:55:c3:4a:4e:6c:2b:2a:95:2e:ef:ed:ad:87:
fb:d0:bf:da:29:4a:3d:21:c5:3d:c4:f9:c4:7a:7c:87:e6:b6:
3e:31:b1:08:db:27:96:f8:8b:aa:71:8a:aa:87:d0:34:c1:80:
39:e0:d2:2d:22:8e:70:b8:7b:6b:65:bb:eb:d6:5d:18:7a:2f:
83:3d:81:f0:69:c5:f2:a7:0b:31:8e:48:fd:e2:f1:0c:4a:77:
61:cf:ea:78:52:3f:f4:b1:ef:ed:d3:3a:b1:bc:0d:50:1f:2d:
62:8e:f3:ac:04:8e:90:82:d6:82:42:8e:33:cc:06:44:a8:b9:
f0:72:f9:05:83:a4:3a:88:1b:3a:92:ef:16:87:e5:c9:be:24:
9c:39:b9:6e:8a:fe:b1:4c:e1:04:d1:8a:e0:fc:02:c4:a5:7b:
23:a5:6f:02:9c:93:c8:20:8b:b5:54:0b:9c:1f:fc:ea:67:e6:
73:b1:a2:f6:12:d5:24:5d:cc:6e:5c:23:eb:1f:8d:25:8e:cb:
5d:46:60:da:48:79:0c:c9:26:58:42:2e:d2:cb:5b:68:c0:52:
2a:04:8f:74:01:6b:9e:6e:be:e3:df:07:51:57:2f:e2:ee:1b:
30:cb:17:e4:6c:cb:61:47:7a:af:a0:4d:35:7c:85:a6:e7:09:
7b:7b:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:49:59 2025 by rpki-client