Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TA6QIjE7vDyIIMUSit9wVuIw3Dw.roa
File: TA6QIjE7vDyIIMUSit9wVuIw3Dw.roa (raw, json)
Hash identifier: c3xLyiV7wFv5WQtFG8dHNg0hW/o6qGIg4HGJmdT3r2k=
Subject key identifier: 4C:0E:90:22:31:3B:BC:3C:88:20:C5:12:8A:DF:70:56:E2:30:DC:3C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C74727186B49FD6D475B13BF75C41F0ED
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TA6QIjE7vDyIIMUSit9wVuIw3Dw.roa
Signing time: Sat 16 Dec 2023 21:05:06 +0000
ROA not before: Sat 16 Dec 2023 21:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:7471:8863/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:74:72:71:86:b4:9f:d6:d4:75:b1:3b:f7:5c:41:f0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 21:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c0e9022313bbc3c8820c5128adf7056e230dc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:f4:ce:01:ce:7f:d6:b3:6d:9b:54:ef:19:
0a:8c:fc:f6:18:9f:c6:cd:4b:bd:0f:7b:6e:e9:af:
6d:b5:f0:85:97:d9:eb:ae:82:54:b2:66:1e:8a:1d:
05:70:62:7a:6b:e2:4f:12:11:c4:6b:1b:99:be:a5:
fe:73:04:e1:e9:05:4a:1f:6e:c6:a8:66:66:bb:53:
15:9d:a4:58:66:6d:8d:4e:b4:88:4b:9b:11:cf:72:
20:38:38:52:e2:9c:40:7c:01:f2:d9:f5:17:bb:76:
9b:b5:ca:f3:15:25:23:be:ce:8d:35:75:63:3e:ff:
3d:50:f7:5e:29:74:5e:cb:b1:81:16:92:20:a3:8b:
f4:6c:e3:2e:f0:c8:98:43:3b:1c:b5:a1:c1:59:51:
6d:a1:84:ba:7a:86:b2:b9:15:b2:00:c9:aa:5f:62:
26:4a:a7:7c:98:82:e1:36:7b:8b:da:8c:4a:ff:3f:
d4:be:09:03:5c:69:4e:7d:8c:fe:d3:3d:e2:5f:97:
0f:21:52:ed:15:b0:f9:a3:39:24:25:89:2a:73:7f:
a9:53:fb:60:e7:4f:38:c7:fa:e1:21:2b:e8:4b:c5:
90:b5:15:e7:b0:eb:dc:0c:f7:d2:9f:be:54:2b:cf:
d7:ce:55:bf:02:5f:28:be:ca:ee:ea:c6:8a:fa:36:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:90:22:31:3B:BC:3C:88:20:C5:12:8A:DF:70:56:E2:30:DC:3C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TA6QIjE7vDyIIMUSit9wVuIw3Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:bb:7c:e1:c3:f1:08:b9:0a:59:b8:b4:e2:2a:8f:6d:31:5b:
bc:49:b5:9e:7e:ad:60:d2:b0:53:95:c2:6e:3c:12:40:83:c2:
c8:53:4d:57:78:9d:6f:5a:69:e8:03:52:c2:6d:fa:0c:d0:a8:
ca:c4:cf:27:b5:20:09:1e:ce:88:f8:a3:48:2f:9c:9a:f9:f1:
5a:39:24:f4:c1:f3:11:f4:a4:68:15:d8:12:c3:05:f7:da:f1:
a0:32:f9:8e:70:3b:09:5c:d2:8e:26:5d:c5:9f:a4:90:f9:7f:
92:63:67:54:cd:07:e7:3b:bc:cb:7b:20:9a:eb:ee:96:5b:93:
0e:10:61:57:fa:f5:01:a0:d5:fc:c3:1c:05:74:bd:eb:90:30:
37:a2:17:90:ae:c9:a9:2c:10:46:86:0c:f7:67:7f:4e:99:57:
69:d1:5f:70:1f:1f:25:c3:5a:b0:95:48:20:87:4d:a4:6d:d3:
6b:4d:63:8b:cd:cd:e2:b6:a4:dc:30:ad:b5:ca:51:76:8a:7f:
62:94:6f:cc:8c:d6:19:eb:2a:21:e1:16:4f:9c:a3:72:ec:a0:
df:9d:9d:d0:7f:8e:33:72:a0:69:18:ad:c2:f9:60:85:54:68:
1c:d5:73:54:b1:15:c4:6c:90:68:ae:62:23:13:bf:81:ea:74:
5b:d2:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:30:19 2025 by rpki-client