Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TAuzm7Knfv8-3_KmX4vtpKd982A.roa
File: TAuzm7Knfv8-3_KmX4vtpKd982A.roa (raw, json)
Hash identifier: /hpar78TdQ+8LhWw7KOjK5CYNBdA8zUxPlOwnuu80Bk=
Subject key identifier: 4C:0B:B3:9B:B2:A7:7E:FF:3E:DF:F2:A6:5F:8B:ED:A4:A7:7D:F3:60
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACB685992054A491F455B523E9281C3DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TAuzm7Knfv8-3_KmX4vtpKd982A.roa
Signing time: Mon 25 Sep 2023 08:15:28 +0000
ROA not before: Mon 25 Sep 2023 08:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:68:59:92:05:4a:49:1f:45:5b:52:3e:92:81:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 08:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c0bb39bb2a77eff3edff2a65f8beda4a77df360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a9:c9:ae:bd:f5:0a:a1:81:bf:ef:99:a4:6c:
74:0e:ef:e0:f3:91:40:9b:0f:f1:32:a6:66:64:30:
d3:2e:f9:1b:d2:b0:df:e0:fa:a4:f4:14:b5:44:31:
80:ff:41:31:67:4b:fd:a6:91:15:04:11:84:bc:44:
24:b0:ec:ae:2d:22:3f:20:d9:56:13:b8:b1:59:91:
e1:99:cb:46:4f:64:73:eb:03:62:c5:85:e7:19:85:
6c:16:8a:30:01:6b:b3:b0:f0:b9:b8:6c:3c:a7:03:
2b:c8:53:25:43:4e:8b:1d:2e:2d:2f:66:21:2e:15:
b0:c5:7d:94:c6:91:c0:b2:07:f6:2f:34:78:17:a9:
c8:ee:30:97:3e:8b:0d:6d:a1:65:bc:6c:16:a7:17:
67:91:57:52:5d:04:3b:19:b2:65:e4:c0:c4:03:41:
f5:5e:9f:17:f9:1f:2d:02:fc:ca:01:b5:09:fe:e0:
4b:9b:35:17:0f:34:c7:0e:ac:a3:ac:e5:8e:96:8d:
ed:66:91:84:5c:7f:3b:2c:4e:9e:2d:23:13:49:22:
66:7e:f4:7e:c2:5c:5f:d0:e9:5c:7e:53:2c:a4:87:
4e:40:64:74:91:34:47:cf:82:a0:1a:6e:e3:38:a3:
2e:3c:1d:5b:e4:17:86:2b:10:8f:00:2e:69:c9:76:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0B:B3:9B:B2:A7:7E:FF:3E:DF:F2:A6:5F:8B:ED:A4:A7:7D:F3:60
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TAuzm7Knfv8-3_KmX4vtpKd982A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:80:07:fd:8e:10:86:1c:c4:f9:cd:d4:73:a3:ab:ec:64:f5:
b1:ed:be:da:0d:1b:38:7e:a2:31:17:81:06:fe:6c:5e:48:da:
6a:e2:5a:a8:03:46:18:c4:ab:f4:b0:05:da:5c:ea:f1:23:78:
a2:d1:a4:73:bb:4d:d3:2c:73:f1:b5:9b:79:6c:58:47:96:25:
1f:e3:ac:bf:49:d1:dc:c7:15:1e:aa:ee:bb:9e:b9:d0:3c:ea:
e5:6a:eb:0b:2b:b7:1b:9e:0a:fc:8c:c2:c9:12:26:d8:23:62:
1f:55:f5:4c:5c:ae:f0:f8:fa:21:2a:90:b4:b6:ba:7c:e1:a6:
a6:70:1e:b7:1b:6c:33:31:a4:9a:99:6d:f7:fe:97:00:d1:1a:
00:fa:83:4d:d7:07:8f:2d:39:ae:6f:f7:63:55:64:bc:e8:c2:
44:8e:4a:a6:d3:5d:85:53:e1:5d:fc:61:1f:c1:f7:80:4f:6e:
8a:20:d9:36:d0:ff:c0:ec:51:0b:73:ce:f3:65:e7:dd:19:d1:
1a:4a:ef:9d:c9:c8:2b:c6:93:9b:79:5a:96:5c:85:9e:86:5b:
b3:7c:c7:44:4a:7a:9e:2b:b4:a5:d2:20:da:74:7c:86:88:c2:
04:34:33:ef:4b:bd:2c:59:26:b5:2f:65:35:0e:57:f4:bd:89:
7d:97:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:55:18 2025 by rpki-client