Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TCXjsSNFodArD5a9zZfxN3085UI.roa
File: TCXjsSNFodArD5a9zZfxN3085UI.roa (raw, json)
Hash identifier: /C5j2kv0hpqZ8hKLJqA9qYpt07/eLhIMmxeWD7618II=
Subject key identifier: 4C:25:E3:B1:23:45:A1:D0:2B:0F:96:BD:CD:97:F1:37:7D:3C:E5:42
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C24E1BFD0DC97938B55800204042E1DF2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TCXjsSNFodArD5a9zZfxN3085UI.roa
Signing time: Fri 01 Dec 2023 10:17:03 +0000
ROA not before: Fri 01 Dec 2023 10:17:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:e1:bf:d0:dc:97:93:8b:55:80:02:04:04:2e:1d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 10:17:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c25e3b12345a1d02b0f96bdcd97f1377d3ce542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:01:86:61:40:81:26:3e:00:2f:b5:a7:1c:
8e:20:ae:4f:7a:7a:f4:99:75:3e:c3:fb:01:00:cc:
69:95:a4:02:ad:95:e8:17:f6:e3:da:10:a7:d1:f2:
c6:4c:28:d4:d2:72:ca:4a:95:c4:02:29:c5:02:8c:
4b:6a:0c:7c:15:c7:03:5d:3d:b6:83:06:b4:5a:3b:
e8:81:2d:4b:77:f7:57:c8:b3:eb:e4:19:d4:78:3f:
3e:9d:e1:37:18:c9:92:a9:02:0f:d9:6d:1e:7e:d7:
39:1c:d1:9a:25:b9:d4:b4:b9:21:72:4d:03:8b:36:
3c:9e:0e:53:e0:2a:d8:3e:82:99:09:b3:40:b2:34:
3d:36:be:f2:5c:10:4e:14:64:bb:05:fa:fa:52:2a:
2b:8b:b0:2d:36:33:d4:e0:08:f2:15:eb:b6:01:0c:
83:60:4f:26:d6:98:98:55:ee:68:19:4f:a2:ab:66:
9b:ff:57:75:f2:2b:19:63:5c:25:35:54:32:ba:c0:
a6:0b:a9:67:65:b1:d7:c0:e5:18:cb:2b:49:c0:61:
07:8c:20:4f:e2:80:eb:55:48:43:71:b3:8b:d9:fc:
b5:bb:d7:f4:d4:a3:7c:ac:b8:18:e8:24:3b:63:11:
e8:d1:d5:53:b4:8f:65:2d:33:b7:cf:bd:b4:06:12:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:E3:B1:23:45:A1:D0:2B:0F:96:BD:CD:97:F1:37:7D:3C:E5:42
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TCXjsSNFodArD5a9zZfxN3085UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:32:d9:ec:30:67:0d:50:40:26:fd:c2:9f:c9:ca:c3:10:e3:
16:c3:5c:ac:91:b5:89:20:6d:7e:45:1e:34:56:c3:f5:2f:89:
8e:95:c1:b6:d3:8e:b3:33:6a:65:5d:ca:a3:a7:18:f8:95:97:
68:a7:93:09:3b:69:72:84:84:c2:6c:24:2f:cb:db:25:d3:12:
8b:84:75:0b:ce:09:73:06:4b:e3:5e:36:93:a1:05:d7:8d:fb:
73:eb:f6:e1:06:69:03:03:da:28:0c:81:bc:54:da:2d:db:09:
db:94:11:d4:88:42:e4:8b:70:3b:b5:a5:4b:98:98:2c:c3:53:
11:11:4d:56:a6:44:a7:60:74:fe:9b:39:fe:29:db:43:15:04:
dd:26:1a:aa:09:2f:6f:f8:bc:3c:ce:df:15:4b:79:bf:64:b3:
e3:9e:09:6a:27:94:fd:d3:e7:b3:2c:f4:33:7c:96:cb:c5:3c:
cc:a5:80:b0:e1:42:99:26:e9:19:0e:14:9f:c7:fe:5e:6a:b7:
e1:d0:e3:90:8b:00:9c:d5:7f:b4:79:e9:3f:71:c5:19:60:4a:
3b:82:be:ff:e6:59:50:43:f2:51:9c:54:87:2c:9b:1f:54:e6:
ee:61:7c:5a:9a:6a:e5:be:cb:26:3e:ae:f1:ed:ec:82:90:07:
24:e8:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:18 2025 by rpki-client