Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ta6FYlvf28IWFu2kWEt0ykxwFdU.roa
File: Ta6FYlvf28IWFu2kWEt0ykxwFdU.roa (raw, json)
Hash identifier: qf1pBiM1IVdnczFUHZ8RYGwXtM3m7X5Fg2P28AM4eqc=
Subject key identifier: 4D:AE:85:62:5B:DF:DB:C2:16:16:ED:A4:58:4B:74:CA:4C:70:15:D5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFE06D0E851D2BA49F35086CBD87465CA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ta6FYlvf28IWFu2kWEt0ykxwFdU.roa
Signing time: Thu 23 Nov 2023 21:12:21 +0000
ROA not before: Thu 23 Nov 2023 21:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:06:d0:e8:51:d2:ba:49:f3:50:86:cb:d8:74:65:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 21:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dae85625bdfdbc21616eda4584b74ca4c7015d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:9f:cb:d5:82:26:bf:38:0f:6d:1c:54:b6:
d7:49:56:6a:5e:9c:c5:7f:aa:96:f6:2a:74:e8:02:
1c:45:5a:89:88:eb:3a:89:5c:b3:d8:95:b7:f0:88:
66:62:69:f2:d6:26:e6:13:a8:d5:f1:12:76:4d:3b:
97:e9:63:91:64:3a:e4:2e:24:7b:80:af:60:68:ab:
4d:c5:86:fc:9f:80:2f:40:a7:0d:8d:f6:9e:01:9f:
c1:1e:f7:96:95:9a:3e:9b:76:1b:23:6d:19:78:cb:
c5:bd:ad:cd:c2:6f:ce:55:c1:18:f6:c2:79:d7:c0:
c3:71:20:0f:18:52:b1:1b:8b:ce:9d:42:47:d1:09:
58:2c:9c:95:87:9a:ab:b6:9c:a5:a2:7c:b8:e1:94:
d0:43:a1:a0:23:40:d1:82:e0:ee:ca:c2:e9:92:c2:
c1:e3:42:1b:9d:17:9a:86:8b:ee:4e:82:20:6f:93:
ac:a4:ef:de:a2:6b:bd:59:59:78:74:ce:4d:67:10:
ac:d6:41:33:4b:85:84:66:be:a4:38:63:b4:de:ab:
7f:da:78:0b:d2:bf:e5:35:2d:f0:de:dc:0a:b6:ce:
0c:a7:26:72:5c:26:c8:d7:6a:1c:81:59:86:11:d9:
74:49:ba:de:7c:d2:8b:90:3a:05:0b:89:aa:ff:ff:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AE:85:62:5B:DF:DB:C2:16:16:ED:A4:58:4B:74:CA:4C:70:15:D5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ta6FYlvf28IWFu2kWEt0ykxwFdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:6d:3e:35:9b:f2:06:63:ac:b6:ff:f2:14:b5:5c:d7:2e:5f:
78:25:7b:8f:50:4a:43:5a:83:e4:0b:af:a3:a1:b0:f5:73:76:
5d:5e:14:63:37:b5:0c:c1:ec:b8:9c:da:19:9a:8d:6d:7e:f5:
2a:b7:28:76:1d:d1:33:ba:5c:98:91:96:5c:b6:b6:8a:48:4b:
40:75:6b:bf:81:d7:ab:45:93:eb:c5:d3:13:94:da:04:e8:8b:
5e:a2:1b:37:70:ad:63:6f:9e:0a:14:19:52:f7:c1:29:63:99:
72:e7:10:db:2b:bf:35:3b:df:a9:40:3f:68:be:61:e8:c3:f1:
50:7c:84:43:4b:fe:f2:84:8c:0f:30:e4:c0:01:99:eb:da:dd:
27:aa:98:65:18:8d:c2:bc:8d:c2:27:4a:6b:89:51:17:55:5e:
79:2d:e3:37:6c:7d:4f:72:2b:2e:de:df:f3:37:68:e4:cd:9c:
da:cd:77:ff:32:d5:4e:e3:04:06:05:a0:a7:5f:ba:6c:4e:4c:
4a:1b:dd:5e:80:64:c7:c2:8e:72:73:32:15:c7:aa:00:99:79:
43:de:1b:7d:3c:52:45:66:87:cb:99:cf:df:8b:c7:90:d8:fb:
76:2a:0b:db:35:8e:12:70:8c:f5:ef:50:c4:19:b9:47:6a:fd:
10:90:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:59:29 2025 by rpki-client