Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TaM4NNDBE0N5xXwPSCeN_PeAB-4.roa
File: TaM4NNDBE0N5xXwPSCeN_PeAB-4.roa (raw, json)
Hash identifier: Usb2By/6DyeUT6lCl+0W4DK8zN07iZiEDkWLoXqXsDk=
Subject key identifier: 4D:A3:38:34:D0:C1:13:43:79:C5:7C:0F:48:27:8D:FC:F7:80:07:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD8B3597F7108661FA56ADE9E5BA39412
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TaM4NNDBE0N5xXwPSCeN_PeAB-4.roa
Signing time: Wed 27 Sep 2023 22:12:27 +0000
ROA not before: Wed 27 Sep 2023 22:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d8:b3:59:7f:71:08:66:1f:a5:6a:de:9e:5b:a3:94:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 22:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4da33834d0c1134379c57c0f48278dfcf78007ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:37:6b:4e:f5:e1:0a:ef:e6:82:57:41:1d:
01:7a:d3:41:8b:26:44:c9:4c:a6:6c:97:0d:2c:e4:
2c:b6:0c:87:27:dd:e2:01:87:44:d6:f7:68:93:29:
66:c3:a3:d2:07:fc:71:e4:6f:72:4b:0b:a3:cf:b7:
70:ed:0c:73:9e:5b:43:91:34:84:32:47:62:bc:07:
a0:ca:2d:b4:d4:ad:71:ce:9b:8e:d5:da:fe:0a:ef:
9b:a3:ba:68:7e:cd:f2:cf:69:68:f1:b9:08:a8:b5:
c1:e6:cf:78:38:d1:e3:58:b7:eb:0b:a1:ed:89:6e:
cb:44:55:34:32:82:f7:6e:4b:28:50:1f:ca:35:f5:
91:80:1f:bc:bb:09:ca:9b:67:c8:2a:7f:a6:3d:53:
ee:76:ca:e8:6c:d7:13:fb:3f:3f:ee:d2:09:2f:7c:
33:5b:3f:b6:fa:b1:5b:bc:18:61:f2:06:e6:32:c9:
03:b4:e9:57:0d:ab:69:49:fb:09:a5:0c:60:c9:74:
f3:a4:6e:72:f1:ae:df:9f:52:ee:d2:c4:0e:26:9b:
e7:cb:b1:aa:c9:c7:f9:d3:6e:03:ae:2b:c7:52:13:
c9:4c:4b:f5:ae:d1:f5:01:25:e3:b7:0e:ee:ab:c8:
a1:a5:6f:7f:e6:8d:cf:95:28:a4:f8:dc:b3:7b:32:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A3:38:34:D0:C1:13:43:79:C5:7C:0F:48:27:8D:FC:F7:80:07:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TaM4NNDBE0N5xXwPSCeN_PeAB-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:b2:8c:7a:23:cb:22:9a:35:0d:0d:0f:09:2f:15:77:46:0e:
eb:09:31:32:83:09:53:75:59:99:05:55:4f:42:76:b2:27:4a:
f3:21:df:e9:fb:c0:ec:5c:61:71:a9:a2:f9:8c:2c:20:e2:35:
7d:c8:77:38:77:25:2a:45:ec:55:8c:62:d8:6f:92:42:65:ad:
e7:d0:5f:77:f2:9b:38:41:bf:59:a7:81:58:03:f5:41:fd:e2:
90:ce:25:c7:f9:e9:8b:a4:66:23:ae:c8:06:5e:70:04:6c:65:
61:35:22:8e:73:1f:02:9d:db:b3:c5:1e:38:2d:f9:fa:a3:28:
9f:c4:3b:60:d9:77:7a:bf:c0:b3:d2:d0:cb:47:2a:24:58:81:
37:39:24:d0:f9:d4:be:16:f7:8b:26:26:f2:cc:56:9c:c9:5c:
01:c7:e8:df:a8:49:2f:aa:1f:2f:7f:a8:73:50:53:15:0c:f5:
a3:ed:42:5f:50:9f:3e:f3:40:4c:c6:f7:96:0e:40:b3:61:83:
09:f5:ef:b7:e6:49:59:45:10:d2:2b:f1:6c:d4:11:42:80:9e:
75:8a:5a:88:f9:f4:61:68:86:4b:e2:bb:fa:1b:47:28:9c:ee:
12:f5:c4:25:08:26:15:8e:23:3f:28:1e:5e:7b:56:ca:0b:5c:
11:95:c3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:16:55 2025 by rpki-client