Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TvIdbgapRobFSCHJRVGjMs2b2Q0.roa
File: TvIdbgapRobFSCHJRVGjMs2b2Q0.roa (raw, json)
Hash identifier: VhaC3F3ALEKUf/qiHDCLEv1yNsZEVYmvydWa0SLVJGA=
Subject key identifier: 4E:F2:1D:6E:06:A9:46:86:C5:48:21:C9:45:51:A3:32:CD:9B:D9:0D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C62077A30A2A83B15FD7E2FF0A4D57362
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TvIdbgapRobFSCHJRVGjMs2b2Q0.roa
Signing time: Wed 13 Dec 2023 07:15:06 +0000
ROA not before: Wed 13 Dec 2023 07:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:07:7a:30:a2:a8:3b:15:fd:7e:2f:f0:a4:d5:73:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 07:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ef21d6e06a94686c54821c94551a332cd9bd90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:78:68:29:37:fe:88:c7:d6:c4:a8:07:bd:
65:42:0e:7c:fe:eb:f6:eb:95:91:9b:0f:fd:de:8b:
9e:b1:35:04:28:7f:f2:96:9d:09:06:e7:b2:ce:5b:
20:c8:88:45:14:b2:fd:4e:31:af:cc:55:25:fa:75:
ca:3f:23:fc:49:a7:fe:38:85:56:06:85:c3:5d:3c:
b5:6e:bf:3d:12:39:99:7f:90:01:5a:e8:e6:82:f6:
bb:71:23:76:cb:9a:84:03:85:60:ff:fa:c0:a1:26:
62:4b:ba:06:08:45:95:4a:e1:9b:9c:86:84:da:4d:
eb:98:8b:09:f0:22:96:92:53:3b:0e:68:2a:84:e6:
b2:28:5e:ca:e3:18:ff:c8:6f:d0:b5:a5:47:e9:b1:
27:6a:58:84:30:dd:86:74:04:0a:e0:57:59:7f:df:
7f:f4:9e:ed:77:f6:4d:52:d3:6c:e1:e3:13:2a:d4:
1a:e6:ef:5c:70:9c:ae:4c:bc:44:59:e0:5c:f3:ef:
d8:71:3b:41:66:eb:ef:5c:08:cc:3b:8f:e2:2c:76:
c3:a3:d2:24:03:40:a9:0d:d7:fa:94:8c:40:82:42:
61:94:58:d6:76:34:2b:8d:9c:73:f5:af:3a:92:66:
ca:eb:e9:77:5e:65:63:38:b7:20:70:fa:c7:bd:f1:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F2:1D:6E:06:A9:46:86:C5:48:21:C9:45:51:A3:32:CD:9B:D9:0D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TvIdbgapRobFSCHJRVGjMs2b2Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d1:92:85:23:56:31:9b:ff:79:70:aa:2d:4f:6b:72:c9:15:76:
43:b0:ff:fa:fb:b0:1c:c1:0d:ba:cd:60:cf:1f:59:97:91:72:
d0:ef:06:bf:e5:f2:56:98:a4:9f:c2:b3:24:55:9b:f3:31:82:
65:e5:c3:5e:85:a7:fe:0f:4f:cc:22:0a:da:73:ab:02:ab:59:
44:da:c8:6d:b9:c6:c8:9e:5e:94:a6:e4:fe:c8:22:1c:68:9f:
aa:a2:c9:7a:a8:69:39:f5:75:a1:31:96:4a:e5:cc:fb:c5:96:
3d:bf:ac:be:03:d4:0d:42:cd:eb:de:c0:11:ca:bd:34:86:ed:
db:23:1a:45:24:e6:3e:86:6d:ea:b1:30:7d:0f:8f:a3:10:77:
10:5d:a7:33:c9:02:31:f6:f0:29:48:fc:23:93:ce:87:35:21:
15:1a:96:8e:fb:10:f0:9e:c4:3b:65:0c:1a:e9:49:c3:23:13:
84:f3:75:52:79:3d:6f:6b:6a:fe:80:f0:5b:b6:45:da:be:12:
1f:cd:d0:63:33:d6:8c:32:12:4a:17:f4:87:a6:8e:45:35:c1:
d0:41:8c:3d:c7:ec:44:e6:1b:e4:3d:76:76:17:65:0f:2d:96:
35:9c:96:7e:d0:59:49:f5:bf:88:80:d8:e3:75:61:fc:1f:9f:
64:91:c5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:36:43 2025 by rpki-client