Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TwmayW6tOYKK3GbRb0ekZzeOlZw.roa
File: TwmayW6tOYKK3GbRb0ekZzeOlZw.roa (raw, json)
Hash identifier: D25K4aQqBp94hCkV5RMIlGaJt1BnkrgSaxDd+habX7A=
Subject key identifier: 4F:09:9A:C9:6E:AD:39:82:8A:DC:66:D1:6F:47:A4:67:37:8E:95:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1619E96FD89B99EAD1200B37435F5346
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TwmayW6tOYKK3GbRb0ekZzeOlZw.roa
Signing time: Mon 09 Oct 2023 20:21:18 +0000
ROA not before: Mon 09 Oct 2023 20:21:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:16:19:e9:6f:d8:9b:99:ea:d1:20:0b:37:43:5f:53:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 20:21:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f099ac96ead39828adc66d16f47a467378e959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:a4:71:3a:9f:c1:cc:09:dd:e8:a1:cf:45:
24:07:1a:3f:c8:f4:98:1e:9a:6a:db:2b:a1:e9:7e:
54:50:8a:e4:83:1d:3f:e1:1d:f8:72:35:ce:62:84:
fd:01:8e:65:c3:7c:aa:85:e6:77:1c:77:de:38:e3:
8f:dd:72:f7:97:59:0a:30:28:6d:f3:a3:a3:c6:c6:
8b:e4:26:d5:bb:57:63:4d:2a:3b:ec:83:39:e6:dd:
e3:fc:69:b1:c2:75:96:dd:11:cf:22:a7:00:b8:06:
d9:e8:46:15:d7:6e:52:cf:79:b7:59:5c:90:4f:42:
d6:a7:ef:d6:d8:6c:1e:df:7d:1e:ce:8b:cb:60:9f:
af:ed:cc:1c:36:ca:11:af:73:32:ce:1c:2e:b4:b4:
51:11:14:48:8d:f8:e6:ac:57:e9:d4:88:59:5d:92:
7d:70:2b:11:7c:82:34:76:75:dd:3b:2d:d9:e8:9a:
a3:63:9a:9a:d3:d3:3a:62:3c:8c:02:45:53:a4:62:
a5:a9:9a:3a:4b:49:93:a2:00:f1:4c:d4:c9:16:40:
81:59:c8:e4:91:3b:7f:1e:9a:c7:6d:15:f9:fe:b5:
6f:1d:0b:eb:82:c0:50:e2:8b:8a:e6:9c:1a:49:23:
1b:ae:fc:e7:dd:51:75:5c:44:a7:2b:a3:e7:bb:0f:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:09:9A:C9:6E:AD:39:82:8A:DC:66:D1:6F:47:A4:67:37:8E:95:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TwmayW6tOYKK3GbRb0ekZzeOlZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:45:15:95:0a:a7:26:5f:20:22:1d:a9:57:ed:a6:03:07:03:
a9:e2:92:66:37:7a:1c:13:17:96:30:d1:21:b2:f6:a7:41:f6:
db:49:3d:e6:6a:7a:53:c4:d0:60:40:e3:9c:b9:06:5e:b9:64:
cc:ba:47:bc:9c:6c:68:4b:62:5d:6a:23:cb:f7:02:b5:a0:55:
b9:e0:fd:d4:d3:43:74:f6:66:f2:c1:79:ca:15:4b:58:15:7c:
78:7c:72:0f:d5:d8:70:f9:c9:8e:56:22:59:3e:df:46:d5:64:
a6:de:48:c1:d8:82:27:32:5d:4a:1e:00:3f:d8:08:ba:ce:71:
51:b2:e7:f6:b5:74:c3:71:16:75:0b:d8:08:c8:c6:01:a2:1f:
d4:38:af:a4:c6:86:1f:fc:0f:4f:ef:64:ac:9a:79:2c:51:d3:
17:45:87:ad:55:8f:01:44:08:e1:d6:f9:01:fc:07:98:20:25:
50:91:cc:7f:29:e4:e1:6a:8f:b4:45:ae:be:e0:47:7e:71:14:
20:a6:23:10:74:5b:9f:5a:32:20:20:17:1b:80:b0:dc:d5:70:
74:cb:84:11:30:e6:b0:f1:a3:84:44:8b:6e:df:a3:9a:79:ed:
0f:0f:c0:a5:a3:43:94:ba:2d:69:6f:ad:06:b2:2f:6f:5d:5c:
07:0d:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:50:23 2025 by rpki-client