Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Tx-nNzkEjPTbnjm84RuUgoHj8_A.roa
File: Tx-nNzkEjPTbnjm84RuUgoHj8_A.roa (raw, json)
Hash identifier: 7+Y1Jgo3f/PUQmcz2yktDIBxtEkngI6hxSbmjIE04/0=
Subject key identifier: 4F:1F:A7:37:39:04:8C:F4:DB:9E:39:BC:E1:1B:94:82:81:E3:F3:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B14D04D0F07FB757FFC58437F2E0181D9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Tx-nNzkEjPTbnjm84RuUgoHj8_A.roa
Signing time: Mon 09 Oct 2023 14:21:17 +0000
ROA not before: Mon 09 Oct 2023 14:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:d0:4d:0f:07:fb:75:7f:fc:58:43:7f:2e:01:81:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 14:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f1fa73739048cf4db9e39bce11b948281e3f3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:28:97:b4:9d:33:1a:ad:d7:4f:d8:a1:17:
a2:6f:13:b7:ae:53:ff:7a:c1:c6:f0:b3:2e:a8:c3:
0e:48:93:f8:b0:b0:10:77:2a:82:c8:8f:f9:f3:eb:
a4:24:4e:dc:1b:1a:f9:8e:df:10:e4:83:93:27:9d:
26:c6:78:1f:12:bc:b1:98:6e:1e:69:1b:b7:9b:60:
e6:8e:7a:82:d2:eb:22:7f:3d:9e:89:b4:29:49:49:
53:0b:48:c5:4d:71:a2:d7:53:51:fd:c4:08:82:1a:
8b:81:01:f8:b9:d3:f4:96:6a:c4:a5:05:3d:29:4f:
e3:c8:31:90:57:36:f0:9b:2c:08:5a:a2:8c:19:40:
d0:e4:88:e4:a3:7d:00:ea:13:08:58:de:fc:41:91:
6f:0c:13:fc:69:33:6f:dd:bb:cd:fb:da:aa:bd:8e:
05:0d:f0:45:54:91:c4:5c:d2:19:b9:43:eb:a2:47:
f5:89:a1:03:77:66:72:b3:f1:1f:19:1d:84:df:d8:
55:66:3c:f4:84:85:65:a5:09:ac:ef:22:91:c0:47:
68:f1:08:f4:7b:60:dd:40:3c:82:a3:65:d2:2c:89:
3e:9f:6d:87:25:94:58:87:64:f6:a2:ee:86:cc:a4:
58:69:dd:05:09:d6:68:c7:ef:ba:2f:c9:7d:6e:a5:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1F:A7:37:39:04:8C:F4:DB:9E:39:BC:E1:1B:94:82:81:E3:F3:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Tx-nNzkEjPTbnjm84RuUgoHj8_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:dc:a6:e8:38:f8:61:0d:b7:07:bf:81:11:7e:c6:8d:d7:b1:
a7:11:6b:07:52:6c:40:64:e0:48:ed:d7:a7:95:22:93:6a:ed:
d6:2e:5e:7d:8c:9d:8b:12:1f:c9:7e:38:21:9f:1c:bc:de:65:
76:f0:76:47:c9:86:5a:bb:2b:8e:a0:22:cf:2b:54:f8:a9:6c:
8b:c3:2a:fe:0f:af:4a:9e:4c:31:8d:2f:cd:1a:dd:0e:51:82:
1f:3b:93:2a:1f:2f:d5:32:63:ea:dc:48:59:ad:f9:3b:82:60:
78:64:84:37:0c:04:c8:8d:1c:ee:fc:3b:ea:7d:af:4b:fa:f2:
86:1c:33:b7:b7:6d:25:84:c6:7e:fa:b8:a3:a7:44:18:31:f2:
a8:4e:1e:fc:b5:1f:b2:f5:41:00:1e:8f:14:b7:12:83:c4:3a:
21:36:d3:84:1b:f6:58:b6:8c:f9:a7:75:3f:d5:5d:48:1e:2b:
2d:3b:5f:64:7b:0c:c0:ec:b1:c5:e1:ff:13:da:e6:3f:d4:87:
2b:8e:ef:e5:ba:b7:7d:a1:14:58:6f:76:90:7d:7f:65:83:7b:
3b:0a:c1:4f:98:e7:45:37:2e:4f:9c:3a:f1:80:27:4d:09:82:
b1:b6:93:f1:cb:22:18:49:67:0e:dc:ec:aa:00:8a:7a:96:f4:
28:6a:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:31:06 2025 by rpki-client