Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Tnht8X7ksuqMNZrnKWCTgrNHKg.roa
File: _Tnht8X7ksuqMNZrnKWCTgrNHKg.roa (raw, json)
Hash identifier: Y68NMJ8S3zVY5lhxJ+2TuRD6nHn7V6EpVlukXujSEVU=
Subject key identifier: FD:39:E1:B7:C5:FB:92:CB:AA:30:D6:6B:9C:A5:82:4E:0A:CD:1C:A8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6FC144C2A622C8E710C2D826DE40322C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Tnht8X7ksuqMNZrnKWCTgrNHKg.roa
Signing time: Fri 15 Dec 2023 23:13:06 +0000
ROA not before: Fri 15 Dec 2023 23:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6f:c1:44:c2:a6:22:c8:e7:10:c2:d8:26:de:40:32:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 23:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd39e1b7c5fb92cbaa30d66b9ca5824e0acd1ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:05:41:6f:81:da:26:a8:dc:70:30:71:c7:94:
78:95:9a:0b:f9:6e:d1:32:01:08:8d:b4:52:70:6a:
6e:98:76:8c:9f:63:d5:e8:09:e4:f4:3a:18:c5:36:
e5:c2:34:32:95:2b:a7:bd:36:9d:88:90:5a:5a:07:
05:2a:e4:b0:53:25:d3:8d:75:0a:63:e8:3d:ff:72:
a1:4d:71:77:b1:4f:ac:f4:41:1c:1f:99:19:b5:c8:
dc:c9:66:0a:00:08:de:c1:88:12:3d:cb:6c:42:de:
45:27:60:09:0a:18:f7:2f:95:9d:8b:6e:64:07:ef:
ad:ce:d9:f3:08:73:27:8d:5c:25:14:8f:e4:01:4b:
02:95:e3:e0:36:47:04:e0:b5:1a:ce:98:55:cd:86:
9f:37:45:72:87:3f:9e:b3:eb:a4:3c:ba:4d:20:0e:
ad:29:af:8a:d8:57:c0:49:a0:e0:2b:cf:4f:03:ba:
19:38:60:92:ea:fc:2d:f3:d5:f1:d6:00:66:64:e0:
50:90:3b:68:4a:74:f3:98:db:4e:06:f3:4a:52:48:
49:ed:42:5f:18:77:22:78:61:b0:8d:da:d8:ec:b9:
ed:b7:10:d6:bc:19:77:66:21:ea:9a:39:68:d4:d9:
2d:f4:59:53:f7:68:dd:c7:88:f8:af:36:6c:b3:10:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:39:E1:B7:C5:FB:92:CB:AA:30:D6:6B:9C:A5:82:4E:0A:CD:1C:A8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Tnht8X7ksuqMNZrnKWCTgrNHKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:4b:8f:8b:ec:80:38:cf:db:6a:bf:af:29:15:77:73:d7:11:
41:73:49:bb:19:4b:49:c2:a8:93:ef:6a:9a:32:9e:06:41:aa:
b4:4d:a1:28:98:54:fa:a6:7f:4a:b1:98:e9:e3:32:48:3c:51:
76:b2:6f:5f:c2:50:62:47:80:56:50:53:63:91:7e:31:9d:04:
ae:f9:d7:07:9c:03:bb:56:1a:05:e7:9f:26:78:e4:f3:d6:10:
17:f1:84:03:8b:4d:a2:eb:78:00:ff:fc:f9:03:2e:03:27:87:
1d:70:58:f6:e8:60:2c:d4:d8:ca:13:96:82:23:49:2a:1a:ad:
f6:95:11:90:2b:bc:0d:b3:a4:6a:89:27:f5:74:8e:9d:58:2f:
50:bf:f8:30:82:7e:e0:5d:63:16:da:93:a1:5d:52:fc:b9:eb:
0b:16:4e:b0:aa:66:c5:ea:24:cb:b2:90:98:b6:34:de:9c:9c:
cb:c4:b9:04:95:ad:c8:78:8a:2b:24:1c:21:dc:7b:5e:89:fa:
f0:b6:b2:35:17:60:f8:a2:40:c7:2b:6e:c9:19:87:1a:40:fd:
59:de:53:16:6c:a9:70:34:4a:3f:7e:d3:23:3c:12:83:15:af:
a4:97:c2:4c:3d:b5:cb:a7:ba:11:54:b9:ec:b2:eb:da:69:a7:
20:d3:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:42:32 2025 by rpki-client