Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tJLWI7jsHJh8nS6TGmC6iirj3sM.roa
File: tJLWI7jsHJh8nS6TGmC6iirj3sM.roa (raw, json)
Hash identifier: Ivu8+E8aj+i61Ky70OkACxwsuPpsrf1Kkup+t9fdFSU=
Subject key identifier: B4:92:D6:23:B8:EC:1C:98:7C:9D:2E:93:1A:60:BA:8A:2A:E3:DE:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1A5C8A7CE46054FDD4DEA9C218DAC942
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tJLWI7jsHJh8nS6TGmC6iirj3sM.roa
Signing time: Wed 29 Nov 2023 09:15:21 +0000
ROA not before: Wed 29 Nov 2023 09:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:5c:8a:7c:e4:60:54:fd:d4:de:a9:c2:18:da:c9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 09:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b492d623b8ec1c987c9d2e931a60ba8a2ae3dec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:bf:f8:1a:e9:bf:d5:5f:30:42:25:23:31:
fe:81:41:e9:d5:a3:ad:b3:84:ed:cb:47:ec:6e:a9:
55:eb:58:8d:08:06:f1:3e:b4:2c:78:aa:d7:1c:9d:
f0:5e:57:55:79:32:f3:e4:e4:46:a7:de:9e:e7:9f:
20:fd:11:6c:0f:13:d0:cb:ff:d0:74:e6:48:92:50:
f7:bb:c2:2e:34:b8:c9:a6:95:d0:ba:d5:32:ca:9f:
2c:4a:08:ef:64:2d:e3:1b:ad:13:89:e0:22:96:f2:
0f:b0:6a:ec:b8:6c:40:f6:cf:f7:53:4c:3f:9f:6a:
78:c6:97:c3:05:1e:db:c2:b8:c8:0b:c2:5c:5d:0c:
cf:e1:55:08:77:0b:91:10:dc:d3:47:52:0f:c2:3a:
b2:48:95:f4:7e:91:22:67:e8:43:c6:42:2e:5a:81:
6e:0b:3f:86:0c:ee:02:09:97:fb:af:75:da:f7:cf:
e2:48:c5:94:43:23:3c:55:ce:25:86:76:bf:37:90:
d2:b4:7e:db:d4:69:81:9f:0c:c8:54:77:39:db:31:
17:59:ff:7a:f8:59:67:ef:38:b0:d1:93:ac:75:e1:
1f:d3:01:44:84:0f:45:42:9e:6c:46:8f:87:2a:71:
12:cd:63:fc:29:e1:80:2a:a9:82:0b:db:39:48:87:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:92:D6:23:B8:EC:1C:98:7C:9D:2E:93:1A:60:BA:8A:2A:E3:DE:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tJLWI7jsHJh8nS6TGmC6iirj3sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:0d:49:55:7a:fb:5e:85:5e:e5:fb:82:2f:c8:70:f3:ae:6c:
fb:1b:b7:e4:9f:c2:b7:e1:05:20:3e:60:b5:70:59:11:2d:f2:
f5:82:b8:85:ec:11:ac:6d:7b:47:83:d8:e9:a1:18:dd:24:95:
56:e7:af:c0:04:f7:4d:cd:0f:c8:b4:54:42:d9:85:86:53:52:
af:82:f8:cb:5a:d6:df:1e:0f:06:b7:01:63:ec:ff:c3:16:03:
5d:7e:ea:9b:16:c2:f6:71:8f:57:2c:68:c2:dd:2c:1a:b2:b7:
53:84:99:4c:70:ac:b0:3a:01:9a:7b:dc:5c:64:fe:dc:91:c0:
08:f0:fc:ed:04:e4:3d:20:c4:69:e0:50:0a:9e:f1:32:51:9f:
e4:6d:4b:38:eb:81:f8:b8:ea:17:43:06:30:17:04:41:22:0e:
96:91:74:95:8d:03:e5:20:44:84:61:73:cb:9a:cc:41:bf:0b:
f8:43:3e:8a:7f:e7:ee:08:5a:fa:21:87:62:11:e7:a3:3e:61:
6c:39:87:56:10:23:a0:7e:5c:47:1f:89:37:d9:54:70:3b:2a:
91:5f:e4:5e:aa:5d:3d:a1:71:3e:cc:32:e4:32:86:35:64:86:
10:05:40:d9:bf:cb:3f:ff:92:39:15:4e:d6:70:77:e8:d8:b4:
d9:b1:ae:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:59:31 2025 by rpki-client