Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TUMu9oAjTHY6p-AasHXJdYP55QY.roa
File: TUMu9oAjTHY6p-AasHXJdYP55QY.roa (raw, json)
Hash identifier: Ie/xXZbyvSr9u8BO5HnQmLLFYhj0vUOVafPtn+RPB90=
Subject key identifier: 4D:43:2E:F6:80:23:4C:76:3A:A7:E0:1A:B0:75:C9:75:83:F9:E5:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D33E39E15CB7499421D3B8ACDF773922B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TUMu9oAjTHY6p-AasHXJdYP55QY.roa
Signing time: Tue 23 Jan 2024 01:16:11 +0000
ROA not before: Tue 23 Jan 2024 01:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:33:e3:9e:15:cb:74:99:42:1d:3b:8a:cd:f7:73:92:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 23 01:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d432ef680234c763aa7e01ab075c97583f9e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:80:44:c0:b2:5b:fa:31:15:34:45:5d:20:
fb:0a:17:f5:5c:0c:2f:5b:a8:33:2d:b3:18:27:5c:
3c:1a:74:73:f3:fb:31:58:55:e6:96:07:d3:55:c6:
16:58:77:75:de:e2:f9:cf:9c:9d:16:c8:6e:d4:52:
52:e6:a7:1f:e0:7b:8b:e1:d5:c6:dd:a1:d1:15:58:
28:66:76:b2:a4:6a:6a:e6:5a:ed:97:ed:b9:3f:38:
1b:1d:8e:67:31:e7:9f:3c:2f:4c:e4:fd:bd:b8:ce:
aa:59:fd:be:86:8e:56:a6:6d:3f:d4:df:55:35:84:
ee:d4:db:e6:df:d8:98:3c:69:68:55:bb:e1:aa:99:
63:72:0d:0d:76:d7:9a:b4:26:75:2d:cd:6e:d7:6b:
e3:f1:06:80:a5:c9:ac:63:9d:e7:4e:dd:21:67:70:
ce:02:ac:ce:57:ec:2e:d1:ad:2b:f9:15:42:0a:2a:
a9:7c:a4:2e:87:1b:76:40:a2:03:21:5c:8d:85:ac:
b6:5a:dc:ac:80:cf:12:8b:f8:43:d2:0a:28:9d:eb:
a4:13:f3:01:9c:3b:f6:ef:0b:42:ee:85:e7:9c:6b:
1d:41:43:75:b1:08:6d:20:a5:86:c0:f2:7d:19:70:
ba:f2:0e:41:45:16:a9:b2:53:98:9e:52:5b:5a:04:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:2E:F6:80:23:4C:76:3A:A7:E0:1A:B0:75:C9:75:83:F9:E5:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TUMu9oAjTHY6p-AasHXJdYP55QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:7c:69:0e:3c:da:30:8f:60:8c:ce:73:38:ce:30:0b:85:68:
67:bc:e0:78:28:c2:29:ad:9a:33:b6:93:3d:1d:d6:8e:32:a6:
20:5b:1c:71:f7:32:f6:36:61:aa:66:37:cf:cc:83:e1:27:d1:
86:03:82:c2:f5:e8:99:14:c9:15:53:28:61:4b:17:8c:cc:14:
ff:25:bc:3f:05:fc:2b:bc:d2:19:c0:06:21:80:70:bf:05:07:
07:7e:dd:fd:44:8c:e7:34:ff:fe:b2:93:a0:ea:bc:a5:01:b3:
f3:04:79:86:0c:a1:48:7d:cc:72:e0:39:40:d6:05:18:8f:9f:
c5:d4:2e:f1:f2:ea:6f:4c:4e:97:56:68:ef:cf:a1:12:0c:7d:
94:66:a0:5f:13:50:f7:69:d1:7d:91:44:ef:c2:23:be:75:09:
c8:7b:a5:7c:f0:e5:a5:4a:f7:b9:f6:fd:f3:cb:4f:80:ee:6c:
f3:6a:5a:27:f2:fc:e7:36:4c:a0:74:37:68:76:cf:69:78:2e:
63:b2:d2:c0:33:02:be:1b:7c:0c:b6:64:17:d5:7d:68:dd:68:
39:2f:67:f5:06:b3:29:ae:8c:1d:ff:f5:91:cc:06:56:fc:3b:
88:04:5f:92:46:7d:17:ea:92:0a:e0:23:8c:1e:78:ea:14:6a:
cd:3a:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:34 2025 by rpki-client