Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tvgbIxbRyuDRcR4Lgw51Zo2JKGU.roa
File: tvgbIxbRyuDRcR4Lgw51Zo2JKGU.roa (raw, json)
Hash identifier: vXnCN8G6i94ahlwgpU3Li5riMJZ/ft0oYQvj/Pokock=
Subject key identifier: B6:F8:1B:23:16:D1:CA:E0:D1:71:1E:0B:83:0E:75:66:8D:89:28:65
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D71AD412466FA4C0FD7C7497960ABB509
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tvgbIxbRyuDRcR4Lgw51Zo2JKGU.roa
Signing time: Sun 04 Feb 2024 01:13:16 +0000
ROA not before: Sun 04 Feb 2024 01:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:71:ad:41:24:66:fa:4c:0f:d7:c7:49:79:60:ab:b5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 4 01:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6f81b2316d1cae0d1711e0b830e75668d892865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:12:dc:f5:c8:dd:61:50:8a:c3:5f:fa:c0:
f9:b0:6e:f3:04:3c:93:a8:1f:f7:19:7c:8f:e3:c5:
93:c5:cc:11:f9:7b:4c:1d:72:c2:f1:5d:57:7b:d1:
4d:39:39:0e:47:fa:f1:d3:b8:eb:9e:3e:d2:63:fe:
31:88:e5:1b:c1:b4:76:e1:eb:18:67:2c:45:f1:3b:
18:fd:d9:2e:2f:16:c3:a3:bb:aa:4d:57:5b:73:12:
b0:06:a1:16:22:2a:3a:15:53:d3:c5:c3:fe:4c:d4:
09:23:b1:9e:92:2f:50:b4:5d:c9:13:a4:b9:8a:0f:
ab:e7:09:25:22:fe:92:d0:0e:91:69:db:5b:fd:f6:
08:63:52:1d:a5:b4:25:a1:e1:ad:cd:2e:d0:4f:08:
dd:10:9b:f4:5c:e8:40:61:3b:bb:5b:99:63:47:fd:
61:fa:da:d7:64:ad:ff:d6:00:c3:32:dc:e1:53:92:
09:ed:5e:1f:61:f5:3a:63:1f:9e:87:97:59:75:59:
f1:5f:b6:f1:f7:97:84:59:65:b8:f8:80:80:8f:a9:
e9:72:bc:18:ba:93:25:bc:57:3d:f7:d7:09:3e:c9:
f4:fc:57:f5:a0:f6:8d:df:84:90:f9:ea:38:76:40:
9f:0a:c7:96:25:28:c4:6b:d1:35:29:45:fd:c0:aa:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:1B:23:16:D1:CA:E0:D1:71:1E:0B:83:0E:75:66:8D:89:28:65
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tvgbIxbRyuDRcR4Lgw51Zo2JKGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:70:88:9b:c6:df:c7:c7:f7:d0:44:1b:52:94:b1:5b:be:64:
49:61:c5:67:c0:11:37:d4:c5:c4:ef:3b:db:a0:8c:0e:fb:72:
74:47:bf:32:0d:ca:cc:d3:ef:29:f3:ef:22:89:5c:73:e2:bb:
d1:36:78:a7:8c:1d:2d:a4:cf:b2:f3:fa:a4:72:4e:cb:21:10:
fd:29:96:5b:1d:c3:4a:41:bc:d0:cc:6a:e3:bf:ae:1e:99:38:
bc:fb:a6:f4:17:03:ae:c3:06:4f:ad:23:92:ba:5b:52:86:5c:
d3:d4:86:64:93:cb:a8:3f:b0:75:1c:48:05:eb:80:9d:de:be:
ad:db:e3:97:f7:af:bc:31:d3:de:56:a5:64:cf:c5:9d:0b:e9:
fe:37:91:2b:20:54:74:fc:9f:5b:5f:81:f6:36:59:d0:1b:35:
89:5a:f5:5a:7e:d2:0c:fb:de:6b:8c:52:54:64:a2:60:65:45:
dc:67:c4:42:2f:f0:bb:53:7a:b6:78:3e:ea:74:aa:d4:be:31:
f5:c0:dc:f4:fc:e8:ac:09:12:2a:c9:aa:70:15:c7:5d:4b:99:
b6:13:47:37:0d:48:5f:42:c8:b7:71:f9:8f:e1:c4:86:9b:ea:
e4:fd:60:66:6d:e8:60:97:57:32:af:43:5d:b1:99:65:d7:d3:
93:d1:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:22:32 2025 by rpki-client