Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T1qWKX-vZkHF-GR3Tj2n2g8S2A0.roa
File: T1qWKX-vZkHF-GR3Tj2n2g8S2A0.roa (raw, json)
Hash identifier: XDRuCfn7HZ5968JSHnNBnhSlfyXC0CWeHgT0LaXoQsY=
Subject key identifier: 4F:5A:96:29:7F:AF:66:41:C5:F8:64:77:4E:3D:A7:DA:0F:12:D8:0D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD9C517F6EAA491274C6785CF18E1A6CB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T1qWKX-vZkHF-GR3Tj2n2g8S2A0.roa
Signing time: Thu 28 Sep 2023 03:11:27 +0000
ROA not before: Thu 28 Sep 2023 03:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:c5:17:f6:ea:a4:91:27:4c:67:85:cf:18:e1:a6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 03:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f5a96297faf6641c5f864774e3da7da0f12d80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:89:34:99:d7:f6:5d:ef:56:d2:f9:54:52:
f5:04:7d:d8:8c:ab:e4:56:59:d8:c9:88:72:77:43:
00:bc:eb:1d:ad:26:32:38:11:05:74:42:4a:7d:97:
74:61:8d:13:35:1e:32:4c:6f:5d:02:56:76:51:97:
75:b5:7a:9c:bd:56:a1:29:1f:aa:fb:4c:0e:b0:f7:
d9:31:6f:c3:a1:b2:44:da:b3:08:02:12:ba:39:24:
e1:15:5f:6a:71:6e:e5:18:e9:eb:6e:60:4e:81:a5:
6f:ef:40:02:96:82:ab:d8:9a:01:71:24:3e:6a:e7:
cc:78:d3:4e:6c:88:c8:6e:f6:9b:aa:b8:0d:09:bf:
c0:54:34:8b:82:0d:e9:78:61:ac:90:f2:c0:aa:86:
71:82:7d:ae:46:4c:09:d7:df:5f:e2:3e:66:97:78:
7b:80:a5:49:8d:6f:53:3c:84:35:1a:a8:23:fd:75:
6c:ee:f1:8b:1d:cd:ee:12:44:2b:ab:bd:0e:b5:9d:
ae:68:1e:09:c5:32:c7:e1:4c:ec:2e:ff:34:79:33:
c6:ca:43:13:57:53:77:03:21:57:51:37:c1:c2:15:
d5:33:89:86:5c:80:bd:3e:90:66:db:c0:4f:13:51:
f7:5b:34:6a:bb:e4:96:53:ce:d7:5d:f9:f6:bc:dc:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:96:29:7F:AF:66:41:C5:F8:64:77:4E:3D:A7:DA:0F:12:D8:0D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T1qWKX-vZkHF-GR3Tj2n2g8S2A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:9d:4a:55:8d:84:ba:1c:d1:cf:7f:55:54:fd:04:e2:8e:66:
89:b9:44:d0:37:0a:fd:2d:57:e8:43:5e:00:b9:07:35:65:a4:
7e:ba:4a:da:5a:a4:11:16:5f:c6:61:57:eb:d8:4e:0a:1a:75:
90:83:66:1a:66:90:7f:b7:65:88:d0:7e:6e:54:a1:e7:4f:ba:
c8:0d:8d:79:82:7c:7c:57:fb:96:65:68:da:a4:36:dd:26:b5:
f0:96:57:e6:1e:11:49:0e:e1:b1:0b:d2:ee:53:df:31:9c:5d:
fb:57:4b:45:d8:a2:a0:d5:f6:b6:f8:c1:c0:5e:6a:6f:89:cc:
17:48:ff:59:7d:ee:10:17:18:61:4d:9b:9e:b6:95:23:d3:3b:
59:d8:d8:e0:59:c9:b3:c6:62:0a:65:25:ce:83:a2:e1:1c:0c:
78:df:16:f8:90:59:4d:2e:f3:08:39:60:09:c1:e0:f0:cb:67:
d3:63:f5:c2:51:bd:67:36:71:7c:25:41:07:da:3e:7a:98:38:
e7:f7:33:fe:66:93:0f:ee:23:47:93:0e:46:a2:25:45:03:54:
09:f8:c2:9d:d2:3c:28:34:03:fb:45:bb:43:26:2b:50:c2:10:
55:c9:e0:d0:3b:de:9f:98:d8:6a:6a:67:15:d5:b7:dd:dc:cb:
45:a6:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:24 2025 by rpki-client