Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T60BIhuDoiPeQKyXdKplhbTMNtE.roa
File: T60BIhuDoiPeQKyXdKplhbTMNtE.roa (raw, json)
Hash identifier: LgtmK6zW6t3qavNlUWpx2/LzwcENSyVFzLL11yJwOmM=
Subject key identifier: 4F:AD:01:22:1B:83:A2:23:DE:40:AC:97:74:AA:65:85:B4:CC:36:D1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF8AD094E4A1EEF73CA7DD5AC0F5ECAEB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T60BIhuDoiPeQKyXdKplhbTMNtE.roa
Signing time: Wed 04 Oct 2023 03:13:24 +0000
ROA not before: Wed 04 Oct 2023 03:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:ad:09:4e:4a:1e:ef:73:ca:7d:d5:ac:0f:5e:ca:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 03:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fad01221b83a223de40ac9774aa6585b4cc36d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:e4:72:29:63:2f:45:dc:8f:64:79:ac:21:
0e:23:2e:8a:44:41:fe:3d:4f:d5:26:b1:5d:04:10:
60:d7:fb:80:84:fb:ab:a5:f9:db:84:f2:a1:44:66:
0c:26:c3:ec:66:ce:39:60:45:ce:fa:18:1f:88:69:
fb:71:0f:7e:36:40:f8:13:a3:be:cb:18:9c:44:46:
7d:99:e9:25:27:ed:70:6f:58:a9:85:0e:c4:a5:c7:
d2:65:c6:40:6a:98:02:d9:63:63:a6:1d:12:53:a6:
95:ed:dd:c7:6c:97:d6:f7:17:eb:3d:78:d5:c5:31:
f9:86:ff:e4:5b:e9:8c:8c:70:8a:f3:28:c0:ad:06:
60:e9:e7:a4:2f:03:8c:bc:d9:da:f5:10:c0:20:25:
28:ef:a0:22:76:86:5d:cd:47:a5:9f:f6:73:e5:2a:
53:8b:92:20:9a:3d:c4:7c:16:61:8e:29:b0:6d:03:
f3:06:19:38:15:4a:dc:04:f6:5b:5a:70:7c:8a:23:
9f:b1:38:2e:bd:bd:8d:28:f9:ad:f4:d0:a8:82:75:
7b:80:69:ca:d6:2a:ce:fb:3d:c1:4d:fe:1f:91:90:
54:40:b8:20:69:d6:a1:ad:e6:15:54:aa:b5:6a:40:
7c:60:75:96:91:38:98:10:b2:7a:db:bc:65:01:b2:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AD:01:22:1B:83:A2:23:DE:40:AC:97:74:AA:65:85:B4:CC:36:D1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T60BIhuDoiPeQKyXdKplhbTMNtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7f:40:81:54:27:e0:b4:4a:47:92:da:db:8d:b1:e0:36:89:
69:b4:b1:48:29:45:14:8f:14:23:68:12:f4:ca:0b:c1:78:12:
03:41:fb:60:84:4c:0a:e1:3f:85:16:cb:6f:54:65:c6:01:59:
c2:21:35:1c:5f:a9:02:7e:2a:b3:5c:dc:5f:33:9e:25:b8:44:
03:f0:95:47:c2:c9:d2:7a:7f:70:91:c4:27:6f:3d:eb:be:32:
89:fc:1e:b3:c5:71:72:e5:d4:66:01:7a:ac:7f:70:b5:4f:53:
fc:88:d8:8f:8f:19:c0:18:f8:12:8a:43:a8:ab:10:74:2f:f2:
90:0b:66:24:cb:b0:2f:0d:42:47:ca:da:fb:49:e6:74:e7:82:
c1:71:e5:6a:87:e8:50:a8:4a:d4:8f:5f:89:73:c9:5f:0e:c9:
ae:54:51:59:83:b6:a3:49:59:89:7f:b6:12:56:18:35:30:79:
67:c2:51:52:e8:62:d2:5e:41:7b:77:c8:fd:c9:ff:31:ef:18:
ec:05:c2:47:3d:2c:01:11:70:22:0d:de:1d:07:8c:86:ac:cd:
31:4f:ac:8a:80:8d:92:d4:40:28:6b:e7:2e:d9:44:a4:ed:9a:
d0:4e:c9:26:92:ed:90:93:cb:6c:9b:04:53:0b:ce:0b:e5:e9:
b1:42:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:58:12 2025 by rpki-client