Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TBjasBkiXIWxbj5TyvQ_dgp-aOk.roa
File: TBjasBkiXIWxbj5TyvQ_dgp-aOk.roa (raw, json)
Hash identifier: q8iQh4Lusv5Hv/r/ckeNE33TT9btj+VYMRh1+5MT4Nk=
Subject key identifier: 4C:18:DA:B0:19:22:5C:85:B1:6E:3E:53:CA:F4:3F:76:0A:7E:68:E9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3DC11B338D76CEF03A8D475ECC57B69D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TBjasBkiXIWxbj5TyvQ_dgp-aOk.roa
Signing time: Wed 06 Dec 2023 06:11:54 +0000
ROA not before: Wed 06 Dec 2023 06:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:c1:1b:33:8d:76:ce:f0:3a:8d:47:5e:cc:57:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 06:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c18dab019225c85b16e3e53caf43f760a7e68e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:22:ed:e1:0c:00:57:b3:86:61:ab:cf:30:
ff:1d:25:92:40:2d:31:26:23:d0:80:fa:99:a7:58:
e5:a8:81:b4:90:26:55:3f:fe:bc:f8:ee:af:32:d3:
1f:17:26:79:28:e7:10:ee:9b:8c:14:8a:3c:6a:9e:
5a:cf:fb:b8:99:b6:79:7f:7e:de:35:4f:75:b5:ab:
15:62:6e:3d:85:f6:43:5d:d5:0a:c7:52:15:70:14:
a4:f9:1a:95:4c:e1:b8:d0:ce:1b:2a:ef:4d:ca:e9:
07:78:49:e2:50:56:09:60:d0:00:8a:3f:83:b9:79:
07:0f:ae:be:92:a6:68:26:20:f6:b6:e0:3c:de:77:
f0:f3:d2:e6:0e:c0:09:89:63:39:c0:32:49:d0:bd:
78:d7:80:3d:55:52:42:54:13:a6:34:3a:a9:86:ee:
c3:19:3a:f5:cd:c7:0b:8f:10:de:4d:fe:ed:4a:56:
ca:03:76:f8:cd:f4:63:fa:ea:94:a0:d2:46:5b:b8:
16:e4:b5:81:2d:1d:c0:db:c0:92:1a:35:bd:dd:36:
cb:32:59:2a:23:51:1a:1f:ae:46:89:fc:c0:55:03:
d1:bd:4c:0e:28:5e:5c:71:be:5e:f2:f5:5f:93:36:
15:6a:92:e0:60:4c:e9:49:67:cd:b6:cf:51:ba:53:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:18:DA:B0:19:22:5C:85:B1:6E:3E:53:CA:F4:3F:76:0A:7E:68:E9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TBjasBkiXIWxbj5TyvQ_dgp-aOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:21:d4:54:14:35:f2:7e:31:dc:2e:0b:59:29:94:2b:78:89:
c9:f7:7a:80:0c:fd:40:c9:a9:c1:b5:d6:f7:dd:1a:6b:6f:76:
5e:9a:8c:2b:6e:ae:b6:a5:fd:58:82:ce:99:3c:cb:e5:5b:5a:
26:d7:4b:4f:bf:d9:b0:69:26:28:0e:ae:a6:7d:10:6b:7b:4b:
7b:4f:f8:ef:74:db:fc:4b:80:6f:66:db:fd:16:41:b9:a5:45:
20:63:7c:6e:92:99:1b:03:ad:a8:fa:6c:2e:9c:58:88:88:76:
c5:89:b7:7f:ba:0b:f0:35:a6:34:aa:43:04:bb:73:70:39:b0:
37:8e:dc:05:38:39:0a:92:05:61:2a:e2:33:79:4f:a7:90:bf:
80:9a:11:88:df:87:2d:6b:9b:fe:16:f2:b6:31:e6:90:a9:e9:
d1:68:08:b4:b0:62:93:cf:5c:08:8e:7a:71:7a:e6:60:31:80:
b0:d1:8f:b2:2c:54:4c:fd:7f:1f:52:1f:ec:f5:99:c3:b0:00:
aa:e6:ce:93:4e:5e:f1:e0:ab:33:40:00:95:52:98:4c:64:be:
e0:c7:61:59:33:05:bb:20:2a:34:51:60:cd:7f:41:8f:d4:22:
06:0f:28:6b:a8:c7:8b:52:e9:db:f4:53:9d:1a:8e:52:df:26:
c7:68:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:11:50 2025 by rpki-client