Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TC1bPRLkCla54Y3nTUo5uDvjFVo.roa
File: TC1bPRLkCla54Y3nTUo5uDvjFVo.roa (raw, json)
Hash identifier: 5tq67vGDsl0OC8FELtFmE4oVxRujTGOG+HA4Sb10XL4=
Subject key identifier: 4C:2D:5B:3D:12:E4:0A:56:B9:E1:8D:E7:4D:4A:39:B8:3B:E3:15:5A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3D55FD92A770746B92D60C35C75F784E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TC1bPRLkCla54Y3nTUo5uDvjFVo.roa
Signing time: Wed 06 Dec 2023 04:14:54 +0000
ROA not before: Wed 06 Dec 2023 04:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:55:fd:92:a7:70:74:6b:92:d6:0c:35:c7:5f:78:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 04:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c2d5b3d12e40a56b9e18de74d4a39b83be3155a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:37:29:87:93:37:a4:32:d6:12:3c:dd:b8:
2c:c0:5e:9f:b9:b4:27:e1:22:86:75:da:74:85:37:
d6:9c:32:06:f0:ce:8a:3d:9b:fe:a9:51:ea:12:05:
38:49:fe:9f:50:c2:4c:8e:36:cd:01:99:d8:9f:c0:
1b:40:5c:a1:51:18:e8:55:8c:09:ea:43:33:31:fc:
46:df:d1:3b:8d:f3:d7:bf:31:b0:20:69:ff:09:a2:
39:53:fe:4b:09:69:a4:32:c4:2e:0b:47:d1:60:01:
d5:42:ea:72:07:e7:a8:e1:4a:74:f2:f0:79:d3:8d:
95:08:e9:c0:4f:1a:da:c4:d3:c5:6a:15:82:c2:85:
a1:e9:04:16:b6:34:45:7e:18:78:62:16:33:49:37:
05:8c:ce:44:5f:17:d8:c8:5a:76:5e:e4:51:fe:2e:
3d:06:b8:aa:f8:d6:f3:11:48:37:6e:9b:33:67:df:
c3:01:22:34:ad:af:ba:bf:64:3b:bc:d1:cc:4b:be:
5d:ed:cd:1a:5b:61:0c:99:48:6c:40:c4:00:23:dd:
33:0f:54:c2:4d:78:54:cc:bd:f1:99:95:b9:06:bc:
b7:3a:ba:89:e0:71:c1:f7:6f:c2:65:7a:99:fc:1b:
90:77:ab:ad:e4:bd:c3:f4:4e:91:1f:12:9c:9f:f7:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2D:5B:3D:12:E4:0A:56:B9:E1:8D:E7:4D:4A:39:B8:3B:E3:15:5A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TC1bPRLkCla54Y3nTUo5uDvjFVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:a7:ea:2d:a0:63:a4:bc:76:1e:17:b3:db:27:af:79:b4:02:
22:ac:e4:dc:8d:f5:37:64:66:e5:c2:1b:f2:6e:9a:c4:73:4f:
94:0b:f4:02:a9:16:e9:0e:0d:9b:8b:8e:c9:97:99:fb:59:df:
94:99:06:b7:2e:75:7e:5a:20:38:b8:65:b4:42:4c:e3:38:7b:
13:f9:05:02:d5:f7:93:74:7f:2f:d7:0f:70:f5:6f:cd:63:4d:
fe:3b:d3:b9:17:48:af:bb:2f:d1:6b:a7:20:53:ff:ea:3b:ae:
33:71:67:1f:1e:54:09:a2:69:b5:eb:02:cb:40:f7:82:9b:76:
6b:e3:e7:4f:ed:6c:6b:96:24:b4:0b:2a:32:c8:96:d5:37:c4:
d3:8e:a5:e3:8e:10:ca:08:f9:11:08:0a:f2:e5:c5:07:a2:2e:
4f:13:39:ee:1e:ac:96:62:ba:f8:c3:4a:12:8a:cd:84:85:ab:
4e:e5:4e:0e:a9:99:ce:f5:01:0f:81:5c:1c:15:d3:ee:25:b3:
79:b0:b6:9b:e4:77:18:b1:09:b5:09:a9:25:76:24:78:de:8f:
70:c9:92:db:ba:af:05:48:53:33:f9:40:36:0a:40:18:42:5a:
5a:bf:68:c7:12:4e:68:7a:ee:81:15:5a:5e:7b:b0:33:1f:f9:
a5:10:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:53 2025 by rpki-client