Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TEvnl6FJ285PY0CeK7dkXkPNDro.roa
File: TEvnl6FJ285PY0CeK7dkXkPNDro.roa (raw, json)
Hash identifier: klAUacADDEK+cUQ+tTdZsBasot4YUa+TgVdAEYfyMWA=
Subject key identifier: 4C:4B:E7:97:A1:49:DB:CE:4F:63:40:9E:2B:B7:64:5E:43:CD:0E:BA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B90C81F0B4D346FDF3C81E90FC4D6CE23
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TEvnl6FJ285PY0CeK7dkXkPNDro.roa
Signing time: Thu 02 Nov 2023 16:05:15 +0000
ROA not before: Thu 02 Nov 2023 16:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:90c8:196f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:c8:1f:0b:4d:34:6f:df:3c:81:e9:0f:c4:d6:ce:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 16:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c4be797a149dbce4f63409e2bb7645e43cd0eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:09:94:92:d9:e4:51:81:60:02:7e:f6:8d:
b8:7c:3b:3a:68:83:01:5c:1d:89:2e:52:06:d0:86:
40:17:d9:fa:9e:d2:eb:a5:5a:c8:a0:5f:ef:e7:4a:
3f:4d:09:c9:d1:b8:95:5a:5a:3a:c4:33:b1:c1:04:
59:8b:5b:db:1d:d0:96:69:19:ae:c7:ec:aa:99:ad:
17:37:69:a0:99:fd:c4:11:cd:7d:02:56:f9:9e:00:
bd:88:f0:43:a1:aa:19:a3:c3:cd:4c:a4:c5:5d:70:
8b:04:b6:27:af:19:d6:85:44:21:e2:d6:d5:72:8c:
17:56:ea:e2:c8:4d:e8:7f:f4:58:28:6f:3e:cb:39:
11:0c:ac:84:62:b8:b9:d4:1f:0c:32:dd:44:5d:9e:
b8:bf:bd:bd:6c:c3:1b:11:26:34:d0:ad:77:51:07:
8a:3b:54:64:8c:6f:3a:48:44:c6:a5:91:42:c2:b1:
68:de:24:1e:23:19:51:07:55:2f:9b:95:a5:57:59:
1b:a2:ee:6b:a0:f3:de:fd:77:ee:b4:a1:81:71:d7:
29:cf:f1:42:c5:31:6b:d4:b6:77:b1:1b:8d:24:7b:
93:ca:e0:de:eb:da:07:e3:07:8e:e4:24:33:a1:df:
d7:e5:8f:fd:54:f5:7b:11:e2:ed:ad:72:4b:98:50:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4B:E7:97:A1:49:DB:CE:4F:63:40:9E:2B:B7:64:5E:43:CD:0E:BA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TEvnl6FJ285PY0CeK7dkXkPNDro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:db:b9:6a:40:45:ce:82:90:c4:22:d3:9f:74:3f:76:91:a2:
1b:40:17:7e:f3:93:81:88:32:c1:6b:ef:5c:60:c8:0a:20:ba:
c6:fd:de:ca:b1:db:8d:c0:cd:2a:1b:58:5f:00:a7:95:3f:4f:
d0:3c:e9:4c:f7:dc:58:a4:e3:0f:32:3d:ef:7d:38:7c:75:38:
40:d0:bf:d1:ce:c7:15:68:57:e1:3c:c5:9f:aa:74:06:b6:51:
5f:cd:fe:92:35:ee:77:42:8f:9e:fc:b8:ef:bb:87:f0:63:86:
77:17:62:00:2a:9e:68:18:37:e3:21:26:24:41:bb:71:52:4f:
7e:3b:71:5d:61:05:b7:10:cb:b8:50:ec:b6:e1:d6:a3:17:e2:
d4:22:7a:78:ee:93:46:f7:a5:e0:07:3f:df:70:c5:d7:60:f7:
2c:b9:fc:54:c5:78:42:e6:81:82:be:85:d9:a6:40:a7:20:4c:
7a:23:54:6b:ce:3e:d2:05:0b:c6:ec:e9:82:96:46:f8:6c:ff:
1d:1b:52:af:04:41:80:f2:1a:50:2e:61:6e:09:34:12:e3:95:
57:d9:cb:aa:e0:c6:15:8a:4d:af:32:79:fb:ef:5e:2a:32:50:
e3:e8:ce:e5:fc:d6:68:c9:fa:f4:c3:1f:15:49:0a:2b:28:79:
30:d6:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:06:55 2025 by rpki-client