Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TIQXrD9xftR7-buI85ucuibUEek.roa
File: TIQXrD9xftR7-buI85ucuibUEek.roa (raw, json)
Hash identifier: ELwLbOuTcfcexYnJYHKeFdmDisAKINSLZkDVMqjcCpA=
Subject key identifier: 4C:84:17:AC:3F:71:7E:D4:7B:F9:BB:88:F3:9B:9C:BA:26:D4:11:E9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB9288DD980A9ABF571FEA1917D71BB42
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TIQXrD9xftR7-buI85ucuibUEek.roa
Signing time: Thu 21 Sep 2023 19:12:37 +0000
ROA not before: Thu 21 Sep 2023 19:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b9:28:8d:d9:80:a9:ab:f5:71:fe:a1:91:7d:71:bb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 19:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c8417ac3f717ed47bf9bb88f39b9cba26d411e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:df:f0:9b:79:f7:18:8c:f4:b6:ea:32:62:
19:16:f5:47:74:08:a5:21:c4:ff:db:a6:99:58:4c:
41:99:e6:1d:21:18:4e:0e:46:f5:5e:c0:9f:e4:73:
ef:95:32:de:d2:1f:d7:12:a4:7d:57:bd:8c:ec:14:
4c:74:10:e7:7b:cf:6a:d5:d6:e5:27:8a:cd:3c:81:
5f:d6:98:84:98:5c:9b:54:d3:05:f8:b1:5a:13:6f:
0b:2b:f9:de:25:bb:4b:bb:6b:5c:22:44:7f:b7:01:
1c:a6:c1:da:7e:5c:58:6c:cc:d4:15:ba:a2:19:2d:
65:7a:46:e5:7f:06:05:03:b0:d3:ab:c6:fe:3d:e9:
09:32:97:df:a3:38:f8:6b:2e:f5:a3:ad:85:55:d1:
c4:7c:3c:33:73:2b:23:d9:f8:19:68:70:43:40:54:
0b:a5:5c:e3:04:b7:48:9f:e5:37:99:03:9d:ca:25:
df:af:3d:48:2f:38:08:2b:aa:ed:af:05:2c:d9:59:
c0:ff:88:b0:34:7c:bd:17:d8:cf:57:27:ca:30:96:
be:a6:87:8a:a1:5b:9d:26:00:e7:f8:0a:28:14:9a:
7b:2c:ce:78:f7:52:8c:ed:b1:03:50:83:b5:81:b3:
40:0e:6b:ec:01:12:cc:fa:0b:75:83:4e:d3:fb:10:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:84:17:AC:3F:71:7E:D4:7B:F9:BB:88:F3:9B:9C:BA:26:D4:11:E9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TIQXrD9xftR7-buI85ucuibUEek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:69:95:83:c7:f7:14:47:2c:56:9e:6b:53:f4:b3:74:55:1f:
3a:22:00:c7:c4:d7:64:0b:f8:1a:6e:39:5f:2e:07:0d:85:e7:
cc:be:7d:e1:19:7d:06:46:1e:f3:fa:3c:1b:0e:26:1f:19:35:
17:a6:4e:1d:20:9b:66:13:3b:8b:38:0d:55:d2:9d:81:4b:04:
d9:ba:9b:0e:55:d4:a9:81:d2:da:ff:0d:03:9c:d6:e7:c7:27:
49:c4:21:0e:27:59:94:3e:91:84:19:83:53:72:fa:f7:62:7d:
da:e3:10:e0:99:15:65:d4:ce:30:4d:3f:dd:83:12:16:be:78:
a7:bd:c9:c9:45:c0:6d:8b:72:31:f6:d2:02:c2:12:07:96:27:
e9:9a:1b:6a:17:6e:6f:4f:cc:3e:55:5a:cc:16:75:7b:38:1c:
77:25:bc:53:dd:26:66:d4:05:ae:18:13:42:45:e4:f7:0c:2a:
64:ec:0d:81:dd:4d:2a:2f:da:d4:38:70:c7:11:4d:44:de:4a:
6e:77:fb:b7:c6:53:27:a2:6f:e9:45:57:9a:05:4b:7e:46:2d:
3f:2c:81:77:53:7b:f0:3d:c7:40:63:91:f4:0b:83:81:9e:9d:
79:02:56:99:41:53:31:ec:97:1e:bc:2b:fc:b1:4f:32:5e:64:
9f:f3:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:47:17 2025 by rpki-client