Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TMM021rqxXlB-y9EO7BLCvxOfdc.roa
File: TMM021rqxXlB-y9EO7BLCvxOfdc.roa (raw, json)
Hash identifier: Z5dC3BiEhQmXvdnT6Mw8iJc/M83Xvzf8sENfC7DYTOM=
Subject key identifier: 4C:C3:34:DB:5A:EA:C5:79:41:FB:2F:44:3B:B0:4B:0A:FC:4E:7D:D7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B484B4BC4BFF7B2850EDFB06AB6E62313
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TMM021rqxXlB-y9EO7BLCvxOfdc.roa
Signing time: Thu 19 Oct 2023 14:16:15 +0000
ROA not before: Thu 19 Oct 2023 14:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:4b:4b:c4:bf:f7:b2:85:0e:df:b0:6a:b6:e6:23:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 14:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cc334db5aeac57941fb2f443bb04b0afc4e7dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:c0:4c:30:19:bf:be:18:a2:22:4c:ac:33:
51:0d:16:4a:2b:8e:8b:d8:5b:9f:18:6b:ca:99:e8:
17:a1:b9:4f:b7:f1:89:af:3e:3f:c7:88:4a:61:65:
c5:75:e7:46:28:01:60:85:9e:39:bb:80:aa:fe:50:
56:d8:b2:2e:5c:c5:86:93:e1:e4:c3:f5:30:3c:44:
74:34:be:fe:7a:ae:47:1d:63:3f:36:cf:ff:70:ee:
3a:4f:63:9c:03:b7:15:95:cc:71:fd:f9:cb:07:f1:
0d:0a:26:ba:c4:09:a1:14:2a:4b:7f:3d:21:10:a7:
49:e8:2f:5d:d0:66:b2:61:53:fe:43:bd:1e:22:6f:
a8:9a:05:6c:60:09:0d:e5:47:58:c4:ab:e8:57:51:
5d:2b:21:36:63:f0:b8:85:bc:64:20:64:08:13:6b:
d2:ca:0b:3f:d3:8a:8f:ff:98:cc:7d:18:25:c0:4b:
f8:7a:e6:8f:f0:9c:87:83:86:58:8a:6b:c3:0c:88:
c0:d5:5e:01:d2:a9:de:10:f1:f2:ee:50:07:d7:23:
b8:ad:a9:40:d9:0a:fe:d4:e2:7a:40:30:4a:70:00:
6b:73:6f:c2:e6:25:e1:0f:99:a8:50:5d:cc:ca:13:
ae:90:37:84:4a:89:a7:f1:a0:67:43:96:b1:30:a1:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:34:DB:5A:EA:C5:79:41:FB:2F:44:3B:B0:4B:0A:FC:4E:7D:D7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TMM021rqxXlB-y9EO7BLCvxOfdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:34:a7:7d:31:78:7c:8b:40:4f:70:13:9c:d4:ff:89:43:c9:
30:dc:3f:4a:4f:8b:af:7c:57:e7:09:4b:db:99:0e:ec:8e:7b:
b4:7f:0d:4c:24:43:45:8e:7e:97:ab:ba:43:cd:dd:21:2b:38:
bc:6f:32:2f:22:33:e4:3c:30:be:0b:b6:3d:80:b8:35:94:e8:
70:46:ba:8c:11:4a:b7:27:fa:02:79:e7:94:6b:bd:0b:5d:52:
4d:2e:7c:e0:f7:55:49:d2:fe:28:4a:25:9d:5f:73:24:b2:c5:
b4:7d:37:94:ec:76:ef:28:30:dc:d4:ff:2b:29:78:a3:d0:15:
da:38:b1:fb:b9:46:d9:59:76:6d:7e:d7:47:67:8f:4a:10:9c:
0b:0f:70:4e:8a:8a:69:8f:1c:9d:a2:e1:5c:6f:4c:4a:a4:04:
5b:3b:86:d4:a4:e4:cc:a2:73:d9:03:d4:2e:85:ea:35:b3:8e:
83:04:bd:a1:9b:d0:eb:48:cf:ad:5f:92:f6:e0:23:f0:d4:d5:
0e:18:3f:53:99:3e:5a:75:7e:fa:10:ba:49:38:91:54:76:0e:
c7:6e:5a:23:d3:f2:41:5a:4e:e7:25:1d:8e:db:5a:ec:83:0f:
b2:18:5f:aa:e4:94:69:dc:d1:cb:e7:bf:bd:84:35:19:54:3e:
fa:22:e1:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYtIS0vEv/eyhQ7fsGq25iMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDE5MTQxNjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2MzMzRkYjVhZWFjNTc5NDFmYjJmNDQzYmIwNGIwYWZjNGU3ZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VLATDAZv74YoiJMrDNRDRZKK46L
2FufGGvKmegXoblPt/GJrz4/x4hKYWXFdedGKAFghZ45u4Cq/lBW2LIuXMWGk+Hk
w/UwPER0NL7+eq5HHWM/Ns//cO46T2OcA7cVlcxx/fnLB/ENCia6xAmhFCpLfz0h
EKdJ6C9d0GayYVP+Q70eIm+omgVsYAkN5UdYxKvoV1FdKyE2Y/C4hbxkIGQIE2vS
ygs/04qP/5jMfRglwEv4euaP8JyHg4ZYimvDDIjA1V4B0qneEPHy7lAH1yO4ralA
2Qr+1OJ6QDBKcABrc2/C5iXhD5moUF3MyhOukDeESomn8aBnQ5axMKEnBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEzDNNta6sV5QfsvRDuwSwr8Tn3XMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVE1NMDIxcnF4WGxCLXk5RU83QkxDdnhPZmRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABc0p30xeHyLQE9wE5zU
/4lDyTDcP0pPi698V+cJS9uZDuyOe7R/DUwkQ0WOfperukPN3SErOLxvMi8iM+Q8
ML4Ltj2AuDWU6HBGuowRSrcn+gJ555RrvQtdUk0ufOD3VUnS/ihKJZ1fcySyxbR9
N5Tsdu8oMNzU/yspeKPQFdo4sfu5RtlZdm1+10dnj0oQnAsPcE6KimmPHJ2i4Vxv
TEqkBFs7htSk5Myic9kD1C6F6jWzjoMEvaGb0OtIz61fkvbgI/DU1Q4YP1OZPlp1
fvoQukk4kVR2DsduWiPT8kFaTuclHY7bWuyDD7IYX6rklGnc0cvnv72ENRlUPvoi
4Vc=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:10 2025 by rpki-client