Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TPraVKCi_-7UDWGif6RMVIVFIko.roa
File: TPraVKCi_-7UDWGif6RMVIVFIko.roa (raw, json)
Hash identifier: +uneQ+u2Uts10LmIDdsTAd9DleO89hyi1dHh+Cm0wJw=
Subject key identifier: 4C:FA:DA:54:A0:A2:FF:EE:D4:0D:61:A2:7F:A4:4C:54:85:45:22:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C83AE96A5E386628C6E2D8C84925FE3B2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TPraVKCi_-7UDWGif6RMVIVFIko.roa
Signing time: Tue 19 Dec 2023 20:05:06 +0000
ROA not before: Tue 19 Dec 2023 20:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:83ad:d5bb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:ae:96:a5:e3:86:62:8c:6e:2d:8c:84:92:5f:e3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 20:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cfada54a0a2ffeed40d61a27fa44c548545224a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:c3:ab:a4:39:1a:cf:d5:3b:d5:28:77:7b:
b4:79:80:3b:01:d1:db:ce:f2:72:20:5b:6b:c4:cb:
b0:0b:ce:5c:e4:07:45:07:43:92:35:18:0b:db:17:
5f:61:8d:46:32:3e:cd:c1:45:a0:2c:8a:e9:05:cb:
ea:b4:32:b2:83:4c:9e:43:57:94:99:c1:26:00:81:
08:05:ae:54:a3:d6:7c:43:7f:86:77:ea:1e:26:ff:
88:1a:33:bd:6b:84:8c:80:2c:48:c9:e6:fc:1f:82:
e7:93:6f:7f:cd:00:39:3a:d0:0f:91:eb:b6:b2:fe:
8e:39:a9:5e:a9:2c:d9:88:d8:c1:60:bc:57:eb:2d:
be:8c:7d:39:2d:18:06:84:0b:54:9d:d3:fa:b0:32:
89:f0:11:11:b7:f1:a6:80:51:a9:fb:d3:25:19:68:
a4:a2:6d:f1:c3:2b:ec:f3:d7:87:8e:3a:de:80:71:
cc:ff:35:c9:4b:95:88:66:2a:67:79:dd:a9:5a:18:
ce:f2:1c:df:d0:8c:f3:ab:bf:98:54:3d:fc:bb:34:
5f:35:d5:07:22:ef:c7:3a:9d:ce:16:1d:fc:fc:51:
da:5c:84:74:99:49:27:15:28:62:28:ce:3d:9a:e8:
b5:4c:71:eb:e9:b8:53:c3:cc:cf:ee:b1:92:9b:11:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FA:DA:54:A0:A2:FF:EE:D4:0D:61:A2:7F:A4:4C:54:85:45:22:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TPraVKCi_-7UDWGif6RMVIVFIko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:b5:19:e3:c2:0d:55:74:1c:06:68:29:a3:31:fd:2d:ab:dd:
54:c2:31:9a:4e:bb:57:27:55:24:0f:66:74:e4:56:c1:df:9a:
e2:09:fd:50:97:09:fd:6b:db:04:68:cc:ee:25:c7:6b:46:3f:
45:98:92:68:f7:dc:4d:cb:c3:1e:82:b3:b0:93:23:3c:72:4e:
d4:ac:52:27:e7:90:1a:8e:39:35:fd:13:ab:5e:6d:bc:6a:29:
8a:3c:dd:84:ac:b2:ed:a7:b3:a2:74:72:e8:0a:bf:d7:04:3c:
f5:19:55:3f:c1:12:52:32:ee:ec:f1:7a:1e:c7:cb:c5:11:a7:
de:71:95:b7:c3:b1:60:d2:11:5d:57:3b:a3:a5:cc:05:63:6e:
ba:ca:75:48:e6:4c:cc:d8:03:0b:32:db:a5:4e:ae:88:bf:8d:
58:ba:f5:c5:ca:de:e8:be:db:05:8c:b1:e1:42:f6:28:b3:aa:
68:24:1e:52:e5:81:96:f5:95:c1:19:48:6d:26:57:3e:53:43:
a5:f2:48:2c:c0:61:dc:f8:e7:fe:1c:56:71:ad:53:d6:b5:ae:
e9:7c:df:28:8a:f9:e3:e9:e5:8a:99:75:9c:07:a4:42:0a:85:
46:e2:0b:91:91:3e:94:4a:20:8a:c0:69:f5:6d:2e:57:b4:9d:
07:c8:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:04 2025 by rpki-client