Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TS-KVL8DyCfH7K131US8DBNFSsM.roa
File: TS-KVL8DyCfH7K131US8DBNFSsM.roa (raw, json)
Hash identifier: ZwP+aHml7EYUmXwleAmeG7pAhp++YMCNI2FVxoK4qTI=
Subject key identifier: 4D:2F:8A:54:BF:03:C8:27:C7:EC:AD:77:D5:44:BC:0C:13:45:4A:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB7702F28DB384F56EC3D247F57DB5170
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TS-KVL8DyCfH7K131US8DBNFSsM.roa
Signing time: Thu 21 Sep 2023 11:11:37 +0000
ROA not before: Thu 21 Sep 2023 11:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:70:2f:28:db:38:4f:56:ec:3d:24:7f:57:db:51:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 11:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d2f8a54bf03c827c7ecad77d544bc0c13454ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:b4:b4:03:51:61:26:47:4e:3a:8c:13:a3:
e4:0d:17:18:82:81:16:0f:75:d6:16:bb:28:42:7e:
77:d3:e0:69:a7:7a:5c:4b:b9:6b:f5:74:e2:ed:6b:
df:6d:9c:3b:ed:c4:2f:2f:2d:75:ce:b5:b9:28:fd:
76:e7:f8:ad:75:70:c3:4f:75:f4:e7:09:17:b7:bc:
94:4a:02:a4:73:e9:46:6f:ff:58:3e:af:9d:30:60:
63:43:0b:84:e7:84:1e:81:58:4b:2d:c6:0a:45:11:
9e:8e:ac:76:14:4f:bc:f5:a8:d3:52:a1:6e:2f:bc:
c8:dc:e9:9b:99:df:48:5b:59:9d:9b:4c:c1:52:b2:
b8:25:d0:0a:03:35:12:33:3c:f3:02:08:2b:3a:d6:
ad:21:20:68:3b:3c:f5:8c:fc:51:18:b0:37:a3:da:
3d:b5:08:bd:25:69:b6:83:27:5e:da:33:e5:db:4f:
6e:56:53:70:71:0c:a1:2b:9e:27:d6:43:e3:f3:3b:
28:eb:25:b4:23:3f:06:15:c7:32:d0:ab:8a:46:13:
36:79:c8:3e:28:af:c7:3f:ad:6a:d5:64:76:28:6f:
f4:ce:04:8d:1c:86:b7:07:3a:88:94:e9:ea:9b:c9:
41:33:48:55:2e:e0:a8:bb:8d:a1:2d:c6:da:15:e2:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:8A:54:BF:03:C8:27:C7:EC:AD:77:D5:44:BC:0C:13:45:4A:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TS-KVL8DyCfH7K131US8DBNFSsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:4c:d5:9e:00:30:2b:fb:58:0c:10:09:82:7e:d5:d4:9f:38:
60:97:3f:fe:88:bd:29:1e:1f:43:bb:e2:ff:ea:99:06:62:c6:
20:6b:83:e6:46:42:1b:24:b9:32:c1:18:88:42:7e:27:22:f5:
ec:98:b5:53:9c:42:63:73:c2:79:37:f2:53:b1:01:cb:57:42:
98:16:89:87:ba:ef:13:71:51:f2:73:64:12:73:64:49:f3:30:
41:3e:28:d2:8e:8f:d4:91:da:a6:d2:81:56:0d:72:c1:96:0d:
fb:61:41:53:b2:4b:ed:66:88:45:37:af:e6:a5:3b:02:ca:ce:
f1:b6:94:e9:47:81:be:aa:cd:bc:d2:0f:ac:a8:70:92:00:c6:
ea:e6:4d:7c:25:4f:78:c9:f8:0c:57:7d:53:fa:76:35:52:08:
1d:1d:e1:e0:2b:61:58:4b:89:22:19:b4:92:84:15:6d:40:5c:
70:d7:bf:9e:74:09:a5:5b:d7:fe:53:b7:57:7c:93:b3:2c:80:
dc:b7:4e:f1:03:a0:b1:e5:f8:70:a3:21:d6:cb:3f:18:79:c2:
ae:ee:7d:f8:e4:e4:71:6b:d4:a5:78:53:f0:f9:2c:a4:6f:f6:
ff:2f:51:f5:2e:12:5b:1f:59:30:4d:54:d2:68:01:6d:36:a4:
39:3d:a8:ee
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYq3cC8o2zhPVuw9JH9X21FwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTIxMTExMTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDJmOGE1NGJmMDNjODI3YzdlY2FkNzdkNTQ0YmMwYzEzNDU0YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4K0tANRYSZHTjqME6PkDRcYgoEW
D3XWFrsoQn530+Bpp3pcS7lr9XTi7WvfbZw77cQvLy11zrW5KP125/itdXDDT3X0
5wkXt7yUSgKkc+lGb/9YPq+dMGBjQwuE54QegVhLLcYKRRGejqx2FE+89ajTUqFu
L7zI3Ombmd9IW1mdm0zBUrK4JdAKAzUSMzzzAggrOtatISBoOzz1jPxRGLA3o9o9
tQi9JWm2gyde2jPl209uVlNwcQyhK54n1kPj8zso6yW0Iz8GFccy0KuKRhM2ecg+
KK/HP61q1WR2KG/0zgSNHIa3BzqIlOnqm8lBM0hVLuCou42hLcbaFeJ6cQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE0vilS/A8gnx+ytd9VEvAwTRUrDMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVFMtS1ZMOER5Q2ZIN0sxMzFVUzhEQk5GU3NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGNM1Z4AMCv7WAwQCYJ+
1dSfOGCXP/6IvSkeH0O74v/qmQZixiBrg+ZGQhskuTLBGIhCfici9eyYtVOcQmNz
wnk38lOxActXQpgWiYe67xNxUfJzZBJzZEnzMEE+KNKOj9SR2qbSgVYNcsGWDfth
QVOyS+1miEU3r+alOwLKzvG2lOlHgb6qzbzSD6yocJIAxurmTXwlT3jJ+AxXfVP6
djVSCB0d4eArYVhLiSIZtJKEFW1AXHDXv550CaVb1/5Tt1d8k7MsgNy3TvEDoLHl
+HCjIdbLPxh5wq7uffjk5HFr1KV4U/D5LKRv9v8vUfUuElsfWTBNVNJoAW02pDk9
qO4=
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:35 2025 by rpki-client