Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TT_TTi3HScBAdZxk-vENqhdQPi4.roa
File: TT_TTi3HScBAdZxk-vENqhdQPi4.roa (raw, json)
Hash identifier: EQXvd1UqYRr0E0mACzYhHW3H3GNexpyuyJMJNvIZqz4=
Subject key identifier: 4D:3F:D3:4E:2D:C7:49:C0:40:75:9C:64:FA:F1:0D:AA:17:50:3E:2E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD9BF9A3A0A7172684F92CA35293D22A1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TT_TTi3HScBAdZxk-vENqhdQPi4.roa
Signing time: Thu 28 Sep 2023 03:05:27 +0000
ROA not before: Thu 28 Sep 2023 03:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:d9bf:848d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:bf:9a:3a:0a:71:72:68:4f:92:ca:35:29:3d:22:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 03:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d3fd34e2dc749c040759c64faf10daa17503e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8b:60:de:dd:59:0a:49:7b:fa:c1:31:5f:4c:
f9:2a:07:11:03:48:12:62:fc:b1:22:37:93:31:ed:
94:28:88:aa:18:ea:66:e1:67:6b:05:a9:d4:09:55:
e5:af:10:1e:bf:bb:f4:40:47:c1:c8:f4:7c:17:9e:
b6:d9:7f:91:f0:69:1f:ff:57:d0:94:50:79:98:ed:
4d:0d:8b:ea:4e:de:85:9a:27:c2:74:ac:95:4a:88:
d9:c6:79:76:83:d3:d5:b0:6b:c0:52:17:11:ac:c5:
b7:fb:b0:4a:e3:4b:86:b9:3e:69:24:e7:4a:d9:d8:
f2:59:39:1d:29:74:bd:96:53:14:70:f3:49:a7:8b:
1a:0e:c6:a4:c1:38:c6:87:9e:3d:e5:22:9a:73:93:
84:b2:df:64:d2:d0:eb:16:30:e5:55:5f:7b:f6:d5:
bb:48:be:bc:7b:a2:56:3d:b8:da:d6:57:d7:97:da:
96:6b:4d:11:5c:af:8d:b5:59:f1:21:b7:0d:c1:ff:
9b:99:e6:82:d1:5b:6c:b8:05:4e:29:25:c3:2b:76:
7f:5a:cf:2c:7b:ff:10:e6:9a:fa:be:fc:14:dd:1e:
ac:e1:6a:25:89:52:68:b5:04:b8:f2:e8:70:10:25:
e5:c0:27:71:c3:69:5c:1d:94:1a:b2:fe:7c:d7:bf:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:D3:4E:2D:C7:49:C0:40:75:9C:64:FA:F1:0D:AA:17:50:3E:2E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TT_TTi3HScBAdZxk-vENqhdQPi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:25:90:35:76:f1:cb:c2:7d:2b:41:6b:54:fa:c7:4d:45:b4:
1d:ec:9e:55:c1:e9:58:c0:48:c7:56:44:08:e9:27:8a:12:41:
f3:ea:46:f1:91:63:31:32:4e:c2:b1:0d:b5:ff:b7:61:45:01:
d0:54:ed:bc:da:ec:21:2d:75:53:a9:2f:9a:e1:af:68:b1:a1:
ab:d0:02:4a:c1:47:03:aa:5e:8e:48:f9:ea:d3:23:6f:c7:1f:
4c:ef:36:8d:c6:18:5b:94:4e:fa:c9:6c:eb:e7:3d:b2:4d:eb:
3b:86:be:99:bd:fb:a5:11:69:70:7e:0d:62:ef:76:2f:34:6b:
bc:87:29:34:0e:46:9d:8f:8a:02:be:05:29:3f:3c:d4:5d:4d:
0d:d1:71:56:d1:b9:28:d9:42:12:87:a5:1a:44:1b:fb:75:75:
ba:0e:d0:9c:81:56:08:3d:04:5f:96:fc:b7:d3:68:a7:26:34:
67:dc:33:ff:55:a0:d4:a2:70:91:dc:7f:cf:80:7c:3f:34:20:
31:61:4e:ed:84:2b:10:90:4e:46:19:45:88:87:4d:3d:3d:76:
50:30:83:26:79:59:c9:f6:bd:40:56:56:e9:40:17:02:df:64:
00:33:2f:13:42:a2:5b:63:15:fe:92:f7:8e:40:44:ed:5b:d4:
e5:c3:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:11:58 2025 by rpki-client