Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TUs50Chkbue_WHdRxHp6yUKRV98.roa
File: TUs50Chkbue_WHdRxHp6yUKRV98.roa (raw, json)
Hash identifier: JxyC0CPW++2oppIQzv/VmLFzr10l1HVIoGf67UlB+00=
Subject key identifier: 4D:4B:39:D0:28:64:6E:E7:BF:58:77:51:C4:7A:7A:C9:42:91:57:DF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AED86F733FDC0EDC4008E4F8AEEE75418
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TUs50Chkbue_WHdRxHp6yUKRV98.roa
Signing time: Sun 01 Oct 2023 23:15:59 +0000
ROA not before: Sun 01 Oct 2023 23:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:86:f7:33:fd:c0:ed:c4:00:8e:4f:8a:ee:e7:54:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 23:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d4b39d028646ee7bf587751c47a7ac9429157df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:fe:42:d5:11:4d:9f:4b:2b:b5:bf:13:c2:
fb:ef:dd:98:66:ea:60:75:85:ea:3f:e9:93:56:c8:
c4:58:04:f1:84:78:ac:f4:44:5a:f5:be:19:52:0d:
06:0d:36:37:c6:7f:d2:7a:4b:06:3b:ef:d6:f5:85:
4c:1d:10:38:33:e6:dc:18:32:29:cf:2f:60:2b:d9:
15:03:ea:2c:44:e4:94:e5:99:8f:ea:b4:93:db:09:
9f:7d:16:96:ac:34:2c:5b:97:bf:67:db:4f:3c:01:
a0:f6:10:8a:be:b6:61:7d:a5:4f:44:24:54:be:2e:
de:28:03:00:46:22:86:f9:3b:85:28:f7:f1:3f:2b:
b0:ec:6c:45:27:e8:f1:7d:d3:73:01:73:4e:12:b5:
3b:5a:15:f6:38:cc:4e:5e:6e:b5:32:30:d7:c5:96:
be:89:a7:1e:54:90:de:52:1f:4b:ae:fd:19:d1:d6:
e3:a6:91:a7:69:39:0e:b5:e3:87:22:a7:4c:63:3a:
aa:25:9b:c1:6d:09:9e:e5:a2:7e:5d:29:29:d3:79:
88:7f:ef:ca:ae:f7:5b:9b:ec:21:68:fa:b0:0a:f1:
44:95:43:94:f6:d1:38:7e:47:9e:d1:17:ed:ab:6a:
da:da:93:9e:d9:60:da:0f:12:5e:68:45:44:22:00:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4B:39:D0:28:64:6E:E7:BF:58:77:51:C4:7A:7A:C9:42:91:57:DF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TUs50Chkbue_WHdRxHp6yUKRV98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:79:51:5c:50:3e:a7:46:c7:25:f3:10:ea:13:93:b0:ac:a7:
bc:97:2b:90:4a:09:e8:bb:bc:27:ff:e8:a8:5f:af:9c:fa:93:
91:99:34:17:9d:62:0f:76:d1:ad:61:11:b2:3e:d5:83:39:46:
a7:d0:c8:91:f3:00:c6:07:27:2d:c2:ea:d5:29:af:fd:72:c4:
23:2b:c8:61:22:bb:54:a8:f3:aa:51:bf:30:24:fc:28:17:d9:
46:8a:2c:9e:99:e6:97:14:6d:de:ed:df:4b:b9:fa:e2:7d:0e:
0b:98:be:16:3f:8a:88:1c:0c:61:08:81:67:58:32:51:1c:8c:
2b:39:d9:2c:0f:6b:7c:8c:43:55:8c:81:b9:c2:54:6e:53:03:
54:81:15:34:c8:6e:ee:29:34:3a:55:82:aa:3a:af:e1:5f:a5:
62:0a:26:16:2c:41:ab:dd:6a:f6:b6:4d:9c:b2:2b:6f:40:ee:
3e:5e:7d:64:99:4d:b1:27:50:25:f0:15:0d:26:f4:76:20:9e:
c6:e7:7d:a5:69:77:ec:9b:ad:d8:d0:9e:23:28:ca:4c:6c:18:
0a:3e:aa:ae:c7:e6:6a:e3:e4:54:72:76:de:21:c6:d1:88:69:
3a:d5:64:dd:3a:a0:b3:8a:5f:04:ea:0d:66:32:39:f3:38:ff:
e9:d9:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:18:26 2025 by rpki-client