Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TgAzaqay7YD_KXo7v5TgTusQer4.roa
File: TgAzaqay7YD_KXo7v5TgTusQer4.roa (raw, json)
Hash identifier: FUfTAdtpbfol4Jb3uEHASCSCoON6WxDbrcQpahsHdI4=
Subject key identifier: 4E:00:33:6A:A6:B2:ED:80:FF:29:7A:3B:BF:94:E0:4E:EB:10:7A:BE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5F736165DAF8B7F77E3B7EF995626431
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TgAzaqay7YD_KXo7v5TgTusQer4.roa
Signing time: Tue 12 Dec 2023 19:14:06 +0000
ROA not before: Tue 12 Dec 2023 19:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:73:61:65:da:f8:b7:f7:7e:3b:7e:f9:95:62:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 19:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e00336aa6b2ed80ff297a3bbf94e04eeb107abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:d4:b9:13:8e:fe:ae:ae:ad:39:2f:13:2e:
0c:1d:0e:aa:54:32:27:f1:e3:d7:4c:bf:b0:ec:95:
ee:35:58:f7:33:f2:06:79:a2:6d:65:db:c4:a7:35:
bf:51:e3:2e:77:bd:79:d6:b7:69:94:72:a2:f9:79:
35:62:26:73:3b:da:1e:7f:2c:ab:ff:5f:b3:f1:90:
01:0b:e3:97:49:63:32:49:35:ce:4e:ea:50:1c:bc:
2c:d6:45:03:ec:a1:0d:13:1a:ac:ca:a0:7b:b7:59:
46:1f:4c:ba:de:fd:79:94:5c:9a:59:f4:b3:e0:5e:
73:ab:ea:0d:28:67:1e:e0:4d:68:53:70:cb:ec:6a:
ce:74:57:78:cc:df:bf:64:d2:7d:cf:fc:b7:73:fe:
4b:3a:5c:6d:11:52:95:7a:24:65:8c:a6:00:5f:eb:
75:35:f3:d3:29:03:00:f8:89:ed:0d:07:b7:65:3a:
a4:2d:9a:84:a1:19:4f:4b:5c:35:78:a0:79:b6:b8:
ae:6b:d0:c2:72:a0:41:74:06:7f:d0:eb:fa:2c:c9:
a2:b3:bd:c7:81:95:bb:43:a1:c8:80:e6:b9:ee:95:
c2:83:d9:a1:21:59:e0:66:e8:d8:d7:e8:04:2e:40:
39:ee:9d:28:04:05:10:1e:06:46:f4:41:9d:6b:f1:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:00:33:6A:A6:B2:ED:80:FF:29:7A:3B:BF:94:E0:4E:EB:10:7A:BE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TgAzaqay7YD_KXo7v5TgTusQer4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:00:c3:cb:0a:22:9f:b7:8b:d0:a9:fb:df:15:79:6a:95:9b:
8a:f1:d9:84:e4:f4:4a:29:45:3a:09:9f:09:a5:d9:7b:d9:f0:
b0:87:9c:05:8e:9f:a7:7b:00:2f:e9:00:b6:75:42:e5:f5:6f:
4f:ea:0d:39:ee:46:d9:ff:7c:d9:ce:85:e7:31:f2:a8:6c:c5:
f5:6f:d5:d0:35:09:59:89:ce:41:24:b9:d7:2c:1d:a4:f4:15:
a6:17:1d:db:2a:9a:c6:bc:da:28:14:ae:89:44:c2:c3:6e:d5:
84:b9:17:df:28:0d:f0:12:9e:b9:9d:a1:45:6f:b5:0b:a7:8e:
f4:7b:a1:41:8e:d5:83:85:ff:e0:77:a1:7e:13:c7:d5:49:bb:
a6:47:0f:b5:97:5f:eb:6c:37:47:c5:34:37:9c:19:7e:dd:51:
13:a0:67:a2:eb:33:07:0e:1a:d2:d2:14:03:3b:96:8d:5d:26:
ff:fd:2f:43:14:f7:27:ab:41:bb:c7:47:e4:a0:a6:1c:71:45:
93:6b:e5:0f:06:a8:8f:f3:e7:bb:ec:f7:e9:cd:62:2d:10:ed:
c1:7f:05:e5:55:cd:38:38:36:af:4a:c1:cf:c3:c5:a8:4f:71:
dc:cf:e9:93:7b:41:8c:cc:11:0a:a3:d0:2c:2c:3b:9f:7a:04:
a8:ab:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:12:33 2025 by rpki-client