Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TmH2nPgKw7-f0rGGAWTCv2Z0H6c.roa
File: TmH2nPgKw7-f0rGGAWTCv2Z0H6c.roa (raw, json)
Hash identifier: jdAoAejF2NLDyXaQCs4a9BOE3B5KvPxU0TH3ryJetzg=
Subject key identifier: 4E:61:F6:9C:F8:0A:C3:BF:9F:D2:B1:86:01:64:C2:BF:66:74:1F:A7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA6EC26A8921AFB4ED8B3F9A89435C753
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TmH2nPgKw7-f0rGGAWTCv2Z0H6c.roa
Signing time: Mon 06 Nov 2023 23:16:16 +0000
ROA not before: Mon 06 Nov 2023 23:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:ec:26:a8:92:1a:fb:4e:d8:b3:f9:a8:94:35:c7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 23:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e61f69cf80ac3bf9fd2b1860164c2bf66741fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:6f:3a:28:ed:f9:d8:ec:3f:8d:3c:4f:e0:
2d:5c:04:0b:a6:08:71:d5:3f:9c:92:4b:dc:a9:90:
40:99:0b:11:4c:6d:77:6c:a1:5e:83:43:22:20:a3:
93:e3:ed:9d:74:83:5b:06:6a:38:a3:90:04:86:9b:
d7:bc:34:b1:b3:d4:88:31:0a:1d:2e:82:ca:0e:aa:
33:e0:cb:f5:c7:0d:09:a2:a7:bd:81:30:19:82:34:
d7:c0:ea:1c:c1:11:b2:2d:88:f5:53:25:2e:a6:c3:
5b:02:21:e0:a8:aa:6a:78:d4:27:d3:cb:ba:d6:5d:
27:d3:15:1d:8b:2a:b2:d1:97:a8:d2:35:0d:97:f9:
30:23:a6:8f:5e:5e:29:72:62:2c:5e:f6:61:ad:2d:
00:5d:3e:eb:5e:dd:96:d6:1b:cc:6e:50:77:9c:5c:
1c:04:bf:fa:67:fa:0e:ac:12:52:cc:8a:63:87:5d:
3e:7a:ba:35:1e:d2:63:eb:47:57:91:db:d3:5d:65:
5c:44:1e:95:13:c9:e4:59:a4:63:a4:88:d1:54:b1:
46:2d:d0:bb:e0:02:1b:58:f2:cf:ed:c7:23:49:24:
34:df:d9:93:4b:f9:d1:c4:36:4b:f2:b1:33:e7:da:
3e:f2:7b:93:1b:25:01:b7:62:37:7e:69:93:36:ec:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:61:F6:9C:F8:0A:C3:BF:9F:D2:B1:86:01:64:C2:BF:66:74:1F:A7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TmH2nPgKw7-f0rGGAWTCv2Z0H6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:b6:f5:71:e2:7a:bc:bb:49:b8:10:62:6c:6e:bd:02:3d:50:
57:31:60:5b:ba:45:f0:79:ec:03:c3:11:8f:ce:29:d8:05:5a:
bc:09:c3:f2:25:59:0a:38:d1:96:19:c2:89:a9:12:c4:72:3b:
28:11:be:07:a2:c4:ed:2a:fb:9d:fb:d5:1d:07:22:46:ba:0b:
c0:43:16:5d:e1:24:78:44:16:48:8e:10:a8:40:33:5e:27:ef:
6a:9c:54:56:8f:1b:4a:a5:cb:26:64:44:78:2e:db:20:64:48:
ed:bf:a9:b1:56:92:7e:c2:5d:98:bb:70:89:2c:6c:80:cd:1d:
54:0b:59:29:a1:3b:9c:2b:f4:67:80:91:7f:b8:d1:44:9b:80:
c8:20:5e:9e:18:2a:c0:70:21:d9:ca:cf:f8:21:e0:58:fd:72:
10:42:5f:63:6f:c5:aa:ec:d9:d5:64:f0:1e:0c:db:b5:14:fd:
0a:5a:c7:f9:50:9b:bd:ea:92:ce:3a:96:d5:d6:2b:6a:1f:0a:
46:01:6b:97:e3:73:54:62:35:76:5e:9e:24:fa:ed:d2:9e:18:
b6:92:bf:25:a5:52:2a:fc:1b:02:90:94:d4:33:f7:f5:8d:d7:
ee:b7:27:5a:7b:86:8c:77:b5:02:3c:e0:94:40:ab:0e:48:10:
55:d7:93:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:16 2025 by rpki-client