Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Tn89f4ToWk4KnP1ZGKa5I7h23yI.roa
File: Tn89f4ToWk4KnP1ZGKa5I7h23yI.roa (raw, json)
Hash identifier: boPIPFX+1K800Xkd1iSsEi+xwbNw/Crt4H3M7z/eUoU=
Subject key identifier: 4E:7F:3D:7F:84:E8:5A:4E:0A:9C:FD:59:18:A6:B9:23:B8:76:DF:22
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC904803E302A7A52DD740EC46FC0E13C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Tn89f4ToWk4KnP1ZGKa5I7h23yI.roa
Signing time: Mon 13 Nov 2023 14:09:57 +0000
ROA not before: Mon 13 Nov 2023 14:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:04:80:3e:30:2a:7a:52:dd:74:0e:c4:6f:c0:e1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 14:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e7f3d7f84e85a4e0a9cfd5918a6b923b876df22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:31:32:7f:07:19:89:22:74:3c:4d:c0:ab:
27:0c:5b:63:06:ed:b1:6c:bf:e1:c2:76:ae:c4:cf:
0d:94:a9:f6:c3:56:56:37:5c:c7:de:e2:6a:fb:d2:
d0:dd:cf:5c:84:99:bb:fe:09:bb:5f:94:ea:96:fb:
e5:ce:3a:46:90:a2:09:59:5e:da:da:86:6f:69:ce:
3d:39:7c:82:fa:de:5c:ba:72:6d:a5:3f:91:97:8e:
7c:6e:cb:79:66:dd:36:2e:df:6e:ca:e2:f6:13:2d:
ac:a1:38:7b:2c:7a:5a:23:a7:40:0e:08:ec:45:e9:
88:d6:ba:f8:5f:40:6c:72:3a:97:37:fb:f9:57:1a:
c8:ca:ae:87:b5:51:0e:9f:59:bd:1b:bf:1a:34:a0:
fa:e2:2b:59:a0:d1:91:7f:10:d8:00:45:65:24:8a:
4b:aa:e8:f8:58:a0:2d:f3:32:f4:0f:35:4c:1d:18:
f1:89:3b:72:a3:9b:e7:84:94:04:86:8b:a6:ed:7b:
b4:0c:c3:c0:84:e9:38:e3:04:a4:d5:1d:aa:83:d8:
7a:9e:5a:21:87:51:ea:a9:e2:3e:0b:a1:44:0f:27:
ba:30:94:1e:4b:3e:1f:15:e5:e0:fc:e6:cb:d3:38:
ff:ba:2c:08:65:13:0d:8f:c6:a3:7d:78:6f:37:73:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:3D:7F:84:E8:5A:4E:0A:9C:FD:59:18:A6:B9:23:B8:76:DF:22
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Tn89f4ToWk4KnP1ZGKa5I7h23yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:c9:ae:4d:df:89:c9:d8:18:a4:d1:bb:e8:10:e1:3d:4d:d6:
0a:c9:12:25:8f:9a:62:19:22:1a:19:64:a1:c5:c1:8c:7e:2c:
c0:cc:a3:3b:b2:d8:68:93:5a:52:da:09:da:26:13:a9:65:bd:
ab:d0:13:9c:82:f0:8b:85:cc:18:80:9e:33:ed:d5:87:e8:a7:
61:80:f2:24:cb:79:8f:b6:f7:85:e1:25:4c:82:b9:79:bd:8c:
85:13:5f:57:07:e6:d7:50:92:dc:b1:fb:47:9d:f1:1b:06:ce:
fd:ac:4f:c7:99:e5:69:26:85:c5:a6:61:fc:b5:7c:9b:69:17:
4d:d3:03:59:63:af:33:a1:29:c6:dc:32:19:d1:7e:a2:ae:0a:
e9:54:a0:19:2e:10:6a:eb:be:32:72:a6:7a:d1:0e:a8:03:f7:
56:50:ad:64:ab:a8:d4:b5:9e:21:5c:a1:0f:89:b4:28:be:5e:
af:93:16:64:e1:6b:2c:0f:2f:f2:f9:bc:e6:bb:9b:cd:48:91:
8a:c2:25:88:9a:45:52:17:e6:4d:57:64:79:c9:d2:bb:df:f2:
70:c6:89:3e:e7:85:ba:a6:7f:6b:91:c7:e2:8d:ad:13:4a:00:
1f:46:7b:18:ea:63:02:40:67:05:7b:dc:a1:71:e2:cb:64:6d:
db:14:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:57:39 2025 by rpki-client