Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TrSmFJXXkcLv5BeFp5hwdFEARfQ.roa
File: TrSmFJXXkcLv5BeFp5hwdFEARfQ.roa (raw, json)
Hash identifier: pQGQB+pbwN8nny06oyY2A2UcL2jq0f3p0kVXoQTv6H0=
Subject key identifier: 4E:B4:A6:14:95:D7:91:C2:EF:E4:17:85:A7:98:70:74:51:00:45:F4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6BE481C16DD49D11D20E4F353B55BF99
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TrSmFJXXkcLv5BeFp5hwdFEARfQ.roa
Signing time: Fri 15 Dec 2023 05:13:06 +0000
ROA not before: Fri 15 Dec 2023 05:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6b:e4:81:c1:6d:d4:9d:11:d2:0e:4f:35:3b:55:bf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 05:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb4a61495d791c2efe41785a7987074510045f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:c0:19:06:f1:3e:7b:9c:f6:9d:ba:69:5e:
65:54:52:e5:b0:61:d7:6c:e4:9d:d4:db:e3:ca:77:
0b:77:0f:4a:e3:40:5c:7c:38:70:75:a7:13:8e:0f:
70:d5:41:f6:14:bc:36:96:f7:22:d6:36:15:4c:94:
ab:45:92:67:05:2e:7f:ee:62:21:53:8b:70:44:6e:
1f:4d:1f:8f:20:5c:72:20:a5:1b:7a:21:1b:d6:34:
09:fd:f1:40:d0:a3:43:ae:ec:bb:78:13:be:84:8c:
07:8f:5c:12:b4:9b:0f:23:71:9c:e7:1a:d7:38:77:
57:f6:a5:cb:6c:cf:2d:69:eb:1d:cc:db:ec:3a:24:
36:f2:b6:f6:3a:43:66:c4:63:af:b2:cb:64:dc:c5:
6b:69:64:36:72:25:46:f0:4b:9c:fe:8e:f1:f8:2b:
62:ab:dc:8b:b2:3e:bf:64:f8:d9:42:30:6e:5f:2d:
db:57:b1:28:ad:3c:19:d2:6f:e5:2a:f8:f8:1d:fb:
9d:b5:53:89:47:6d:32:09:d6:05:18:7a:82:13:9d:
08:a9:bc:dc:72:eb:7c:ed:9a:1e:d7:51:0c:02:ea:
d5:ef:5b:35:ea:3c:32:12:90:5b:8b:3a:02:f3:4b:
fe:7a:2d:9f:5c:77:86:1e:79:eb:6a:95:4c:84:b3:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B4:A6:14:95:D7:91:C2:EF:E4:17:85:A7:98:70:74:51:00:45:F4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TrSmFJXXkcLv5BeFp5hwdFEARfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c4:d3:15:59:42:d7:18:b9:68:7e:03:3e:c2:19:99:04:25:50:
25:1e:3a:58:7b:b0:34:c4:1c:90:5d:95:f0:58:77:c8:d9:37:
e0:3a:1b:0a:02:4e:08:df:42:a9:3e:7f:b6:d3:96:05:0b:1d:
a6:7e:65:06:28:a1:a8:fd:a7:9b:90:2a:7d:4a:1d:1b:2a:21:
61:4b:ee:10:ec:b9:98:79:4e:34:77:63:7a:61:61:f0:07:42:
6a:e2:96:5d:fe:56:a7:1e:6d:5d:92:12:8f:99:c3:de:d1:27:
ff:f1:ba:9b:d5:53:10:04:e7:51:d5:28:bd:61:59:f4:47:a1:
3f:21:35:15:5f:ca:6a:2d:12:c3:c0:d8:37:85:65:5a:5b:dc:
8b:e0:b0:ed:36:a9:ae:1a:4f:10:89:0e:f8:c4:a6:04:a9:d4:
a3:90:7d:32:ff:3a:e2:91:5d:e2:c6:a5:f4:46:b9:ef:a7:cb:
87:1d:0c:97:10:04:00:e0:92:44:0f:67:b0:17:d2:ab:21:9e:
b9:6c:d2:fd:13:0d:ec:59:e0:e0:76:13:ca:a1:43:08:7e:54:
a5:a5:d9:b9:b4:e7:93:9e:f4:9d:05:75:62:43:5d:23:c0:09:
9b:7f:8c:3f:30:11:84:5f:b6:7e:a2:d8:f2:d2:5e:ac:44:75:
2c:b8:dd:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxr5IHBbdSdEdIOTzU7Vb+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE1MDUxMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWI0YTYxNDk1ZDc5MWMyZWZlNDE3ODVhNzk4NzA3NDUxMDA0NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9bAGQbxPnuc9p26aV5lVFLlsGHX
bOSd1NvjyncLdw9K40BcfDhwdacTjg9w1UH2FLw2lvci1jYVTJSrRZJnBS5/7mIh
U4twRG4fTR+PIFxyIKUbeiEb1jQJ/fFA0KNDruy7eBO+hIwHj1wStJsPI3Gc5xrX
OHdX9qXLbM8taesdzNvsOiQ28rb2OkNmxGOvsstk3MVraWQ2ciVG8Euc/o7x+Cti
q9yLsj6/ZPjZQjBuXy3bV7EorTwZ0m/lKvj4HfudtVOJR20yCdYFGHqCE50Iqbzc
cut87Zoe11EMAurV71s16jwyEpBbizoC80v+ei2fXHeGHnnrapVMhLPbdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE60phSV15HC7+QXhaeYcHRRAEX0MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVHJTbUZKWFhrY0x2NUJlRnA1aHdkRkVBUmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMTTFVlC1xi5aH4DPsIZ
mQQlUCUeOlh7sDTEHJBdlfBYd8jZN+A6GwoCTgjfQqk+f7bTlgULHaZ+ZQYooaj9
p5uQKn1KHRsqIWFL7hDsuZh5TjR3Y3phYfAHQmrill3+VqcebV2SEo+Zw97RJ//x
upvVUxAE51HVKL1hWfRHoT8hNRVfymotEsPA2DeFZVpb3IvgsO02qa4aTxCJDvjE
pgSp1KOQfTL/OuKRXeLGpfRGue+ny4cdDJcQBADgkkQPZ7AX0qshnrls0v0TDexZ
4OB2E8qhQwh+VKWl2bm055Oe9J0FdWJDXSPACZt/jD8wEYRftn6i2PLSXqxEdSy4
3WA=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:34 2025 by rpki-client