Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TsiZuidTM_bLiXjyuf_n_hTOvkE.roa
File: TsiZuidTM_bLiXjyuf_n_hTOvkE.roa (raw, json)
Hash identifier: cqZYrWvzuk/pLKLI0QZhHzJNA3ufwMPIIA2QSinpTy8=
Subject key identifier: 4E:C8:99:BA:27:53:33:F6:CB:89:78:F2:B9:FF:E7:FE:14:CE:BE:41
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF34F3FB2962101A4B334DD09649469F5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TsiZuidTM_bLiXjyuf_n_hTOvkE.roa
Signing time: Tue 03 Oct 2023 02:12:51 +0000
ROA not before: Tue 03 Oct 2023 02:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f3:4f:3f:b2:96:21:01:a4:b3:34:dd:09:64:94:69:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 02:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ec899ba275333f6cb8978f2b9ffe7fe14cebe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:18:fc:e3:2d:77:5a:af:79:60:f2:14:97:
bf:a4:9b:88:a0:98:7f:37:20:65:c4:fb:d9:c1:c6:
2f:d0:1e:cc:d8:5e:e7:cd:b8:73:a8:0a:59:af:f5:
df:ee:45:40:aa:c7:c9:d5:7f:51:ef:e2:12:c6:63:
14:aa:3b:b0:ea:ea:02:8c:9d:f9:c2:a6:ba:6b:b3:
93:b3:84:9c:2a:73:13:46:88:e0:e9:4b:b3:5b:97:
ab:eb:78:68:43:32:1f:d9:04:c7:5c:4f:46:a1:c0:
71:0c:0f:f6:56:dc:95:1e:98:79:87:4d:e3:8e:9c:
92:64:60:ba:7f:61:88:7e:d4:da:17:e2:78:f7:9d:
e3:56:3f:4c:d3:bc:e0:11:47:9c:00:13:dc:1a:cb:
bf:22:6a:f6:e0:6c:c0:7f:e0:95:b0:40:6e:cc:20:
ca:5a:64:03:74:bf:09:6f:6c:20:95:aa:da:9f:7a:
c7:30:0c:05:3e:86:63:9c:7e:d6:0a:81:50:30:4f:
f1:67:8a:c3:9e:3e:d9:b6:47:db:c5:20:cf:c5:70:
17:61:09:4e:44:0f:19:5a:28:cc:46:55:05:40:de:
6c:3b:79:11:57:38:97:35:a3:46:c6:cd:4d:a9:86:
27:09:32:f8:44:fc:9a:66:03:71:4e:ab:39:f3:32:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:99:BA:27:53:33:F6:CB:89:78:F2:B9:FF:E7:FE:14:CE:BE:41
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/TsiZuidTM_bLiXjyuf_n_hTOvkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:01:66:94:b0:65:bc:cc:80:6e:3c:da:e8:cb:86:f3:1a:94:
b6:e7:9e:f3:24:d1:ea:29:b2:d7:ed:94:ec:a7:14:cc:f4:fa:
63:e3:5f:12:31:17:49:db:c2:b7:1a:f1:ad:25:d6:8f:ea:77:
19:55:43:e5:92:28:4f:80:35:d0:fc:93:ea:a2:91:9e:1c:92:
38:66:d8:d0:90:67:94:ab:61:b7:d1:00:11:85:d9:9b:cd:d2:
6a:3e:be:9f:5d:06:02:ca:b5:da:a2:ee:78:c7:2c:41:54:45:
04:b8:9c:ae:39:1c:88:e7:c9:b2:76:21:ff:2c:ba:1a:0e:9b:
02:11:47:40:7d:f5:9d:10:4b:21:ec:66:37:ee:9c:ab:3a:b4:
cc:a1:d6:bc:5c:44:85:54:9b:c5:f8:92:a1:aa:fe:d8:fa:b8:
44:bb:65:40:44:1b:ff:01:8d:1f:fb:ab:b0:b3:12:02:d3:a2:
15:bb:ee:8f:84:cd:0f:9d:80:9d:59:fc:aa:84:12:ea:35:88:
8f:d6:d3:07:33:67:bb:bf:ee:a1:2a:ee:30:b5:5f:3f:20:38:
fb:b7:1d:a4:88:71:31:a0:2f:6b:bf:30:26:85:4e:41:c1:5a:
31:c9:58:99:ed:74:74:91:d3:83:24:17:a9:dc:aa:a4:60:bb:
9b:af:bc:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrzTz+yliEBpLM03QlklGn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDAzMDIxMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWM4OTliYTI3NTMzM2Y2Y2I4OTc4ZjJiOWZmZTdmZTE0Y2ViZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSEY/OMtd1qveWDyFJe/pJuIoJh/
NyBlxPvZwcYv0B7M2F7nzbhzqApZr/Xf7kVAqsfJ1X9R7+ISxmMUqjuw6uoCjJ35
wqa6a7OTs4ScKnMTRojg6UuzW5er63hoQzIf2QTHXE9GocBxDA/2VtyVHph5h03j
jpySZGC6f2GIftTaF+J4953jVj9M07zgEUecABPcGsu/Imr24GzAf+CVsEBuzCDK
WmQDdL8Jb2wglaran3rHMAwFPoZjnH7WCoFQME/xZ4rDnj7ZtkfbxSDPxXAXYQlO
RA8ZWijMRlUFQN5sO3kRVziXNaNGxs1NqYYnCTL4RPyaZgNxTqs58zJ6pQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE7ImbonUzP2y4l48rn/5/4Uzr5BMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvVHNpWnVpZFRNX2JMaVhqeXVmX25faFRPdmtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADcBZpSwZbzMgG482ujL
hvMalLbnnvMk0eopstftlOynFMz0+mPjXxIxF0nbwrca8a0l1o/qdxlVQ+WSKE+A
NdD8k+qikZ4ckjhm2NCQZ5SrYbfRABGF2ZvN0mo+vp9dBgLKtdqi7njHLEFURQS4
nK45HIjnybJ2If8suhoOmwIRR0B99Z0QSyHsZjfunKs6tMyh1rxcRIVUm8X4kqGq
/tj6uES7ZUBEG/8BjR/7q7CzEgLTohW77o+EzQ+dgJ1Z/KqEEuo1iI/W0wczZ7u/
7qEq7jC1Xz8gOPu3HaSIcTGgL2u/MCaFTkHBWjHJWJntdHSR04MkF6ncqqRgu5uv
vK0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:26 2025 by rpki-client